Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prilis pomaly NB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Misel1
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 08 črc 2005 07:19

Prilis pomaly NB

#1 Příspěvek od Misel1 »

Dobry vecer, prosim o kontrolu logu. NB zacal byt prilis pomaly. Dekuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Myšička at 2018-08-17 20:12:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 31 GB (31%) free of 102 GB
Total RAM: 4009 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:12:26, on 17.8.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19101)
Boot mode: Normal

Running processes:
C:\Windows\vsnp2uvc.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files\trend micro\Myšička.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ts.fujitsu.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [IndicatorUtility] "C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe"
O4 - HKLM\..\Run: [FUJ02B1_Apps] "%PROGRAMFILES(X86)%\Fujitsu\FUJ02B1\CheckBatteryPack.exe" -ViewTarget -langid 0x411
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [TomTom MySports Connect.exe] "C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe" --hideSplashScreen
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PFNService - FUJITSU LIMITED - C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: ASUS Virtual MFP Service (UsbService) - Unknown owner - C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10534 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 19477520
\??\C:\Windows\system32\conhost.exe "891999623-1044364568-1086429373-907759712-1158131531-1451999563-585631007-412496722
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
WLIDSvcM.exe 512
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe"
"C:\Windows\vsnp2uvc.exe"
"C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="5980.0.1306094053\75454833" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - "C:\Users\Myšička\AppData\LocalLow\Mozilla\Temp-{5c1fd7cf-9186-446b-bdb7-4a829ad63eb8}" 5980 "\\.\pipe\gecko-crash-server-pipe.5980" 1248 gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="5980.3.1163714587\1714913648" -childID 1 -isForBrowser -prefsHandle 1516 -prefsLen 10447 -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 5980 "\\.\pipe\gecko-crash-server-pipe.5980" 728 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="5980.13.598565516\1396631806" -childID 2 -isForBrowser -prefsHandle 2588 -prefsLen 13704 -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 5980 "\\.\pipe\gecko-crash-server-pipe.5980" 2692 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="5980.27.1335726635\301135356" -childID 4 -isForBrowser -prefsHandle 7184 -prefsLen 14438 -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 5980 "\\.\pipe\gecko-crash-server-pipe.5980" 7172 tab

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="5980.34.415987647\1252266388" -childID 5 -isForBrowser -prefsHandle 2984 -prefsLen 14438 -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 5980 "\\.\pipe\gecko-crash-server-pipe.5980" 2840 tab
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 544 548 556 65536 552
"C:\Users\Myšička\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Myšička\AppData\Roaming\Mozilla\Firefox\Profiles\jksz0tle.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.171 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2010-11-03 10228224]
"LoadFUJ02E3"=C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [2010-06-08 45680]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-12-07 11663464]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-20 168216]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-20 416024]
"LoadFujitsuQuickTouch"=C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [2010-07-16 162416]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\ecmdS.exe [2017-11-13 324216]
"snp2uvc"=C:\Windows\vsnp2uvc.exe [2009-08-13 662016]
"LoadBtnHnd"=C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2010-07-09 21616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"TomTom MySports Connect.exe"=C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe --hideSplashScreen []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FDM7]
C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [2009-11-26 164712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PfNet]
C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [2010-10-08 6311424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSUTility]
C:\Program Files\Fujitsu\PSUtility\TrayManager.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2uvc]
C:\Windows\vsnp2uvc.exe [2009-08-13 662016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirror Tray icon]
C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2009-07-08 162912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IndicatorUtility"=C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [2010-09-30 48752]
"FUJ02B1_Apps"=C:\Program Files (x86)\Fujitsu\FUJ02B1\CheckBatteryPack.exe [2018-02-05 365304]

C:\Users\Myšička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-08-17 18:12:35 ----SHD---- C:\Config.Msi
2018-08-16 17:29:21 ----A---- C:\Windows\SYSWOW64\shell32.dll
2018-08-16 17:29:21 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\winsrv.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\srcore.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\srclient.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\conhost.exe
2018-08-16 17:29:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-08-16 17:29:20 ----A---- C:\Windows\system32\shell32.dll
2018-08-16 17:29:20 ----A---- C:\Windows\system32\ntvdm64.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-08-16 17:29:19 ----A---- C:\Windows\SYSWOW64\user.exe
2018-08-16 17:29:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-08-16 17:29:19 ----A---- C:\Windows\system32\KernelBase.dll
2018-08-16 17:29:19 ----A---- C:\Windows\system32\kernel32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wfapigp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\wow64cpu.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\wdigest.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\sspisrv.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\secur32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\processr.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\netio.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\intelppm.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\amdppm.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\dnsrslvr.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\csrsrv.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cscdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cscapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cryptbase.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\bcrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\appidsvc.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\appidapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\apisetschema.dll
2018-08-16 17:29:17 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-08-16 17:29:17 ----A---- C:\Windows\system32\smss.exe
2018-08-16 17:29:17 ----A---- C:\Windows\system32\rpchttp.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\ntdll.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\hal.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\csc.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\appid.sys
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\ole32.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\wow64.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\wkssvc.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\TSpkg.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\sspicli.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\schannel.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\rpcss.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\ncrypt.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\msv1_0.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\lsass.exe
2018-08-16 17:29:16 ----A---- C:\Windows\system32\drivers\amdk8.sys
2018-08-16 17:29:16 ----A---- C:\Windows\system32\dnsapi.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\cscsvc.dll
2018-08-16 17:29:15 ----A---- C:\Windows\system32\win32k.sys
2018-08-16 17:29:15 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-08-16 17:29:15 ----A---- C:\Windows\system32\MPSSVC.dll
2018-08-16 17:29:15 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-08-16 17:29:14 ----A---- C:\Windows\system32\rpcrt4.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\lsasrv.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\kerberos.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\advapi32.dll
2018-08-16 17:29:12 ----A---- C:\Windows\system32\ole32.dll
2018-08-16 17:29:12 ----A---- C:\Windows\system32\mshtml.dll
2018-08-16 17:29:10 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-08-16 17:29:08 ----A---- C:\Windows\system32\wow64win.dll
2018-08-16 17:29:08 ----A---- C:\Windows\system32\ieframe.dll
2018-08-16 17:29:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-08-16 17:29:04 ----A---- C:\Windows\system32\wininet.dll
2018-08-16 17:29:04 ----A---- C:\Windows\system32\jscript9.dll
2018-08-16 17:29:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-08-16 17:29:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-08-16 17:29:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-08-16 17:28:59 ----A---- C:\Windows\system32\urlmon.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\comcat.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\zipfldr.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\ucrtbase.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\rstrui.exe
2018-08-16 17:28:58 ----A---- C:\Windows\system32\iertutil.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\certcli.dll
2018-08-16 17:28:56 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-08-16 17:28:56 ----A---- C:\Windows\SYSWOW64\mf3216.dll
2018-08-16 17:28:56 ----A---- C:\Windows\system32\msi.dll
2018-08-16 17:28:56 ----A---- C:\Windows\system32\mf3216.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\wfapigp.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\vbscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\msaudite.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\jscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\icfupgd.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\CscMig.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\adtschema.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-08-16 17:28:54 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\msfeeds.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\usbport.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\dnscacheugc.exe
2018-08-16 17:28:54 ----A---- C:\Windows\system32\credssp.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\auditpol.exe
2018-08-16 17:28:53 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-08-16 17:28:53 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-08-16 17:28:53 ----A---- C:\Windows\system32\msobjs.dll
2018-08-16 17:28:53 ----A---- C:\Windows\system32\msiexec.exe
2018-08-16 17:28:52 ----A---- C:\Windows\system32\fontsub.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\oleres.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\t2embed.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\oleres.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\iedkcs32.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\comcat.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\hlink.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\consent.exe
2018-08-16 17:28:49 ----A---- C:\Windows\system32\atmfd.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\msimg32.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\hlink.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\webcheck.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\msimg32.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\ieapfltr.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\ie4uinit.exe
2018-08-16 17:28:47 ----A---- C:\Windows\system32\jscript9diag.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\inseng.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\ieui.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\drivers\usbhub.sys
2018-08-16 17:28:47 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2018-08-16 17:28:46 ----A---- C:\Windows\system32\mshtmled.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\dxtrans.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\dxtmsft.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\drivers\usbehci.sys
2018-08-16 17:28:46 ----A---- C:\Windows\system32\authui.dll
2018-08-16 17:28:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-08-16 17:28:45 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\occache.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\msrating.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\msihnd.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\jsproxy.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-08-16 17:28:43 ----A---- C:\Windows\system32\ieUnatt.exe
2018-08-16 17:28:43 ----A---- C:\Windows\system32\appinfo.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\iesetup.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-08-16 17:28:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-08-16 17:28:41 ----A---- C:\Windows\system32\lpk.dll
2018-08-16 17:28:41 ----A---- C:\Windows\system32\iernonce.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\lpk.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\tzres.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbohci.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbd.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\dciman32.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\atmlib.dll
2018-08-16 17:28:37 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-08-16 17:28:37 ----A---- C:\Windows\system32\msimsg.dll
2018-08-16 17:28:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-08-16 17:10:08 ----A---- C:\Windows\system32\appraiser.dll
2018-08-16 17:10:08 ----A---- C:\Windows\system32\aitstatic.exe
2018-08-16 17:10:08 ----A---- C:\Windows\system32\aeinv.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\invagent.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\generaltel.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\devinv.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-08-16 17:10:07 ----A---- C:\Windows\system32\centel.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\aepic.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\acmigration.dll

======List of files/folders modified in the last 1 month======

2018-08-17 20:12:22 ----D---- C:\Program Files\trend micro
2018-08-17 20:12:20 ----D---- C:\Windows\Temp
2018-08-17 20:12:17 ----D---- C:\rsit
2018-08-17 19:50:49 ----D---- C:\Windows\Microsoft.NET
2018-08-17 19:41:41 ----RSD---- C:\Windows\assembly
2018-08-17 19:08:25 ----D---- C:\Windows\system32\config
2018-08-17 18:53:21 ----D---- C:\Users\Myšička\AppData\Roaming\Foxit Software
2018-08-17 18:53:15 ----D---- C:\ProgramData\Foxit Software
2018-08-17 18:45:22 ----D---- C:\Windows\System32
2018-08-17 18:45:22 ----D---- C:\Windows\inf
2018-08-17 18:45:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-08-17 18:41:29 ----D---- C:\Users\Myšička\AppData\Roaming\Skype
2018-08-17 18:41:27 ----A---- C:\Windows\SYSWOW64\log.txt
2018-08-17 18:39:54 ----D---- C:\Windows\winsxs
2018-08-17 18:37:59 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-08-17 18:37:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-08-17 18:34:43 ----D---- C:\Windows\system32\catroot
2018-08-17 18:33:40 ----D---- C:\Windows\system32\appraiser
2018-08-17 18:33:22 ----D---- C:\Program Files\Internet Explorer
2018-08-17 18:33:22 ----D---- C:\Program Files (x86)\Internet Explorer
2018-08-17 18:33:21 ----D---- C:\Windows\SYSWOW64\en-US
2018-08-17 18:33:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-08-17 18:33:21 ----D---- C:\Windows\SysWOW64
2018-08-17 18:33:19 ----D---- C:\Windows\system32\en-US
2018-08-17 18:33:19 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-08-17 18:33:19 ----D---- C:\Windows\system32\drivers
2018-08-17 18:33:19 ----D---- C:\Windows\system32\cs-CZ
2018-08-17 18:33:18 ----RSD---- C:\Windows\Fonts
2018-08-17 18:33:17 ----D---- C:\Windows\system32\migration
2018-08-17 18:33:17 ----D---- C:\Windows\system32\Boot
2018-08-17 18:33:17 ----D---- C:\Windows\AppPatch
2018-08-17 18:33:15 ----D---- C:\Windows\system32\DriverStore
2018-08-17 18:30:11 ----SHD---- C:\Windows\Installer
2018-08-17 18:30:10 ----D---- C:\ProgramData\Microsoft Help
2018-08-17 18:26:51 ----A---- C:\Windows\win.ini
2018-08-17 18:25:20 ----D---- C:\Windows\system32\MRT
2018-08-17 18:17:53 ----AC---- C:\Windows\system32\MRT.exe
2018-08-17 18:13:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2018-08-17 18:09:12 ----SHD---- C:\System Volume Information
2018-08-17 18:08:16 ----RD---- C:\Program Files
2018-08-17 18:08:03 ----D---- C:\Program Files (x86)\3G mobilní internet
2018-08-17 18:02:36 ----D---- C:\Program Files (x86)\TomTom
2018-08-17 17:58:41 ----D---- C:\Windows\Prefetch
2018-08-17 17:58:25 ----D---- C:\Users\Myšička\AppData\Roaming\GlarySoft
2018-08-17 17:58:25 ----D---- C:\ProgramData\GlarySoft
2018-08-17 17:58:19 ----RD---- C:\Program Files (x86)
2018-08-17 17:58:09 ----D---- C:\Windows\system32\Tasks
2018-08-16 17:13:57 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 FBIOSDRV;Fujitsu BIOS Driver; C:\Windows\System32\Drivers\FBIOSDRV.sys [2009-06-24 21104]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-02-18 439320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2018-06-29 516096]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-11-13 132848]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-11-13 180088]
R1 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2017-11-13 77736]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2010-11-04 58128]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2011-11-15 327168]
R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\Windows\system32\DRIVERS\FUJ02B1.sys [2018-02-05 67800]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\Windows\system32\drivers\FUJ02E3.sys [2006-11-01 7296]
R3 iBtFltCoex;iBtFltCoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-15 12228128]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-12-08 2657768]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-03-24 25496]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-05-07 245792]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2010-10-09 1801216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
R3 vuhub;Virtual Usb Hub; C:\Windows\system32\DRIVERS\vuhub.sys [2007-12-17 47616]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys []
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-03-24 34200]
S3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2014-04-11 23552]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2014-04-11 79360]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 wdm_usb;wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [2016-08-16 159936]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2010-11-03 983104]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2017-11-13 2648184]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2011-05-18 126520]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 PFNService;PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [2010-10-08 331776]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R2 UsbService;ASUS Virtual MFP Service; C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe [2010-08-10 334848]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-14 271864]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2011-03-01 27648]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-07-19 116224]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-08-17 194512]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-06-14 161472]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-05 1255736]
S4 NetMsmqActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prilis pomaly NB

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misel1
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 08 črc 2005 07:19

Re: Prilis pomaly NB

#3 Příspěvek od Misel1 »

# -------------------------------
# Malwarebytes AdwCleaner 7.2.1.0
# -------------------------------
# Build: 06-26-2018
# Database: 2018-08-13.2
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-17-2018
# Duration: 00:00:03
# OS: Windows 7 Professional
# Cleaned: 1
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

Deleted C:\Users\Myšička\AppData\Roaming\Mozilla\Firefox\Profiles\jksz0tle.default\invalidprefs.js

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1346 octets] - [17/08/2018 21:00:01]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prilis pomaly NB

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misel1
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 08 črc 2005 07:19

Re: Prilis pomaly NB

#5 Příspěvek od Misel1 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Myšička at 2018-08-17 22:05:01
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 31 GB (30%) free of 102 GB
Total RAM: 4009 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:05:12, on 17.8.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19101)
Boot mode: Normal

Running processes:
C:\Windows\vsnp2uvc.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files\trend micro\Myšička.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ts.fujitsu.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [IndicatorUtility] "C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe"
O4 - HKLM\..\Run: [FUJ02B1_Apps] "%PROGRAMFILES(X86)%\Fujitsu\FUJ02B1\CheckBatteryPack.exe" -ViewTarget -langid 0x411
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [TomTom MySports Connect.exe] "C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe" --hideSplashScreen
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PFNService - FUJITSU LIMITED - C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: ASUS Virtual MFP Service (UsbService) - Unknown owner - C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10534 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 25995824
\??\C:\Windows\system32\conhost.exe "-2092468377-8572804241203704105-2019418487-1821858701436584392-18451726171645456370
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
WLIDSvcM.exe 1228
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide
"C:\Windows\vsnp2uvc.exe"
"C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe"
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\system32\svchost.exe -k defragsvc
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\System32\svchost.exe -k swprv

"C:\Users\Myšička\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Myšička\AppData\Roaming\Mozilla\Firefox\Profiles\jksz0tle.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.171 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2010-11-03 10228224]
"LoadFUJ02E3"=C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [2010-06-08 45680]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-12-07 11663464]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-20 168216]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-20 416024]
"LoadFujitsuQuickTouch"=C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [2010-07-16 162416]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\ecmdS.exe [2017-11-13 324216]
"snp2uvc"=C:\Windows\vsnp2uvc.exe [2009-08-13 662016]
"LoadBtnHnd"=C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2010-07-09 21616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"TomTom MySports Connect.exe"=C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe --hideSplashScreen []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FDM7]
C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [2009-11-26 164712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PfNet]
C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [2010-10-08 6311424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSUTility]
C:\Program Files\Fujitsu\PSUtility\TrayManager.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2uvc]
C:\Windows\vsnp2uvc.exe [2009-08-13 662016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirror Tray icon]
C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2009-07-08 162912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IndicatorUtility"=C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [2010-09-30 48752]
"FUJ02B1_Apps"=C:\Program Files (x86)\Fujitsu\FUJ02B1\CheckBatteryPack.exe [2018-02-05 365304]

C:\Users\Myšička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-08-17 18:12:35 ----SHD---- C:\Config.Msi
2018-08-16 17:29:21 ----A---- C:\Windows\SYSWOW64\shell32.dll
2018-08-16 17:29:21 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\winsrv.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\srcore.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\srclient.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\conhost.exe
2018-08-16 17:29:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-08-16 17:29:20 ----A---- C:\Windows\system32\shell32.dll
2018-08-16 17:29:20 ----A---- C:\Windows\system32\ntvdm64.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-08-16 17:29:19 ----A---- C:\Windows\SYSWOW64\user.exe
2018-08-16 17:29:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-08-16 17:29:19 ----A---- C:\Windows\system32\KernelBase.dll
2018-08-16 17:29:19 ----A---- C:\Windows\system32\kernel32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wfapigp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\wow64cpu.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\wdigest.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\sspisrv.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\secur32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\processr.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\netio.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\intelppm.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\amdppm.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\dnsrslvr.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\csrsrv.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cscdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cscapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cryptbase.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\bcrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\appidsvc.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\appidapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\apisetschema.dll
2018-08-16 17:29:17 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-08-16 17:29:17 ----A---- C:\Windows\system32\smss.exe
2018-08-16 17:29:17 ----A---- C:\Windows\system32\rpchttp.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\ntdll.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\hal.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\csc.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\appid.sys
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\ole32.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\wow64.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\wkssvc.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\TSpkg.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\sspicli.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\schannel.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\rpcss.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\ncrypt.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\msv1_0.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\lsass.exe
2018-08-16 17:29:16 ----A---- C:\Windows\system32\drivers\amdk8.sys
2018-08-16 17:29:16 ----A---- C:\Windows\system32\dnsapi.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\cscsvc.dll
2018-08-16 17:29:15 ----A---- C:\Windows\system32\win32k.sys
2018-08-16 17:29:15 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-08-16 17:29:15 ----A---- C:\Windows\system32\MPSSVC.dll
2018-08-16 17:29:15 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-08-16 17:29:14 ----A---- C:\Windows\system32\rpcrt4.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\lsasrv.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\kerberos.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\advapi32.dll
2018-08-16 17:29:12 ----A---- C:\Windows\system32\ole32.dll
2018-08-16 17:29:12 ----A---- C:\Windows\system32\mshtml.dll
2018-08-16 17:29:10 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-08-16 17:29:08 ----A---- C:\Windows\system32\wow64win.dll
2018-08-16 17:29:08 ----A---- C:\Windows\system32\ieframe.dll
2018-08-16 17:29:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-08-16 17:29:04 ----A---- C:\Windows\system32\wininet.dll
2018-08-16 17:29:04 ----A---- C:\Windows\system32\jscript9.dll
2018-08-16 17:29:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-08-16 17:29:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-08-16 17:29:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-08-16 17:28:59 ----A---- C:\Windows\system32\urlmon.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\comcat.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\zipfldr.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\ucrtbase.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\rstrui.exe
2018-08-16 17:28:58 ----A---- C:\Windows\system32\iertutil.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\certcli.dll
2018-08-16 17:28:56 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-08-16 17:28:56 ----A---- C:\Windows\SYSWOW64\mf3216.dll
2018-08-16 17:28:56 ----A---- C:\Windows\system32\msi.dll
2018-08-16 17:28:56 ----A---- C:\Windows\system32\mf3216.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\wfapigp.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\vbscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\msaudite.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\jscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\icfupgd.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\CscMig.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\adtschema.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-08-16 17:28:54 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\msfeeds.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\usbport.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\dnscacheugc.exe
2018-08-16 17:28:54 ----A---- C:\Windows\system32\credssp.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\auditpol.exe
2018-08-16 17:28:53 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-08-16 17:28:53 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-08-16 17:28:53 ----A---- C:\Windows\system32\msobjs.dll
2018-08-16 17:28:53 ----A---- C:\Windows\system32\msiexec.exe
2018-08-16 17:28:52 ----A---- C:\Windows\system32\fontsub.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\oleres.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\t2embed.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\oleres.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\iedkcs32.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\comcat.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\hlink.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\consent.exe
2018-08-16 17:28:49 ----A---- C:\Windows\system32\atmfd.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\msimg32.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\hlink.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\webcheck.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\msimg32.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\ieapfltr.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\ie4uinit.exe
2018-08-16 17:28:47 ----A---- C:\Windows\system32\jscript9diag.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\inseng.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\ieui.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\drivers\usbhub.sys
2018-08-16 17:28:47 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2018-08-16 17:28:46 ----A---- C:\Windows\system32\mshtmled.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\dxtrans.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\dxtmsft.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\drivers\usbehci.sys
2018-08-16 17:28:46 ----A---- C:\Windows\system32\authui.dll
2018-08-16 17:28:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-08-16 17:28:45 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\occache.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\msrating.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\msihnd.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\jsproxy.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-08-16 17:28:43 ----A---- C:\Windows\system32\ieUnatt.exe
2018-08-16 17:28:43 ----A---- C:\Windows\system32\appinfo.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\iesetup.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-08-16 17:28:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-08-16 17:28:41 ----A---- C:\Windows\system32\lpk.dll
2018-08-16 17:28:41 ----A---- C:\Windows\system32\iernonce.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\lpk.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\tzres.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbohci.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbd.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\dciman32.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\atmlib.dll
2018-08-16 17:28:37 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-08-16 17:28:37 ----A---- C:\Windows\system32\msimsg.dll
2018-08-16 17:28:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-08-16 17:10:08 ----A---- C:\Windows\system32\appraiser.dll
2018-08-16 17:10:08 ----A---- C:\Windows\system32\aitstatic.exe
2018-08-16 17:10:08 ----A---- C:\Windows\system32\aeinv.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\invagent.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\generaltel.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\devinv.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-08-16 17:10:07 ----A---- C:\Windows\system32\centel.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\aepic.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\acmigration.dll

======List of files/folders modified in the last 1 month======

2018-08-17 22:05:13 ----D---- C:\Windows\Prefetch
2018-08-17 22:05:08 ----D---- C:\Program Files\trend micro
2018-08-17 22:04:56 ----D---- C:\Windows\Temp
2018-08-17 22:00:09 ----SHD---- C:\System Volume Information
2018-08-17 21:59:58 ----D---- C:\Windows\rescache
2018-08-17 21:55:26 ----D---- C:\Windows\system32\config
2018-08-17 21:07:59 ----D---- C:\Windows\System32
2018-08-17 21:07:59 ----D---- C:\Windows\inf
2018-08-17 21:07:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-08-17 21:04:19 ----A---- C:\Windows\SYSWOW64\log.txt
2018-08-17 21:03:54 ----D---- C:\Users\Myšička\AppData\Roaming\Skype
2018-08-17 21:03:08 ----D---- C:\Windows\system32\Tasks
2018-08-17 21:00:01 ----D---- C:\AdwCleaner
2018-08-17 20:12:29 ----D---- C:\rsit
2018-08-17 19:50:49 ----D---- C:\Windows\Microsoft.NET
2018-08-17 19:41:41 ----RSD---- C:\Windows\assembly
2018-08-17 18:53:21 ----D---- C:\Users\Myšička\AppData\Roaming\Foxit Software
2018-08-17 18:53:15 ----D---- C:\ProgramData\Foxit Software
2018-08-17 18:39:54 ----D---- C:\Windows\winsxs
2018-08-17 18:37:59 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-08-17 18:37:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-08-17 18:34:43 ----D---- C:\Windows\system32\catroot
2018-08-17 18:33:40 ----D---- C:\Windows\system32\appraiser
2018-08-17 18:33:22 ----D---- C:\Program Files\Internet Explorer
2018-08-17 18:33:22 ----D---- C:\Program Files (x86)\Internet Explorer
2018-08-17 18:33:21 ----D---- C:\Windows\SYSWOW64\en-US
2018-08-17 18:33:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-08-17 18:33:21 ----D---- C:\Windows\SysWOW64
2018-08-17 18:33:19 ----D---- C:\Windows\system32\en-US
2018-08-17 18:33:19 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-08-17 18:33:19 ----D---- C:\Windows\system32\drivers
2018-08-17 18:33:19 ----D---- C:\Windows\system32\cs-CZ
2018-08-17 18:33:18 ----RSD---- C:\Windows\Fonts
2018-08-17 18:33:17 ----D---- C:\Windows\system32\migration
2018-08-17 18:33:17 ----D---- C:\Windows\system32\Boot
2018-08-17 18:33:17 ----D---- C:\Windows\AppPatch
2018-08-17 18:33:15 ----D---- C:\Windows\system32\DriverStore
2018-08-17 18:30:11 ----SHD---- C:\Windows\Installer
2018-08-17 18:30:10 ----D---- C:\ProgramData\Microsoft Help
2018-08-17 18:26:51 ----A---- C:\Windows\win.ini
2018-08-17 18:25:20 ----D---- C:\Windows\system32\MRT
2018-08-17 18:17:53 ----AC---- C:\Windows\system32\MRT.exe
2018-08-17 18:13:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2018-08-17 18:08:16 ----RD---- C:\Program Files
2018-08-17 18:08:03 ----D---- C:\Program Files (x86)\3G mobilní internet
2018-08-17 18:02:36 ----D---- C:\Program Files (x86)\TomTom
2018-08-17 17:58:25 ----D---- C:\Users\Myšička\AppData\Roaming\GlarySoft
2018-08-17 17:58:25 ----D---- C:\ProgramData\GlarySoft
2018-08-17 17:58:19 ----RD---- C:\Program Files (x86)
2018-08-16 17:13:57 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 FBIOSDRV;Fujitsu BIOS Driver; C:\Windows\System32\Drivers\FBIOSDRV.sys [2009-06-24 21104]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-02-18 439320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2018-06-29 516096]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-11-13 132848]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-11-13 180088]
R1 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2017-11-13 77736]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2010-11-04 58128]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2011-11-15 327168]
R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\Windows\system32\DRIVERS\FUJ02B1.sys [2018-02-05 67800]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\Windows\system32\drivers\FUJ02E3.sys [2006-11-01 7296]
R3 iBtFltCoex;iBtFltCoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-15 12228128]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-12-08 2657768]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-03-24 25496]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-05-07 245792]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2010-10-09 1801216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
R3 vuhub;Virtual Usb Hub; C:\Windows\system32\DRIVERS\vuhub.sys [2007-12-17 47616]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys []
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-03-24 34200]
S3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2014-04-11 23552]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2014-04-11 79360]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 wdm_usb;wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [2016-08-16 159936]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2010-11-03 983104]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2017-11-13 2648184]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2011-05-18 126520]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 PFNService;PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [2010-10-08 331776]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R2 UsbService;ASUS Virtual MFP Service; C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe [2010-08-10 334848]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-14 271864]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2011-03-01 27648]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-07-19 116224]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-08-17 194512]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-06-14 161472]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-05 1255736]
S4 NetMsmqActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prilis pomaly NB

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misel1
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 08 črc 2005 07:19

Re: Prilis pomaly NB

#7 Příspěvek od Misel1 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Myšička at 2018-08-18 13:12:36
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 32 GB (31%) free of 102 GB
Total RAM: 4009 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:12:43, on 18.8.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19101)
Boot mode: Normal

Running processes:
C:\Windows\vsnp2uvc.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files\trend micro\Myšička.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ts.fujitsu.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [IndicatorUtility] "C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe"
O4 - HKLM\..\Run: [FUJ02B1_Apps] "%PROGRAMFILES(X86)%\Fujitsu\FUJ02B1\CheckBatteryPack.exe" -ViewTarget -langid 0x411
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [TomTom MySports Connect.exe] "C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe" --hideSplashScreen
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PFNService - FUJITSU LIMITED - C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: ASUS Virtual MFP Service (UsbService) - Unknown owner - C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10534 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 27669392
\??\C:\Windows\system32\conhost.exe "1644237045-4149392891893645727-19001071411327234184-508124842855937637-2043986036
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"taskhost.exe"
WLIDSvcM.exe 1548
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe"
"C:\Windows\vsnp2uvc.exe"
"C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Myšička\Downloads\RSITx64.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Myšička\AppData\Roaming\Mozilla\Firefox\Profiles\jksz0tle.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.171 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 25.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2010-11-03 10228224]
"LoadFUJ02E3"=C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [2010-06-08 45680]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-12-07 11663464]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-20 168216]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-20 416024]
"LoadFujitsuQuickTouch"=C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [2010-07-16 162416]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\ecmdS.exe [2017-11-13 324216]
"snp2uvc"=C:\Windows\vsnp2uvc.exe [2009-08-13 662016]
"LoadBtnHnd"=C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2010-07-09 21616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"TomTom MySports Connect.exe"=C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe --hideSplashScreen []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Myšička\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FDM7]
C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [2009-11-26 164712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-01-05 1933584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PfNet]
C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [2010-10-08 6311424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSUTility]
C:\Program Files\Fujitsu\PSUtility\TrayManager.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2uvc]
C:\Windows\vsnp2uvc.exe [2009-08-13 662016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirror Tray icon]
C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2009-07-08 162912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IndicatorUtility"=C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [2010-09-30 48752]
"FUJ02B1_Apps"=C:\Program Files (x86)\Fujitsu\FUJ02B1\CheckBatteryPack.exe [2018-02-05 365304]

C:\Users\Myšička\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-08-17 18:12:35 ----SHD---- C:\Config.Msi
2018-08-16 17:29:21 ----A---- C:\Windows\SYSWOW64\shell32.dll
2018-08-16 17:29:21 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\winsrv.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\srcore.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\srclient.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-08-16 17:29:21 ----A---- C:\Windows\system32\conhost.exe
2018-08-16 17:29:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-16 17:29:20 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-08-16 17:29:20 ----A---- C:\Windows\system32\shell32.dll
2018-08-16 17:29:20 ----A---- C:\Windows\system32\ntvdm64.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-08-16 17:29:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-08-16 17:29:19 ----A---- C:\Windows\SYSWOW64\user.exe
2018-08-16 17:29:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-08-16 17:29:19 ----A---- C:\Windows\system32\KernelBase.dll
2018-08-16 17:29:19 ----A---- C:\Windows\system32\kernel32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wfapigp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\FirewallAPI.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\wow64cpu.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\wdigest.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\sspisrv.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\secur32.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\processr.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\netio.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\intelppm.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-08-16 17:29:18 ----A---- C:\Windows\system32\drivers\amdppm.sys
2018-08-16 17:29:18 ----A---- C:\Windows\system32\dnsrslvr.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\csrsrv.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cscdll.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cscapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\cryptbase.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\bcrypt.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\appidsvc.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\appidapi.dll
2018-08-16 17:29:18 ----A---- C:\Windows\system32\apisetschema.dll
2018-08-16 17:29:17 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-08-16 17:29:17 ----A---- C:\Windows\system32\smss.exe
2018-08-16 17:29:17 ----A---- C:\Windows\system32\rpchttp.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\ntdll.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\hal.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\csc.sys
2018-08-16 17:29:17 ----A---- C:\Windows\system32\drivers\appid.sys
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\ole32.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-08-16 17:29:16 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\wow64.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\wkssvc.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\TSpkg.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\sspicli.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\schannel.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\rpcss.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\ncrypt.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\msv1_0.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\lsass.exe
2018-08-16 17:29:16 ----A---- C:\Windows\system32\drivers\amdk8.sys
2018-08-16 17:29:16 ----A---- C:\Windows\system32\dnsapi.dll
2018-08-16 17:29:16 ----A---- C:\Windows\system32\cscsvc.dll
2018-08-16 17:29:15 ----A---- C:\Windows\system32\win32k.sys
2018-08-16 17:29:15 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-08-16 17:29:15 ----A---- C:\Windows\system32\MPSSVC.dll
2018-08-16 17:29:15 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-08-16 17:29:14 ----A---- C:\Windows\system32\rpcrt4.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\lsasrv.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\kerberos.dll
2018-08-16 17:29:14 ----A---- C:\Windows\system32\advapi32.dll
2018-08-16 17:29:12 ----A---- C:\Windows\system32\ole32.dll
2018-08-16 17:29:12 ----A---- C:\Windows\system32\mshtml.dll
2018-08-16 17:29:10 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-08-16 17:29:08 ----A---- C:\Windows\system32\wow64win.dll
2018-08-16 17:29:08 ----A---- C:\Windows\system32\ieframe.dll
2018-08-16 17:29:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-08-16 17:29:04 ----A---- C:\Windows\system32\wininet.dll
2018-08-16 17:29:04 ----A---- C:\Windows\system32\jscript9.dll
2018-08-16 17:29:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-08-16 17:29:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-08-16 17:29:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-08-16 17:28:59 ----A---- C:\Windows\system32\urlmon.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\comcat.dll
2018-08-16 17:28:58 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\zipfldr.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\ucrtbase.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\rstrui.exe
2018-08-16 17:28:58 ----A---- C:\Windows\system32\iertutil.dll
2018-08-16 17:28:58 ----A---- C:\Windows\system32\certcli.dll
2018-08-16 17:28:56 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-08-16 17:28:56 ----A---- C:\Windows\SYSWOW64\mf3216.dll
2018-08-16 17:28:56 ----A---- C:\Windows\system32\msi.dll
2018-08-16 17:28:56 ----A---- C:\Windows\system32\mf3216.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-08-16 17:28:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\wfapigp.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\vbscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\msaudite.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\jscript.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\icfupgd.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\CscMig.dll
2018-08-16 17:28:55 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-08-16 17:28:55 ----A---- C:\Windows\system32\adtschema.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2018-08-16 17:28:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-08-16 17:28:54 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\msfeeds.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\usbport.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-08-16 17:28:54 ----A---- C:\Windows\system32\dnscacheugc.exe
2018-08-16 17:28:54 ----A---- C:\Windows\system32\credssp.dll
2018-08-16 17:28:54 ----A---- C:\Windows\system32\auditpol.exe
2018-08-16 17:28:53 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-08-16 17:28:53 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-08-16 17:28:53 ----A---- C:\Windows\system32\msobjs.dll
2018-08-16 17:28:53 ----A---- C:\Windows\system32\msiexec.exe
2018-08-16 17:28:52 ----A---- C:\Windows\system32\fontsub.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\oleres.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-08-16 17:28:51 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\t2embed.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\oleres.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\iedkcs32.dll
2018-08-16 17:28:51 ----A---- C:\Windows\system32\comcat.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\hlink.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-08-16 17:28:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\consent.exe
2018-08-16 17:28:49 ----A---- C:\Windows\system32\atmfd.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-08-16 17:28:49 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\msimg32.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-08-16 17:28:48 ----A---- C:\Windows\SYSWOW64\hlink.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\webcheck.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\msimg32.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\ieapfltr.dll
2018-08-16 17:28:48 ----A---- C:\Windows\system32\ie4uinit.exe
2018-08-16 17:28:47 ----A---- C:\Windows\system32\jscript9diag.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\inseng.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\ieui.dll
2018-08-16 17:28:47 ----A---- C:\Windows\system32\drivers\usbhub.sys
2018-08-16 17:28:47 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2018-08-16 17:28:46 ----A---- C:\Windows\system32\mshtmled.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\dxtrans.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\dxtmsft.dll
2018-08-16 17:28:46 ----A---- C:\Windows\system32\drivers\usbehci.sys
2018-08-16 17:28:46 ----A---- C:\Windows\system32\authui.dll
2018-08-16 17:28:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-08-16 17:28:45 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\occache.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\msrating.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\msihnd.dll
2018-08-16 17:28:45 ----A---- C:\Windows\system32\jsproxy.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-08-16 17:28:44 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-08-16 17:28:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-08-16 17:28:43 ----A---- C:\Windows\system32\ieUnatt.exe
2018-08-16 17:28:43 ----A---- C:\Windows\system32\appinfo.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-08-16 17:28:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\iesetup.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-08-16 17:28:42 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-08-16 17:28:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-08-16 17:28:41 ----A---- C:\Windows\system32\lpk.dll
2018-08-16 17:28:41 ----A---- C:\Windows\system32\iernonce.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\lpk.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2018-08-16 17:28:40 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\tzres.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbohci.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\drivers\usbd.sys
2018-08-16 17:28:40 ----A---- C:\Windows\system32\dciman32.dll
2018-08-16 17:28:40 ----A---- C:\Windows\system32\atmlib.dll
2018-08-16 17:28:37 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-08-16 17:28:37 ----A---- C:\Windows\system32\msimsg.dll
2018-08-16 17:28:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-08-16 17:10:08 ----A---- C:\Windows\system32\appraiser.dll
2018-08-16 17:10:08 ----A---- C:\Windows\system32\aitstatic.exe
2018-08-16 17:10:08 ----A---- C:\Windows\system32\aeinv.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\invagent.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\generaltel.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\devinv.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-08-16 17:10:07 ----A---- C:\Windows\system32\centel.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\aepic.dll
2018-08-16 17:10:07 ----A---- C:\Windows\system32\acmigration.dll

======List of files/folders modified in the last 1 month======

2018-08-18 13:12:42 ----D---- C:\Windows\Prefetch
2018-08-18 13:12:41 ----D---- C:\Program Files\trend micro
2018-08-18 13:11:37 ----A---- C:\Windows\SYSWOW64\log.txt
2018-08-18 13:11:18 ----D---- C:\Users\Myšička\AppData\Roaming\Skype
2018-08-18 13:09:37 ----D---- C:\Windows\Temp
2018-08-18 13:07:59 ----D---- C:\Windows\system32\config
2018-08-17 22:00:09 ----SHD---- C:\System Volume Information
2018-08-17 21:59:58 ----D---- C:\Windows\rescache
2018-08-17 21:07:59 ----D---- C:\Windows\System32
2018-08-17 21:07:59 ----D---- C:\Windows\inf
2018-08-17 21:07:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-08-17 21:03:08 ----D---- C:\Windows\system32\Tasks
2018-08-17 21:00:01 ----D---- C:\AdwCleaner
2018-08-17 20:12:29 ----D---- C:\rsit
2018-08-17 19:50:49 ----D---- C:\Windows\Microsoft.NET
2018-08-17 19:41:41 ----RSD---- C:\Windows\assembly
2018-08-17 18:53:21 ----D---- C:\Users\Myšička\AppData\Roaming\Foxit Software
2018-08-17 18:53:15 ----D---- C:\ProgramData\Foxit Software
2018-08-17 18:39:54 ----D---- C:\Windows\winsxs
2018-08-17 18:37:59 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-08-17 18:37:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-08-17 18:34:43 ----D---- C:\Windows\system32\catroot
2018-08-17 18:33:40 ----D---- C:\Windows\system32\appraiser
2018-08-17 18:33:22 ----D---- C:\Program Files\Internet Explorer
2018-08-17 18:33:22 ----D---- C:\Program Files (x86)\Internet Explorer
2018-08-17 18:33:21 ----D---- C:\Windows\SYSWOW64\en-US
2018-08-17 18:33:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-08-17 18:33:21 ----D---- C:\Windows\SysWOW64
2018-08-17 18:33:19 ----D---- C:\Windows\system32\en-US
2018-08-17 18:33:19 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-08-17 18:33:19 ----D---- C:\Windows\system32\drivers
2018-08-17 18:33:19 ----D---- C:\Windows\system32\cs-CZ
2018-08-17 18:33:18 ----RSD---- C:\Windows\Fonts
2018-08-17 18:33:17 ----D---- C:\Windows\system32\migration
2018-08-17 18:33:17 ----D---- C:\Windows\system32\Boot
2018-08-17 18:33:17 ----D---- C:\Windows\AppPatch
2018-08-17 18:33:15 ----D---- C:\Windows\system32\DriverStore
2018-08-17 18:30:11 ----SHD---- C:\Windows\Installer
2018-08-17 18:30:10 ----D---- C:\ProgramData\Microsoft Help
2018-08-17 18:26:51 ----A---- C:\Windows\win.ini
2018-08-17 18:25:20 ----D---- C:\Windows\system32\MRT
2018-08-17 18:17:53 ----AC---- C:\Windows\system32\MRT.exe
2018-08-17 18:13:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2018-08-17 18:08:16 ----RD---- C:\Program Files
2018-08-17 18:08:03 ----D---- C:\Program Files (x86)\3G mobilní internet
2018-08-17 18:02:36 ----D---- C:\Program Files (x86)\TomTom
2018-08-17 17:58:25 ----D---- C:\Users\Myšička\AppData\Roaming\GlarySoft
2018-08-17 17:58:25 ----D---- C:\ProgramData\GlarySoft
2018-08-17 17:58:19 ----RD---- C:\Program Files (x86)
2018-08-16 17:13:57 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 FBIOSDRV;Fujitsu BIOS Driver; C:\Windows\System32\Drivers\FBIOSDRV.sys [2009-06-24 21104]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-02-18 439320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2018-06-29 516096]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-11-13 132848]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-11-13 180088]
R1 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2017-11-13 77736]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2010-11-04 58128]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2011-11-15 327168]
R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\Windows\system32\DRIVERS\FUJ02B1.sys [2018-02-05 67800]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\Windows\system32\drivers\FUJ02E3.sys [2006-11-01 7296]
R3 iBtFltCoex;iBtFltCoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-15 12228128]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-12-08 2657768]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-03-24 25496]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-05-07 245792]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2010-10-09 1801216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
R3 vuhub;Virtual Usb Hub; C:\Windows\system32\DRIVERS\vuhub.sys [2007-12-17 47616]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys []
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-03-24 34200]
S3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2014-04-11 23552]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2014-04-11 79360]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 wdm_usb;wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [2016-08-16 159936]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2010-11-03 983104]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2011-03-01 27648]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2017-11-13 2648184]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-01-05 1515792]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2011-05-18 126520]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 PFNService;PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [2010-10-08 331776]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-01-05 836880]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R2 UsbService;ASUS Virtual MFP Service; C:\Program Files (x86)\ASUS\Printer Utilities\UsbService64.exe [2010-08-10 334848]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-14 271864]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2011-03-01 27648]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-07-19 116224]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-08-17 194512]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-06-14 161472]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2011-03-01 27648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-05 1255736]
S4 NetMsmqActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prilis pomaly NB

#8 Příspěvek od Rudy »

OK. Zrychlil se NB?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misel1
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 08 črc 2005 07:19

Re: Prilis pomaly NB

#9 Příspěvek od Misel1 »

Ano, zrychlilo. Moc dekuji!
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prilis pomaly NB

#10 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“