Problém se stahováním

[out_of_space]

Dobrý den, mám poslední dobou problém se stahováním větších souborů a zatím se mi to nepodařilo vyřešit. Stahuju soubor na konci se stahování přeruší, když dám obnovení stahování soubor se dostáhne, ale je poškozený. Zkoušel jsem stahovat přes jiný prohlížeč, vypnout antivir, atd. nic nepomohlo. Můžete kouknout jestli v tom nemá prsty nějaká potvora?

//stahování menších souborů nebo například her ze Steamu funguje

Logfile of random's system information tool 1.10 (written by random/random)
Run by jakub at 2019-04-10 13:54:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 26 GB (17%) free of 153 GB
Total RAM: 16351 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:54:12, on 10.4.2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19230)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroTray.exe
D:\Steam\Steam.exe
C:\Program Files (x86)\JetAudio\JetAudio.exe
C:\Program Files\trend micro\jakub.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
O4 - HKLM\..\Run: [ZaAntiRansomware] "C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe"
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\jakub\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AdobeBridge] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AdobeBridge] (User 'Default user')
O4 - S-1-5-18 Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe (User 'Default user')
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Monitor Service (AGMService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Check Point Endpoint EFR (CPEFR) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe
O23 - Service: Check Point Sandblast Agent Cipolla (CpSbaCipolla) - Unknown owner - C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe
O23 - Service: Check Point Sandblast Agent Updater (CpSbaUpdater) - Unknown owner - C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: EPSON V3 Service4(06) (EPSON_PM_RPCV4_06) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Check Point Endpoint Remediation (RemediationService) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe
O23 - Service: Check Point SandBlast Agent Threat Emulation (TESvc) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe
O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZoneAlarm ICM NET Service (ZA NET ICM Service) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe
O23 - Service: ZAAR Update Service (ZAARUpdateService) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe

--
End of file - 16357 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\Tablet\Pen\Pen_TouchService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service
/QuitInfo:000000000000028C;0000000000000284; /AddRef;
/QuitInfo:00000000000001B4;0000000000000154; /AddRef;
/QuitInfo:00000000000001A0;00000000000001AC;
"C:\Windows\system32\Dwm.exe"
/loadhooks /Parent:00000000000006A0
C:\Windows\Explorer.EXE
"C:\Program Files\Tablet\Pen\Pen_TouchUser.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
"taskhost.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Mad Catz\RAT6\RAT6_Profiler.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
"C:\Program Files\Rainmeter\Rainmeter.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe"
"C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe"
"C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe"
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
"C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe "-1168872508-1001269519624049878-17165054341420513691-86587742014614185311899177295
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\EscSvc64.exe
"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Common Files\Motive\McciCMService.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
"C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000c28
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Tablet\Pen\Pen_Tablet.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Tablet\Pen\Pen_TabletUser.exe"
"C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
WLIDSvcM.exe 4928
"C:\Program Files\Tablet\Pen\Pen_Tablet.exe" au
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-35ef3c63-b128-44dc-a034-35c7a4be6d98 -SystemEventPortName:HostProcess-5dae2625-f4bc-4998-a27c-ae8921a4f9df -IoCancelEventPortName:HostProcess-9213c73b-0433-45c1-9f59-a6faade5a281 -NonStateChangingEventPortName:HostProcess-96476893-3cee-491a-854f-c59fbe0f0849 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:75dfc221-02d1-40b1-bbdb-875aa4d24a8f -DeviceGroupId:WpdFsGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
"C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe"
"C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe" -s
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.0.1647798972\1308672649" -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 1128 gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.6.1724811884\301222678" -childID 1 -isForBrowser -prefsHandle 1700 -prefMapHandle 1368 -prefsLen 1 -prefMapSize 336658 -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 1852 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.13.476894131\1755187616" -childID 2 -isForBrowser -prefsHandle 2900 -prefMapHandle 2904 -prefsLen 5351 -prefMapSize 336658 -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 2916 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.20.877232445\673692840" -childID 3 -isForBrowser -prefsHandle 3492 -prefMapHandle 3520 -prefsLen 6221 -prefMapSize 336658 -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 3884 tab
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroTray.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.48.481496410\1502701048" -childID 7 -isForBrowser -prefsHandle 8420 -prefMapHandle 2808 -prefsLen 7037 -prefMapSize 336658 -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 4272 tab
"D:\Steam\Steam.exe"
D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe "-lang=cs_CZ" "-cachedir=C:\Users\jakub\AppData\Local\Steam\htmlcache" "-steampid=7216" "-buildid=1551832902" "-steamid=0" "-steamuniverse=Dev" "-clientui=D:\Steam\clientui" --disable-out-of-process-pac --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-features=TouchpadAndWheelScrollLatching,AsyncWheelEvents --enable-media-stream --disable-smooth-scrolling --num-raster-threads=4 --enable-direct-write --disablehighdpi --force-device-scale-factor=1 --device-scale-factor=1 "--log-file=D:\Steam\logs\cef_log.txt"
D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler --database=D:\Steam\dumps "--metrics-dir=C:\Users\jakub\AppData\Local\CEF\User Data" --url=http://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1551832902 --initial-client-data=0x19c,0x1a0,0x1a4,0x198,0x1a8,0x7fecf671f78,0x7fecf671f88,0x7fecf671f98
"D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --log-file="D:\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --force-device-scale-factor=1 --disablehighdpi --buildid=1551832902 --steamid=0 --gpu-preferences=KAAAAAAAAACAAwBAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --log-file="D:\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --lang=cs-CZ --force-device-scale-factor=1 --disablehighdpi --buildid=1551832902 --steamid=0 --service-request-channel-token=A6854E70BECF83476528439B26CBA792 --mojo-platform-channel-handle=1008 --ignored=" --type=renderer " /prefetch:2
"D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --force-device-scale-factor=1 --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=9836FCDC46DF75417DA3112A06D7002D --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="D:\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --force-device-scale-factor=1 --disablehighdpi --buildid=1551832902 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=9836FCDC46DF75417DA3112A06D7002D --renderer-client-id=3 --mojo-platform-channel-handle=1528 /prefetch:1
"D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --force-device-scale-factor=1 --disable-features=AsyncWheelEvents,TouchpadAndWheelScrollLatching --service-pipe-token=6BA2BEEBC623F3ACC024ED80FD43279A --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="D:\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --webview-urls=http://localhost/*,http://steamloopback ... localhost/* --force-device-scale-factor=1 --disablehighdpi --buildid=1551832902 --steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=6BA2BEEBC623F3ACC024ED80FD43279A --renderer-client-id=5 --mojo-platform-channel-handle=1864 /prefetch:1
"C:\Program Files (x86)\JetAudio\JetAudio.exe" /tempplay "C:\Users\jakub\AppData\Local\Temp\$jadtmp$.pls"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.76.1150041859\1273826382" -childID 11 -isForBrowser -prefsHandle 8292 -prefMapHandle 8372 -prefsLen 7037 -prefMapSize 336658 -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 8024 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3036.111.1737958138\148662723" -childID 16 -isForBrowser -prefsHandle 8360 -prefMapHandle 7592 -prefsLen 7037 -prefMapSize 336658 -parentBuildID 20190326175229 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3036 "\\.\pipe\gecko-crash-server-pipe.3036" 3684 tab

"C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\jakub\Desktop\RSITx64(3).exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3719608471-1457720249-86965872-1000Core.job - C:\Users\jakub\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3719608471-1457720249-86965872-1000UA.job - C:\Users\jakub\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\EPSON L365 Series Update {AE4F56D3-2240-448A-A7B8-AAEC33E384DF}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNYE.EXE /EXE:"{AE4F56D3-2240-448A-A7B8-AAEC33E384DF}" /F:"Update"

=========Mozilla firefox=========

ProfilePath - C:\Users\jakub\AppData\Roaming\Mozilla\Firefox\Profiles\nlhpu5mp.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "resource://firefox-at-usepanda-dot-com/data/index.html"

"web2pdfextension.17@acrobat.adobe.com"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.171 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.10]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files (x86)\TabletPlugins\npwacom.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wtPlugin,version=2.0.0.1]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeExManDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.141.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.141.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_141\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeExManDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-04-06 222088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_141\bin\ssv.dll [2017-07-23 571968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 471536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-12-19 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2019-04-06 955912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-23 235584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-12-19 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2010-10-27 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-12-19 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2019-04-06 674912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-12-19 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 471536]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-12-19 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-12-19 141496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-10-27 613536]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-10-27 379040]
"RAT6"=C:\Program Files\Mad Catz\RAT6\RAT6_Profiler.exe [2016-12-16 602112]
""= []
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-11 509936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Dropbox Update"=C:\Users\jakub\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-15 143144]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner64.exe [2018-09-10 18630056]
"AdobeBridge"= []
""= []
"Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [2019-03-25 5933616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Creative Cloud]
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2019-01-22 2410968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2018-09-10 18630056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Discord]
C:\Users\jakub\AppData\Local\Discord\app-0.0.301\Discord.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EpicGamesLauncher]
C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [2019-04-10 35181968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype]
C:\Program Files\Microsoft IntelliType Pro\itype.exe [2009-11-05 2345848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^jakub^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\jakub\AppData\Roaming\Dropbox\bin\Dropbox.exe [2019-04-03 4426560]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-04-30 284440]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2015-09-24 41360]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2019-03-25 4810288]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2016-01-20 1087184]
"Lightshot"=C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [2016-07-11 225944]
"ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2018-05-18 146800]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2019-03-20 98024]
"ZaAntiRansomware"=C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe [2018-11-14 4224584]

C:\Users\jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2010-06-22 253288]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KNet]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe]
"Debugger=""C:\Program Files (x86)\System Explorer\SystemExplorer.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"midi5"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.FPS1"=frapsv64.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2019-04-10 12:11:24 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2019-03-31 02:32:17 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\wow32.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\user.exe
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\credssp.dll
2019-03-31 02:32:17 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\wow64win.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\wow64cpu.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\sspisrv.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\sspicli.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\smss.exe
2019-03-31 02:32:17 ----A---- C:\Windows\system32\secur32.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\ntvdm64.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\KernelBase.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\kernel32.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\drivers\processr.sys
2019-03-31 02:32:17 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2019-03-31 02:32:17 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2019-03-31 02:32:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2019-03-31 02:32:17 ----A---- C:\Windows\system32\drivers\amdppm.sys
2019-03-31 02:32:17 ----A---- C:\Windows\system32\csrsrv.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\credssp.dll
2019-03-31 02:32:17 ----A---- C:\Windows\system32\appidsvc.dll
2019-03-31 02:32:16 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2019-03-31 02:32:16 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2019-03-31 02:32:16 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2019-03-31 02:32:16 ----A---- C:\Windows\system32\wow64.dll
2019-03-31 02:32:16 ----A---- C:\Windows\system32\rpchttp.dll
2019-03-31 02:32:16 ----A---- C:\Windows\system32\ntoskrnl.exe
2019-03-31 02:32:16 ----A---- C:\Windows\system32\ntdll.dll
2019-03-31 02:32:16 ----A---- C:\Windows\system32\hal.dll
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\videoprt.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\npfs.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\intelppm.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\appid.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\drivers\amdk8.sys
2019-03-31 02:32:16 ----A---- C:\Windows\system32\appidapi.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\sscore.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\schannel.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2019-03-31 02:32:15 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\TSpkg.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\rpcrt4.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\msv1_0.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\lsass.exe
2019-03-31 02:32:15 ----A---- C:\Windows\system32\lsasrv.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\kerberos.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\drmv2clt.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\drivers\srvnet.sys
2019-03-31 02:32:15 ----A---- C:\Windows\system32\drivers\srv2.sys
2019-03-31 02:32:15 ----A---- C:\Windows\system32\drivers\srv.sys
2019-03-31 02:32:15 ----A---- C:\Windows\system32\blackbox.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\apisetschema.dll
2019-03-31 02:32:15 ----A---- C:\Windows\system32\advapi32.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\srclient.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\setup16.exe
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\quartz.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\instnm.exe
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\certcli.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2019-03-31 02:32:14 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2019-03-31 02:32:14 ----A---- C:\Windows\system32\wmdrmsdk.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\winsrv.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\wdigest.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\sscore.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\srvsvc.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\srcore.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\srclient.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\schannel.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\setbcdlocale.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\rstrui.exe
2019-03-31 02:32:14 ----A---- C:\Windows\system32\quartz.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\ncrypt.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\cryptbase.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\conhost.exe
2019-03-31 02:32:14 ----A---- C:\Windows\system32\certcli.dll
2019-03-31 02:32:14 ----A---- C:\Windows\system32\bcrypt.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\mssign32.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\msscp.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\evr.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2019-03-31 02:32:13 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\wmp.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\wintrust.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\qdvd.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\mssign32.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\msscp.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\msobjs.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\msnetobj.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\msaudite.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\mfplat.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\mf.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\evr.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\EncDump.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\drmmgrtn.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2019-03-31 02:32:13 ----A---- C:\Windows\system32\cryptui.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\cryptsvc.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\crypt32.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\auditpol.exe
2019-03-31 02:32:13 ----A---- C:\Windows\system32\audiosrv.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\AudioSes.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\AUDIOKSE.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\AudioEng.dll
2019-03-31 02:32:13 ----A---- C:\Windows\system32\audiodg.exe
2019-03-31 02:32:13 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2019-03-31 02:32:13 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2019-03-31 02:32:13 ----A---- C:\Windows\system32\adtschema.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\wmp.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\mfps.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\mferror.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\mf.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2019-03-31 02:32:12 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\wmploc.DLL
2019-03-31 02:32:12 ----A---- C:\Windows\system32\spwmp.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\rrinstaller.exe
2019-03-31 02:32:12 ----A---- C:\Windows\system32\pcawrk.exe
2019-03-31 02:32:12 ----A---- C:\Windows\system32\pcasvc.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\pcalua.exe
2019-03-31 02:32:12 ----A---- C:\Windows\system32\pcaevts.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\pcadm.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\msmmsp.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\mfps.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\mfpmp.exe
2019-03-31 02:32:12 ----A---- C:\Windows\system32\mferror.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\dxmasf.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2019-03-31 02:32:12 ----A---- C:\Windows\system32\cryptsp.dll
2019-03-31 02:32:12 ----A---- C:\Windows\system32\cryptnet.dll
2019-03-26 11:45:17 ----D---- C:\Windows\pss
2019-03-11 03:22:53 ----D---- C:\Users\jakub\AppData\Roaming\Filemail Desktop

======List of files/folders modified in the last 1 month======

2019-04-10 13:54:11 ----D---- C:\Windows\Temp
2019-04-10 13:54:11 ----D---- C:\Program Files\trend micro
2019-04-10 13:25:43 ----D---- C:\Program Files\WinRAR
2019-04-10 13:23:50 ----D---- C:\Program Files\7-Zip
2019-04-10 12:27:01 ----D---- C:\Windows\system32\config
2019-04-10 12:25:32 ----D---- C:\ProgramData\NVIDIA
2019-04-10 12:23:14 ----SHD---- C:\Windows\Installer
2019-04-10 12:23:14 ----SHD---- C:\Config.Msi
2019-04-10 12:22:40 ----D---- C:\Windows\System32
2019-04-10 12:22:40 ----D---- C:\Windows\inf
2019-04-10 12:22:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2019-04-10 12:22:26 ----D---- C:\Windows\SysWOW64
2019-04-10 12:11:24 ----D---- C:\Windows\system32\drivers
2019-04-10 12:10:47 ----D---- C:\Windows
2019-04-09 20:49:43 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2019-04-09 20:48:09 ----D---- C:\Windows\system32\Macromed
2019-04-09 20:48:08 ----D---- C:\Windows\SYSWOW64\Macromed
2019-04-07 11:30:00 ----D---- C:\Windows\system32\Tasks
2019-04-06 15:12:41 ----D---- C:\Windows\Microsoft.NET
2019-04-06 13:21:46 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-04-06 13:19:38 ----D---- C:\Program Files (x86)\Microsoft Office
2019-04-06 04:02:36 ----D---- C:\Users\jakub\AppData\Roaming\Dropbox
2019-04-04 15:39:58 ----D---- C:\Windows\system32\NDF
2019-03-31 11:32:00 ----SHD---- C:\Boot
2019-03-31 11:32:00 ----D---- C:\Windows\winsxs
2019-03-31 03:22:21 ----D---- C:\Windows\SYSWOW64\Dism
2019-03-31 03:22:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2019-03-31 03:22:21 ----D---- C:\Windows\system32\en-US
2019-03-31 03:22:21 ----D---- C:\Windows\system32\drivers\en-US
2019-03-31 03:22:21 ----D---- C:\Windows\system32\Dism
2019-03-31 03:22:21 ----D---- C:\Windows\system32\cs-CZ
2019-03-31 03:22:21 ----D---- C:\Windows\AppPatch
2019-03-31 03:22:21 ----D---- C:\Program Files\Windows Media Player
2019-03-31 03:22:21 ----D---- C:\Program Files (x86)\Windows Media Player
2019-03-31 03:22:20 ----D---- C:\Windows\system32\DriverStore
2019-03-31 03:22:20 ----D---- C:\Windows\system32\Boot
2019-03-31 02:39:18 ----SHD---- C:\System Volume Information
2019-03-31 02:29:03 ----D---- C:\Windows\system32\catroot2
2019-03-29 14:57:50 ----D---- C:\ProgramData\Package Cache
2019-03-29 11:28:15 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2019-03-29 11:28:15 ----D---- C:\Program Files (x86)\Mozilla Firefox
2019-03-28 15:15:55 ----D---- C:\ProgramData\Epic
2019-03-27 10:29:05 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2019-03-26 11:42:41 ----D---- C:\Windows\Minidump
2019-03-19 21:01:53 ----D---- C:\Program Files (x86)\Battle.net
2019-03-18 19:21:24 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avdevprot;avdevprot; C:\Windows\system32\DRIVERS\avdevprot.sys [2019-02-26 65104]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2019-02-26 158840]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2019-02-26 36072]
R1 CPEPMon;CPEPMon; C:\Windows\system32\DRIVERS\CPEPMon.sys [2018-04-09 68280]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 epnetflt;Endpoint Security Network Filter Driver; \??\C:\Windows\system32\drivers\epnetflt.sys [2017-12-10 117400]
R1 epregflt;Endpoint Security Registry Filter Driver; \??\C:\Windows\system32\drivers\epregflt.sys [2017-10-23 101552]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2017-04-13 461240]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2019-02-26 206808]
R2 avnetflt;avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [2017-07-13 78600]
R2 cpbak;cpbak; C:\Windows\system32\DRIVERS\cpbak.sys [2018-04-11 61592]
R2 ISWKL;ISWKL; \??\C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\Bin\ISWKL.sys [2018-03-11 65264]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-10-27 38248]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-10-27 301680]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-10-27 31080]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-10-27 203624]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-10-27 58992]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-10-27 156520]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-10-27 279152]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-08-11 482128]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [2019-04-10 274416]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2018-10-01 70024]
R3 nvvhci;NVVHCI Enumerator Service; C:\Windows\system32\DRIVERS\nvvhci.sys [2018-10-03 66792]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
R3 wacmoumonitor;Wacom Mode Helper; C:\Windows\system32\DRIVERS\wacmoumonitor.sys [2011-09-08 13312]
R3 wacommousefilter;Wacom Mouse Filter Driver; C:\Windows\system32\DRIVERS\wacommousefilter.sys [2011-09-08 12848]
R3 wacomvhid;Wacom Virtual Hid Driver; C:\Windows\system32\DRIVERS\wacomvhid.sys [2011-09-08 16168]
S1 EIO64;EIO Driver; C:\Windows\system32\DRIVERS\EIO64.sys []
S3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\Windows\system32\drivers\asusgsb.sys [2009-02-17 17792]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-10-27 55336]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2019-01-16 30336]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-12-16 83984]
R2 AGMService;Adobe Genuine Monitor Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2018-12-13 2917864]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2018-12-13 2709480]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2019-02-26 248312]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2019-02-26 248312]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-10-27 52896]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2019-03-20 466280]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2019-03-28 11082312]
R2 CPEFR;Check Point Endpoint EFR; C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe [2018-05-30 2498296]
R2 CpSbaCipolla;Check Point Sandblast Agent Cipolla; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [2018-10-31 33016]
R2 CpSbaUpdater;Check Point Sandblast Agent Updater; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [2018-10-31 33016]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EPSON_PM_RPCV4_06;EPSON V3 Service4(06); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [2013-04-15 152640]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc64.exe [2012-05-17 144560]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2012-07-27 170824]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2019-02-01 6562472]
R2 McciCMService;McciCMService; C:\Program Files (x86)\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2019-01-30 790920]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2018-11-13 767288]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2019-01-30 790920]
R2 RemediationService;Check Point Endpoint Remediation; C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe [2018-03-22 17656]
R2 TabletServicePen;TabletServicePen; C:\Program Files\Tablet\Pen\Pen_Tablet.exe [2011-09-08 6583160]
R2 TESvc;Check Point SandBlast Agent Threat Emulation; C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe [2018-04-23 196344]
R2 TouchServicePen;Wacom Consumer Touch Service; C:\Program Files\Tablet\Pen\Pen_TouchService.exe [2011-09-08 528760]
R2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2018-05-18 4292984]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [2019-02-26 893008]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2018-03-26 107592]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2018-03-26 128584]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-11-11 3002728]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-04-09 335416]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2019-01-21 802432]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-12-14 116224]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-08-12 177376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2019-03-28 238544]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2019-01-30 790920]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-11-11 2123104]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2019-03-28 223216]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2016-01-06 5132888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2019-02-19 1693472]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 SystemExplorerHelpService;System Explorer Service; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [2012-11-25 821720]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-30 1255736]
S4 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [2019-02-26 1191152]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-03-26 52832]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]

-----------------EOF-----------------

[Conder]

Ahoj

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

[out_of_space]

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-10-2019
# Duration: 00:00:01
# OS: Windows 7 Home Premium
# Cleaned: 0
# Failed: 2


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

Not Deleted safesearch.avira.com
Not Deleted safesearch.avira.com


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1331 octets] - [10/04/2019 16:47:02]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[Conder]

Poprosim o obidva logy z FRST (FRST.txt a Addition.txt) podla tohto navodu: https://forum.viry.cz/viewtopic.php?f=13&t=154679

[out_of_space]

Tady jsou logy

[Conder]

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Program Files (x86)\System Explorer\SystemExplorer.exe
  File: C:\Users\jakub\printconductor-free-setup.exe
  ExportKey: HKLM\System\CurrentControlSet\Services\KNet
  
  HKLM\...\Run: [] => [X]
  HKLM-x32\...\Run: [] => [X]
  HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\Run: [AdobeBridge] => [X]
  HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\Run: [] => [X]
  HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\MountPoints2: {3aea811a-94c0-11e4-b3db-14dae9d5aa56} - L:\Startme.exe
  HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\MountPoints2: {dc7cd3b1-8767-11e3-911f-806e6f6e6963} - G:\score.exe
  HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\MountPoints2: {fc4f0601-8829-11e3-888f-8c3ea86026d5} - M:\setup.exe
  HKU\S-1-5-18\...\Run: [AdobeBridge] => [X]
  CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
  HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
  HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  S1 EIO64; system32\DRIVERS\EIO64.sys [X]
  U3 iswSvc; no ImagePath
  S4 NVHDA; system32\drivers\nvhda64v.sys [X]
  S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
  2019-02-14 15:09 - 2019-02-14 15:10 - 079334336 _____ (fCoder SIA                                                  ) C:\Users\jakub\printconductor-free-setup.exe
  ShellIconOverlayIdentifiers: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
  ShellIconOverlayIdentifiers-x32: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
  AlternateDataStreams: C:\ProgramData\TEMP:264A9BB7 [153]
  AlternateDataStreams: C:\Users\jakub\Dropbox:user.myxattr [0]
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

[out_of_space]

Tady je log. Mimochodem před restartem mi Avira vyhodila tabulku Host file blocked, víc jsem přečíst nestihl.

Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by jakub (10-04-2019 21:38:57) Run:1
Running from C:\Users\jakub\Desktop
Loaded Profiles: jakub (Available Profiles: jakub)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\System Explorer\SystemExplorer.exe
File: C:\Users\jakub\printconductor-free-setup.exe
ExportKey: HKLM\System\CurrentControlSet\Services\KNet

HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\Run: [] => [X]
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\MountPoints2: {3aea811a-94c0-11e4-b3db-14dae9d5aa56} - L:\Startme.exe
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\MountPoints2: {dc7cd3b1-8767-11e3-911f-806e6f6e6963} - G:\score.exe
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\...\MountPoints2: {fc4f0601-8829-11e3-888f-8c3ea86026d5} - M:\setup.exe
HKU\S-1-5-18\...\Run: [AdobeBridge] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
S1 EIO64; system32\DRIVERS\EIO64.sys [X]
U3 iswSvc; no ImagePath
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
2019-02-14 15:09 - 2019-02-14 15:10 - 079334336 _____ (fCoder SIA ) C:\Users\jakub\printconductor-free-setup.exe
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:264A9BB7 [153]
AlternateDataStreams: C:\Users\jakub\Dropbox:user.myxattr [0]

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 127
Average :
Sum : 755365341
Maximum :
Minimum :
Property : Length


========= End of Powershell: =========


========================= File: C:\Program Files (x86)\System Explorer\SystemExplorer.exe ========================

C:\Program Files (x86)\System Explorer\SystemExplorer.exe
File is digitally signed
MD5: 9728968C7F9FE60129D5DD60CAA598AA
Creation and modification date: 2014-01-28 16:49 - 2014-07-16 21:05
Size: 003830632
Attributes: ----A
Company Name: Miroslav Topolar -> Mister Group
Internal Name: SystemExplorer.exe
Original Name:
Product: System Explorer
Description: System Explorer
File Version: 5.9.0.5230
Product Version: 5.9.0
Copyright: (c) Mister Group
VirusTotal: https://www.virustotal.com/file/c7421a7 ... 465138533/

====== End of File: ======


========================= File: C:\Users\jakub\printconductor-free-setup.exe ========================

C:\Users\jakub\printconductor-free-setup.exe
File is digitally signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2019-02-14 15:09 - 2019-02-14 15:10
Size: 079334336
Attributes: ----A
Company Name: fCoder SIA -> fCoder SIA
Internal Name:
Original Name:
Product: Print Conductor
Description: Print Conductor Setup
File Version: 6.2.1812.29110
Product Version: 6.2
Copyright: fCoder SIA, 2018
VirusTotal: 0-byte

====== End of File: ======

================== ExportKey: ===================

"HKLM\System\CurrentControlSet\Services\KNet" => not found

=== End of ExportKey ===
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-3719608471-1457720249-86965872-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => removed successfully
"HKU\S-1-5-21-3719608471-1457720249-86965872-1000\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3aea811a-94c0-11e4-b3db-14dae9d5aa56} => removed successfully
HKLM\Software\Classes\CLSID\{3aea811a-94c0-11e4-b3db-14dae9d5aa56} => not found
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dc7cd3b1-8767-11e3-911f-806e6f6e6963} => removed successfully
HKLM\Software\Classes\CLSID\{dc7cd3b1-8767-11e3-911f-806e6f6e6963} => not found
HKU\S-1-5-21-3719608471-1457720249-86965872-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fc4f0601-8829-11e3-888f-8c3ea86026d5} => removed successfully
HKLM\Software\Classes\CLSID\{fc4f0601-8829-11e3-888f-8c3ea86026d5} => not found
"HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\System\CurrentControlSet\Services\EIO64 => removed successfully
EIO64 => service removed successfully
HKLM\System\CurrentControlSet\Services\iswSvc => removed successfully
iswSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\NVHDA => removed successfully
NVHDA => service removed successfully
HKLM\System\CurrentControlSet\Services\xhunter1 => removed successfully
xhunter1 => service removed successfully
C:\Users\jakub\printconductor-free-setup.exe => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => not found
C:\ProgramData\TEMP => ":264A9BB7" ADS removed successfully
C:\Users\jakub\Dropbox => ":user.myxattr" ADS could not remove.
Could not move "C:\Windows\System32\Drivers\etc\hosts" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10043946 B
Java, Flash, Steam htmlcache => 296955988 B
Windows/system/drivers => 10787654 B
Edge => 0 B
Chrome => 0 B
Firefox => 1105682146 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 33058 B
systemprofile32 => 161759 B
LocalService => 66228 B
NetworkService => 79329544 B
jakub => 68607805 B
UpdatusUser => 0 B
UpdatusUser => 0 B

RecycleBin => 183585 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 10-04-2019 21:42:11)

C:\Windows\System32\Drivers\etc\hosts => Could not move
Could not restore Hosts.

==== End of Fixlog 21:42:11 ====

[Conder]

Ako to vyzera s PC? Nastala nejaka zmena alebo su este nejake problemy?

[out_of_space]

Tak stahování pořád nefunguje

[Conder]

Stiahni CrystalDiskInfo: https://crystalmark.info/redirect.php?p ... alDiskInfo

• Rozbal cely archiv na plochu a spusti cez DiskInfo64.exe alebo DiskInfo32.exe
• Hore klikni na Upravy (Edit) -> Kopirovat (Copy)
• Skopiruje sa log, jeho obsah vloz (Ctrl+V) do dalsej odpovedi

[out_of_space]

Tady je, ale nemyslím si, že jo to diskem. Nejde mi stáhnout ani jedna větší (200MB) aktualizace Windows a ta se ukládá na jiný disk, než kam normálně stahuju.

//normálně stahuju na F:

----------------------------------------------------------------------------
CrystalDiskInfo 8.0.0 (C) 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2019/04/11 1:12:40

-- Controller Map ----------------------------------------------------------
+ Standardní řadič AHCI 1.0 s rozhraním Serial ATA [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ Intel(R) Desktop/Workstation/Server Express Chipset SATA AHCI Controller [ATA]
- WDC WD20EARX-00PASB0
- INTEL SSDSA2BW160G3H
- HL-DT-ST DVDRAM GH22NS40
- ST3500320AS
- ATA Channel 0 (0) [ATA]
- ATA Channel 1 (1) [ATA]
+ Virtual CloneDrive [SCSI]
- ELBY CLONEDRIVE SCSI CdRom Device

-- Disk List ---------------------------------------------------------------
(1) WDC WD20EARX-00PASB0 : 2000,3 GB [0/0/0, pd1] - wd
(2) INTEL SSDSA2BW160G3H : 160,0 GB [1/0/1, pd1] - il
(3) ST3500320AS : 500,1 GB [2/0/3, pd1] - st

----------------------------------------------------------------------------
(1) WDC WD20EARX-00PASB0
----------------------------------------------------------------------------
Model : WDC WD20EARX-00PASB0
Firmware : 51.0AB51
Serial Number : WD-WMAZA7301336
Disk Size : 2000,3 GB (8,4/137,4/2000,3/----)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 3907029168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 23570 hod.
Power On Count : 2326 krát
Temperature : 36 C (96 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : E: F:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 167 163 _21 0000000019E9 Čas na roztočení ploten
04 _93 _93 __0 000000001F09 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _68 _68 __0 000000005C12 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _98 _98 __0 000000000916 Počet cyklů zapnutí zařízení
C0 200 200 __0 0000000000CF Počet vypnutí disku
C1 _65 _65 __0 000000062F5E Počet cyklů načítání/vymazání
C2 114 _99 __0 000000000024 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 574D 415A 4137 3330 3133 3336
020: 0000 0000 0032 3531 2E30 4142 3531 5744 4320 5744
030: 3230 4541 5258 2D30 3050 4153 4230 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0006 0044 0044
080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 407F 00CC
090: 00CC 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 88B0 E8E0 0000 0000 0000 0000 6003 0000 5001 4EE2
110: 5C1C 740A 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 3035 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 6EA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 A7 A3 E9 19 00 00 00 00 00 04 32 00 5D 5D 09
020: 1F 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 44 44 12 5C 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 62 62 16 09 00 00 00 00 00 C0 32
070: 00 C8 C8 CF 00 00 00 00 00 00 C1 32 00 41 41 5E
080: 2F 06 00 00 00 00 C2 22 00 72 63 24 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 18 9C 01 7B
170: 03 00 01 00 02 FF 05 81 01 00 00 00 00 00 00 00
180: 00 00 01 06 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C3

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 C8 C8 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 C8 C8 C8 C8 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 C8 C8 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AD

----------------------------------------------------------------------------
(2) INTEL SSDSA2BW160G3H
----------------------------------------------------------------------------
Model : INTEL SSDSA2BW160G3H
Firmware : 4PC10365
Serial Number : CVPR140405ET160DGN
Disk Size : 160,0 GB (8,4/137,4/160,0/----)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : ---- | SATA/300
Power On Hours : 2652 hod.
Power On Count : 3022 krát
Host Reads : 24108 GB
Host Writes : 51212 GB
Temperature : Neznámy údaj
Health Status : Dobrý (100 %)
Features : S.M.A.R.T., 48bit LBA, NCQ, TRIM
APM Level : ----
AAM Level : ----
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
03 100 100 __0 000000000000 Čas na roztočení ploten
04 100 100 __0 000000000000 Počet spuštění/zastavení
05 100 100 __0 000000000000 Počet přemapovaných sektorů
09 100 100 __0 000000000A5C Zapnuto hodin
0C 100 100 __0 000000000BCE Počet cyklů zapnutí zařízení
AA 100 100 _10 000000000000 Available Reserved Space
AB 100 100 __0 000000000000 Program Fail Count
AC 100 100 __0 000000000000 Erase Fail Count
B7 100 100 _10 000000000309 SATA Downshift Count
B8 100 100 _97 000000000000 End to End Error Detection Count
BB 100 100 __0 000000000000 Uncorrectable Error Count
C0 100 100 __0 000000000042 Unsafe Shutdown Count
C7 100 100 __0 00000000001D CRC Error Count
E1 100 100 __0 00000019018D Host Writes
E2 100 100 __0 00000000FFFF Timed Workload Media Wear
E3 100 100 __0 00000000FFFF Timed Workload Host Read/Write Ratio
E4 100 100 __0 00000000FFFF Timed Workload Timer
E8 100 100 _10 000000000000 Dostupný vyhrazený prostor
E9 _93 _93 __0 000000000000 Mediální indikátor poruch
F1 100 100 __0 00000019018D Total LBAs Written
F2 100 100 __0 0000000BC599 Total LBAs Read

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 4356 5052 3134 3034 3035 4554 3136 3044 474E 2020
020: 0000 0000 0000 3450 4331 3033 3635 494E 5445 4C20
030: 5353 4453 4132 4257 3136 3047 3348 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 4020
070: 0000 0000 0000 0000 0000 001F 0506 0000 0048 0048
080: 01FC 0029 706B 7C01 4123 7069 BC01 4123 407F 0001
090: 0001 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0008 4000 0000 5001 5179
110: 596E A742 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0001
130: 1770 0BB7 1770 1770 1770 0BB7 0FA0 0FA0 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0400 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 9DA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 05 00 03 20 00 64 64 00 00 00 00 00 00 00 04 30
010: 00 64 64 00 00 00 00 00 00 00 05 32 00 64 64 00
020: 00 00 00 00 00 00 09 32 00 64 64 5C 0A 00 00 00
030: 00 00 0C 32 00 64 64 CE 0B 00 00 00 00 00 AA 33
040: 00 64 64 00 00 00 00 00 00 00 AB 32 00 64 64 00
050: 00 00 00 00 00 00 AC 32 00 64 64 00 00 00 00 00
060: 00 00 B7 32 00 64 64 09 03 00 00 00 00 00 B8 33
070: 00 64 64 00 00 00 00 00 00 00 BB 32 00 64 64 00
080: 00 00 00 00 00 00 C0 32 00 64 64 42 00 00 00 00
090: 00 00 C7 36 00 64 64 1D 00 00 00 00 00 00 E1 32
0A0: 00 64 64 8D 01 19 00 00 00 00 E2 32 00 64 64 FF
0B0: FF 00 00 00 00 00 E3 32 00 64 64 FF FF 00 00 00
0C0: 00 00 E4 32 00 64 64 FF FF 00 00 00 00 00 E8 33
0D0: 00 64 64 00 00 00 00 00 00 00 E9 32 00 5D 5D 00
0E0: 00 00 00 00 00 00 F1 32 00 64 64 8D 01 19 00 00
0F0: 00 00 F2 32 00 64 64 99 C5 0B 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 75
170: 03 00 01 00 01 16 01 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 05 00 03 00 00 00 00 00 00 00 00 00 00 00 04 00
010: 00 00 00 00 00 00 00 00 00 00 05 00 00 00 00 00
020: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
030: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 AA 0A
040: 00 00 00 00 00 00 00 00 00 00 AB 00 00 00 00 00
050: 00 00 00 00 00 00 AC 00 00 00 00 00 00 00 00 00
060: 00 00 B7 0A 00 00 00 00 00 00 00 00 00 00 B8 61
070: 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C7 00 00 00 00 00 00 00 00 00 00 00 E1 00
0A0: 00 00 00 00 00 00 00 00 00 00 E2 00 00 00 00 00
0B0: 00 00 00 00 00 00 E3 00 00 00 00 00 00 00 00 00
0C0: 00 00 E4 00 00 00 00 00 00 00 00 00 00 00 E8 0A
0D0: 00 00 00 00 00 00 00 00 00 00 E9 00 00 00 00 00
0E0: 00 00 00 00 00 00 F1 00 00 00 00 00 00 00 00 00
0F0: 00 00 F2 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6B

----------------------------------------------------------------------------
(3) ST3500320AS
----------------------------------------------------------------------------
Model : ST3500320AS
Firmware : SD15
Serial Number : 6QM07TMM
Disk Size : 500,1 GB (8,4/137,4/500,1/----)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : ---- | SATA/300
Power On Hours : 42794 hod.
Power On Count : 4967 krát
Temperature : 36 C (96 F)
Health Status : Pozor
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : D:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 103 _93 __6 0000047501C1 Počet chyb čtení
03 _95 _85 __0 000000000000 Čas na roztočení ploten
04 _92 _92 _20 0000000023ED Počet spuštění/zastavení
05 100 100 _36 000000000023 Počet přemapovaných sektorů
07 _77 _60 _30 00091BD6DC11 Počet chybných hledání
09 _52 _52 __0 00000000A72A Hodin v činnosti
0A 100 _98 _97 00000000009A Počet opakovaných pokusů o roztočení ploten
0C _96 _96 _20 000000001367 Počet cyklů zapnutí zařízení
B8 100 100 _99 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 000200020005 Časový limit příkazu
BD _90 _90 __0 00000000000A Vysoká rychlost zápisu
BE _64 _50 _45 0000250F0024 Teplota toku vzduchu
C2 _36 _50 __0 FFFF00000024 Teplota
C3 _21 _14 __0 0000047501C1 Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2020 3651 4D30 3754 4D4D
020: 0000 0000 0004 5344 3135 2020 2020 5354 3335 3030
030: 3332 3041 5320 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0506 0000 0040 0040
080: 01F0 0029 346B 7D01 4123 3469 BC01 4123 407F 0031
090: 0031 FEFE FFFE 0000 FE00 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 0000 0000 5000 C500
110: 0E29 0F6A 0000 0000 0000 0000 0000 0000 0000 400E
120: 400E 0000 0000 0000 0000 0000 0000 0000 0029 6030
130: 3A38 6030 3A38 0000 0002 0140 0100 5000 3C06 3C0A
140: 0000 003C 0000 0008 0000 0000 000F 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 2700 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 103B 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0002 0000 1010 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 6EA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 67 5D C1 01 75 04 00 00 00 03 03
010: 00 5F 55 00 00 00 00 00 00 00 04 32 00 5C 5C ED
020: 23 00 00 00 00 00 05 33 00 64 64 23 00 00 00 00
030: 00 00 07 0F 00 4D 3C 11 DC D6 1B 09 00 00 09 32
040: 00 34 34 2A A7 00 00 00 00 00 0A 13 00 64 62 9A
050: 00 00 00 00 00 00 0C 32 00 60 60 67 13 00 00 00
060: 00 00 B8 32 00 64 64 00 00 00 00 00 00 00 BB 32
070: 00 64 64 00 00 00 00 00 00 00 BC 32 00 64 63 05
080: 00 02 00 02 00 00 BD 3A 00 5A 5A 0A 00 00 00 00
090: 00 00 BE 22 00 40 32 24 00 0F 25 00 00 00 C2 22
0A0: 00 24 32 24 00 00 00 FF FF 00 C3 1A 00 15 0E C1
0B0: 01 75 04 00 00 00 C5 12 00 64 64 00 00 00 00 00
0C0: 00 00 C6 10 00 64 64 00 00 00 00 00 00 00 C7 3E
0D0: 00 C8 C8 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 7A 02 00 7B
170: 03 00 01 00 01 70 02 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 03 05 06 05 05 06 05 06
190: 05 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 84 00 E4 A0 47 44 1E 8C 00 00
1B0: 00 00 00 00 01 00 4B AA 76 8D C3 A8 F8 19 09 00
1C0: 45 E7 64 3E 6F 49 18 00 00 00 00 00 AF 42 EE 7D
1D0: 00 00 00 00 0D 00 00 00 BF 03 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 9A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F3

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 14 00 00 00 00
020: 00 00 00 00 00 00 05 24 00 00 00 00 00 00 00 00
030: 00 00 07 1E 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 61 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 B8 63 00 00 00 00 00 00 00 00 00 00 BB 00
070: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
080: 00 00 00 00 00 00 BD 00 00 00 00 00 00 00 00 00
090: 00 00 BE 2D 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 EA

[Conder]

Mas moznost otestovat stahovanie na tomto PC pomocou ineho internetoveho pripojenia? Alebo otestovat stahovanie pomocou tohto internehoeho pripojenia na inom zariadeni (iny PC, notebook, smartfon...)?

Spusti kontrolu integrity systemovych suborov:

• Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
• Skopiruj a spusti prikaz:

  Kód: Vybrat vše

  sfc /scannow

• Po dokonceni skopiruj a spusti tento prikaz:

  Kód: Vybrat vše

  findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"

• Na ploche sa vytvori subor sfcdetails.txt, zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
• Restartuj PC a napis ako sa chova PC

[out_of_space]

Do telefonu se mi soubor stáhnout podařilo. Do počítače stále ne. Log je i zabalený velký pro přílohu Tady je ke stažení: https://fil.email/aWP4rtu5

[Conder]

Stiahni a uloz na plochu ESET Online Scanner: ceska verzia | slovenska verzia

• Odsuhlas licencne podmienky
• Vyber moznost Zapnut detekciu potencialne nechcenych aplikacii
• Otvor rozsirene nastavenia
• Zaskrtni prvu moznost Zapnut detekciu potenciale zneuzitelnych aplikacii
• Klikni na Kontrola alebo Spustit
• Pockaj na dokoncenie - tento sken moze trvat aj niekolko hodin (zavisi od velkosti a rychlosti diskov)
• V pripade nalezov:
  • Klikni na Ulozit do textoveho suboru
  • Napis nazov napr. "eset" a uloz log na plochu
  • Obsah tohto logu sem skopiruj

Tiez poprosim o obidva nove logy z FRST.

[out_of_space]

13.4.2019 9:54:45
Zkontrolováno souborů: 657600
Infikovaných souborů: 17
Vyléčeno hrozeb: 17
Celkový čas kontroly 01:52:49
Stav kontroly: Dokončeno
F:\$RECYCLE.BIN\S-1-5-21-2602357843-3484561657-1090783424-1000\$RJ4FTXB\battlefield_2__no_cd_crack_rar\mediaget-admin-proxy.exe varianta infiltrace Win32/MediaGet.AE potenciálně nechtěná aplikace vyléčen smazáním
F:\$RECYCLE.BIN\S-1-5-21-2602357843-3484561657-1090783424-1000\$RJ4FTXB\staženo\Driver Genius Professional Edition 2010 (CZ, Funkční)\Driver_Genius_10_Professional_DE.exe varianta infiltrace Win32/Toolbar.Conduit.AU potenciálně nechtěná aplikace vyléčen smazáním
F:\$RECYCLE.BIN\S-1-5-21-2602357843-3484561657-1090783424-1000\$RJ4FTXB\windows_7_theme_manager_by_windowsthememanager-d3ivd89\Windows-Theme-Manager-Setup.exe Win32/InstallMonetizer.AN potenciálně nechtěná aplikace vyléčen smazáním
F:\programy\avira_antivir_personal_en.exe varianta infiltrace Win32/Bundled.Toolbar.Ask.G potenciálně zneužitelná aplikace,varianta infiltrace Win32/Bundled.Toolbar.Ask potenciálně zneužitelná aplikace vymazán
F:\programy\avira_free_antivirus_en.exe varianta infiltrace Win32/Bundled.Toolbar.Ask.G potenciálně zneužitelná aplikace,varianta infiltrace Win32/Bundled.Toolbar.Ask potenciálně zneužitelná aplikace vymazán
F:\programy\BurnAware_Free_33.exe varianta infiltrace Win32/Bundled.Toolbar.Ask potenciálně zneužitelná aplikace,varianta infiltrace Win32/Bundled.Toolbar.Ask.G potenciálně zneužitelná aplikace vyléčen smazáním
F:\programy\dfsetup209.exe Win32/Bundled.Toolbar.Google.E potenciálně zneužitelná aplikace vyléčen smazáním
F:\programy\zaSetup_92_106_000_en.exe varianta infiltrace Win32/Toolbar.Conduit.AI potenciálně nechtěná aplikace,varianta infiltrace Win32/Bundled.Toolbar.Ask.G potenciálně zneužitelná aplikace vyléčen smazáním
F:\rozbaleno\__\burnaware_free.exe varianta infiltrace Win32/Bundled.Toolbar.Ask potenciálně zneužitelná aplikace,varianta infiltrace Win32/Bundled.Toolbar.Ask.G potenciálně zneužitelná aplikace vyléčen smazáním
F:\rozbaleno\__\ccsetup312.exe Win32/Bundled.Toolbar.Google.E potenciálně zneužitelná aplikace vyléčen smazáním
F:\rozbaleno\__\ccsetup316.exe Win32/Bundled.Toolbar.Google.E potenciálně zneužitelná aplikace vyléčen smazáním
F:\rozbaleno\__\dfsetup208.exe Win32/Bundled.Toolbar.Google.E potenciálně zneužitelná aplikace vyléčen smazáním
F:\rozbaleno\__\dfsetup209.exe Win32/Bundled.Toolbar.Google.E potenciálně zneužitelná aplikace vyléčen smazáním
F:\rozbaleno\__\utorrent.exe varianta infiltrace Win32/Toolbar.Conduit.AY potenciálně nechtěná aplikace vyléčen smazáním
F:\rozbaleno\__\zaSetupWeb_101_065_000.exe Win32/Toolbar.Conduit potenciálně nechtěná aplikace vymazán
F:\rozbaleno\__\zaSetupWeb_101_101_000_en.exe Win32/Toolbar.Conduit potenciálně nechtěná aplikace vymazán
F:\rozbaleno\zafwSetupWeb_131_211_000.exe Win32/Toolbar.Conduit potenciálně nechtěná aplikace vymazán