Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pro Rudy: prosím o ko logu,

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Pro Rudy: prosím o ko logu,

#1 Příspěvek od jaruneczka »

IE a FF bliká, ztrácí se, píše neodpovídá..ráno oprava spuštění systému...neúspěšně, poté winrepair, pořád stejné...prosím o ko logu:
Logfile of random's system information tool 1.16 (written by random/random)
Run by Jarka at 2017-10-11 22:56:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 133 GB (28%) free of 477 GB
Total RAM: 3955 MB (60% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:56:05, on 11.10.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\ESET\ESET Password Manager\pwm.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Sticky Password\stpass.exe
C:\Program Files (x86)\Sticky Password\spUIAManager.exe
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe
C:\Program Files\trend micro\Jarka_RSITx64.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [EsetPasswordManager] C:\Program Files\ESET\ESET Password Manager\pwm.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 5675463671
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: Acronis Managed Machine Service Mini (mmsminisrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9541 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5b97e73f-ed91-432d-b78b-5b45f4b7b9ca -SystemEventPortName:HostProcess-b32d9d44-2526-4a00-ba62-971341e77025 -IoCancelEventPortName:HostProcess-7626b6c2-caf7-45e2-8fdb-eebbfaa15c08 -NonStateChangingEventPortName:HostProcess-b901a8da-6414-4f5e-9604-ded991b05274 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:49c48cbc-e847-49bf-b1b2-8ce88bc2cb1c -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\WLANExt.exe 2750144
\??\C:\Windows\system32\conhost.exe "-19064868371214721808132463657920139143631109078255-19870171561827050414804503514
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
C:\Windows\system32\taskeng.exe
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\valWBFPolicyService.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
"C:\Program Files\ESET\ESET Password Manager\pwm.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
\??\C:\Windows\system32\conhost.exe "-568305222883700939809523114-4161672431497569814-20074624-805660401-260867647
C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe" "--AUTO_START" "--start" "--start_options_registry_key" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ESRV_SVC_QUEENCREEK\_start"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
C:\Windows\system32\cmd.exe
\??\C:\Windows\system32\conhost.exe "-21350167399779776-1535251053176089355243303977718335649991122095050-1784246251
"C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe"
"C:\Program Files (x86)\Sticky Password\stpass.exe"
"C:\Program Files (x86)\Sticky Password\spUIAManager.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe" backgroundagent
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Jarka\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{53362C64-A296-4F2D-A2F8-FD984D08340B}
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

====== Scheduled tasks folder ======

C:\Windows\tasks\HPCeeScheduleForJarka.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_159_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\HPCeeScheduleForJarka - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\HPCustParticipation HP DeskJet 3700 series - "C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPCustPartic.exe" /UA 17.5
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\USER_ESRV_SVC_QUEENCREEK - "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
C:\Windows\system32\tasks\User_Feed_Synchronization-{75BE8925-8583-480B-9BD7-93CC07C15906} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{276AE620-8B00-4599-8FA0-45D320233FFB} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\SetupOviPlayer.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{8044EBA9-3C63-4963-BDEC-1F48682EE181} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\win64_154519.4678.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{CE96D149-A560-40C7-82A7-C34100778F3F} - C:\Windows\system32\pcalua.exe -a "C:\drivers\Intel Bluetooth Driver\Setup.exe" -d "C:\drivers\Intel Bluetooth Driver"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-582464855-1890364033-424521494-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\TVT\TVSUUpdateTask - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" /CM -search R -action INSTALL -includerebootpackages 1,3,4 -noicon -noreboot -nolicense -defaultupdate -schtask
C:\Windows\system32\tasks\TVT\TVSUUpdateTask_UserLogOn - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" PendingTask
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\fplmonitor - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\fplmonitorConnect - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Solution Center Launcher - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus
C:\Windows\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\Windows\system32\tasks\Lenovo\LSC\LSCHardwareScan - C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-582464855-1890364033-424521494-1000 - "C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Intel\Intel Telemetry 2 - C:\Program Files\Intel\Telemetry 2.0\lrio.exe
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /r /m
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\Windows\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\Windows\system32\tasks\CyberLink\Photo Master Gadget startup - C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe backgroundagent

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\addons.json
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\extensions.json
Activity Stream - extension - activity-stream@mozilla.org -
Application Update Service Helper - extension - aushelper@mozilla.org -
Click-to-Play staged rollout - extension - clicktoplay-rollout@mozilla.org -
Multi-process staged rollout - extension - e10srollout@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Firefox Screenshots - extension - screenshots@mozilla.org -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
IBM Security Rapport - webextension - rapportext@trusteer.com -
ESET Password Manager Autofill Engine - extension - {9C89F117-DC08-4D99-99F0-BF857F684AD9} -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} -
Sticky Password extension - webextension - {ecb80162-dfbd-4d91-a8da-17b35ba4707a} -

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.159 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2017-01-03 863320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03 758360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=cmd /c /q C:\Program Files\ESET\ESET Security\ecmd.exe /launch /hide []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]
"EsetPasswordManager"=C:\Program Files\ESET\ESET Password Manager\pwm.exe [2017-08-12 92672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2016-10-14 567088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2016-04-25 421768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2017-05-10 7953576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DSATray]
C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [2017-09-18 131360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Smart Fingerprint]
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-07-31 1761208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LenovoUtility]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2016-10-14 1841496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PhotoMasterImportAgent]
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [2016-09-22 675608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_Dolby]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_DOLBYDRAGON]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_MICPKEY]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-07 16781824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
C:\Program Files (x86)\Sticky Password\stpass.exe [2017-08-27 64000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2017-06-23 7390424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-09-04 296216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jarka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledování výstrah kazety - HP DJ 3700 series.lnk]
C:\Program Files\HP\HP DeskJet 3700 series\bin\HPStatusBL.dll [2016-09-14 8067216]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ituneshelper]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_dolby]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_dolbydragon]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_micpkey]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-10-11 22:56:01 ----D---- C:\rsit
2017-10-11 21:52:40 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-10-11 17:11:17 ----D---- C:\Users\Jarka\AppData\Roaming\ESET
2017-10-11 17:04:17 ----D---- C:\ProgramData\ESET
2017-10-11 17:04:17 ----D---- C:\Program Files\ESET
2017-10-11 09:13:52 ----D---- C:\Windows\system32\catroot2
2017-10-11 09:13:39 ----D---- C:\Windows\SoftwareDistribution
2017-10-11 06:31:53 ----D---- C:\Program Files (x86)\Tweaking.com
2017-10-11 05:16:34 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-11 05:12:12 ----SHD---- C:\Config.Msi
2017-10-11 05:07:52 ----A---- C:\Windows\system32\mshtml.dll
2017-10-11 05:07:51 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-10-11 05:07:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-10-11 05:07:50 ----A---- C:\Windows\system32\ieframe.dll
2017-10-11 05:07:49 ----A---- C:\Windows\system32\jscript9.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-10-11 05:07:48 ----A---- C:\Windows\system32\wininet.dll
2017-10-11 05:07:47 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\win32k.sys
2017-10-11 05:07:47 ----A---- C:\Windows\system32\urlmon.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\tquery.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-11 05:07:47 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\iertutil.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\schannel.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\Query.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\kerberos.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\jscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\schannel.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msfeeds.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msctf.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-11 05:07:45 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\wlansec.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\wdigest.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\TSpkg.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\ncrypt.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\certcli.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\adtschema.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\wlansec.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\mswstr10.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\t2embed.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-11 05:07:43 ----A---- C:\Windows\system32\iedkcs32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\gdi32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-11 05:07:43 ----A---- C:\Windows\system32\bcrypt.dll
2017-10-11 05:07:42 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2017-10-11 05:07:42 ----A---- C:\Windows\SYSWOW64\themeui.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\themeui.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\ntdll.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\wlanhlp.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\webcheck.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\sspicli.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\secur32.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\lsass.exe
2017-10-11 05:07:41 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\secur32.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\msjint40.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\credssp.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2017-10-11 05:07:40 ----A---- C:\Windows\system32\vbscript.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\mshtmled.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\msaudite.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\ieapfltr.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\dxtrans.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\credssp.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\auditpol.exe
2017-10-11 05:07:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\smss.exe
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssvp.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssrch.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssph.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\kernel32.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\ieui.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\dxtmsft.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-10-11 05:07:39 ----A---- C:\Windows\system32\advapi32.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\wow64win.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\winsrv.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\srcore.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\occache.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\msrating.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\KernelBase.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\jsproxy.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\wow64.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\inseng.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ieUnatt.exe
2017-10-11 05:07:37 ----A---- C:\Windows\system32\iesetup.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\iernonce.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ie4uinit.exe
2017-10-11 05:07:37 ----A---- C:\Windows\system32\drivers\appid.sys
2017-10-11 05:07:37 ----A---- C:\Windows\system32\csrsrv.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\conhost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\srclient.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\wow64cpu.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\srclient.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\rstrui.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\ntvdm64.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\msobjs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidsvc.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidapi.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2017-10-11 05:07:35 ----A---- C:\Windows\system32\msshooks.dll
2017-10-11 05:07:35 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\user.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\setup16.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\instnm.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2017-10-11 05:07:33 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-11 05:07:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-10-10 06:40:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-10 06:40:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-10-07 10:07:00 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Euask
2017-10-01 10:51:02 ----D---- C:\Users\Jarka\AppData\Roaming\Lamantine
2017-10-01 10:46:42 ----D---- C:\Program Files (x86)\Sticky Password
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-09-30 11:39:58 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-09-23 18:06:45 ----D---- C:\Program Files\Lenovo
2017-09-22 07:04:45 ----D---- C:\Program Files (x86)\Intel Driver and Support Assistant
2017-09-22 06:32:50 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\mf.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\mf.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\icaapi.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2017-09-19 20:47:22 ----A---- C:\Windows\SYSWOW64\mferror.dll
2017-09-19 20:47:22 ----A---- C:\Windows\system32\mferror.dll
2017-09-19 10:05:54 ----A---- C:\Windows\system32\drivers\epfwwfp.sys
2017-09-19 10:05:44 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys
2017-09-19 10:05:42 ----A---- C:\Windows\system32\drivers\epfw.sys
2017-09-19 10:05:40 ----A---- C:\Windows\system32\drivers\ekbdflt.sys
2017-09-19 10:05:38 ----A---- C:\Windows\system32\drivers\ehdrv.sys
2017-09-19 10:05:34 ----A---- C:\Windows\system32\drivers\edevmon.sys
2017-09-12 21:43:08 ----A---- C:\Windows\system32\shell32.dll
2017-09-12 21:43:07 ----A---- C:\Windows\system32\mmcndmgr.dll
2017-09-12 21:43:07 ----A---- C:\Windows\system32\mmc.exe
2017-09-12 21:43:06 ----A---- C:\Windows\SYSWOW64\shell32.dll
2017-09-12 21:43:04 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2017-09-12 21:43:04 ----A---- C:\Windows\system32\localspl.dll
2017-09-12 21:43:03 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2017-09-12 21:43:03 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2017-09-12 21:43:03 ----A---- C:\Windows\SYSWOW64\usp10.dll
2017-09-12 21:43:03 ----A---- C:\Windows\SYSWOW64\mmc.exe
2017-09-12 21:43:03 ----A---- C:\Windows\system32\Wldap32.dll
2017-09-12 21:43:03 ----A---- C:\Windows\system32\win32spl.dll
2017-09-12 21:43:03 ----A---- C:\Windows\system32\usp10.dll
2017-09-12 21:43:02 ----A---- C:\Windows\system32\nsisvc.dll
2017-09-12 21:43:02 ----A---- C:\Windows\system32\mmcshext.dll
2017-09-12 21:43:02 ----A---- C:\Windows\system32\mmcbase.dll
2017-09-12 21:43:02 ----A---- C:\Windows\system32\drivers\netbt.sys
2017-09-12 21:43:02 ----A---- C:\Windows\system32\cic.dll
2017-09-12 21:43:01 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2017-09-12 21:43:01 ----A---- C:\Windows\system32\ntprint.dll
2017-09-12 21:43:01 ----A---- C:\Windows\system32\drivers\nsiproxy.sys
2017-09-12 21:43:00 ----A---- C:\Windows\SYSWOW64\mmcshext.dll
2017-09-12 21:43:00 ----A---- C:\Windows\SYSWOW64\mmcbase.dll
2017-09-12 21:43:00 ----A---- C:\Windows\SYSWOW64\cic.dll
2017-09-12 21:43:00 ----A---- C:\Windows\system32\shdocvw.dll
2017-09-12 21:42:58 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2017-09-12 21:42:58 ----A---- C:\Windows\system32\winnsi.dll
2017-09-12 21:42:57 ----A---- C:\Windows\SYSWOW64\winnsi.dll
2017-09-12 21:42:57 ----A---- C:\Windows\system32\nsi.dll
2017-09-12 21:42:55 ----A---- C:\Windows\SYSWOW64\nsi.dll
2017-09-12 21:42:53 ----A---- C:\Windows\system32\ole32.dll
2017-09-12 21:42:52 ----A---- C:\Windows\SYSWOW64\ole32.dll
2017-09-12 21:42:52 ----A---- C:\Windows\system32\rpcss.dll
2017-09-12 21:42:51 ----A---- C:\Windows\SYSWOW64\ntprint.exe
2017-09-12 21:42:51 ----A---- C:\Windows\system32\ntprint.exe
2017-09-12 21:42:51 ----A---- C:\Windows\system32\netbtugc.exe
2017-09-12 21:42:51 ----A---- C:\Windows\system32\inetpp.dll
2017-09-12 21:42:51 ----A---- C:\Windows\system32\ExplorerFrame.dll
2017-09-12 21:42:50 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2017-09-12 21:42:48 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2017-09-12 21:42:48 ----A---- C:\Windows\system32\inetppui.dll
2017-09-12 21:42:47 ----A---- C:\Windows\system32\wpnpinst.exe
2017-09-12 21:42:46 ----A---- C:\Windows\system32\comcat.dll
2017-09-12 21:42:45 ----A---- C:\Windows\SYSWOW64\comcat.dll
2017-09-12 21:42:40 ----A---- C:\Windows\SYSWOW64\oleres.dll
2017-09-12 21:42:40 ----A---- C:\Windows\system32\oleres.dll

====== List of files/folders modified in the last 1 month ======

2017-10-11 22:56:04 ----D---- C:\Program Files\trend micro
2017-10-11 22:56:03 ----D---- C:\Windows\Temp
2017-10-11 22:06:41 ----D---- C:\Windows\system32\config
2017-10-11 21:57:45 ----D---- C:\Windows\System32
2017-10-11 21:57:45 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-10-11 21:57:44 ----D---- C:\Windows\inf
2017-10-11 21:53:35 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-10-11 21:52:59 ----D---- C:\ProgramData\Synaptics
2017-10-11 21:52:58 ----D---- C:\Windows
2017-10-11 21:52:48 ----D---- C:\Windows\debug
2017-10-11 20:20:56 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Disk Cleaner
2017-10-11 19:07:15 ----D---- C:\Windows\rescache
2017-10-11 17:05:10 ----D---- C:\Windows\system32\drivers
2017-10-11 17:05:09 ----D---- C:\Windows\system32\DriverStore
2017-10-11 17:05:05 ----SHD---- C:\Windows\Installer
2017-10-11 17:04:17 ----HD---- C:\ProgramData
2017-10-11 17:04:17 ----D---- C:\Program Files
2017-10-11 16:44:08 ----D---- C:\Windows\system32\NDF
2017-10-11 15:24:12 ----D---- C:\Users\Jarka\AppData\Roaming\Skype
2017-10-11 13:00:25 ----D---- C:\Windows\system32\Tasks
2017-10-11 12:39:22 ----D---- C:\Program Files (x86)\TeamViewer
2017-10-11 09:52:28 ----RD---- C:\Program Files (x86)
2017-10-11 09:52:18 ----D---- C:\ProgramData\ProductData
2017-10-11 09:47:46 ----D---- C:\Windows\system32\wdi
2017-10-11 09:16:47 ----SHD---- C:\System Volume Information
2017-10-11 09:07:11 ----D---- C:\Windows\SysWOW64
2017-10-11 09:06:58 ----D---- C:\Windows\winsxs
2017-10-11 09:06:03 ----D---- C:\Windows\system32\drivers\etc
2017-10-11 09:04:45 ----A---- C:\Windows\win.ini
2017-10-11 07:19:59 ----D---- C:\Windows\Microsoft.NET
2017-10-11 06:47:07 ----D---- C:\Windows\SYSWOW64\wbem
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\migration
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\en-US
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-10-11 05:40:01 ----D---- C:\Program Files\Internet Explorer
2017-10-11 05:40:01 ----D---- C:\Program Files (x86)\Internet Explorer
2017-10-11 05:40:00 ----D---- C:\Windows\system32\migration
2017-10-11 05:40:00 ----D---- C:\Windows\system32\cs-CZ
2017-10-11 05:39:59 ----D---- C:\Windows\system32\en-US
2017-10-11 05:39:58 ----D---- C:\Windows\system32\Boot
2017-10-11 05:39:58 ----D---- C:\Windows\AppPatch
2017-10-11 05:39:19 ----D---- C:\Windows\system32\MRT
2017-10-11 05:26:21 ----D---- C:\AdwCleaner
2017-10-11 05:16:16 ----AC---- C:\Windows\system32\MRT.exe
2017-10-11 05:13:20 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-10-10 20:39:13 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-10-10 20:39:09 ----D---- C:\Windows\system32\Macromed
2017-10-10 20:39:06 ----D---- C:\Windows\SYSWOW64\Macromed
2017-10-10 10:02:14 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2017-10-10 06:41:19 ----D---- C:\Users\Jarka\AppData\Roaming\Mozilla
2017-10-10 05:50:06 ----D---- C:\Zálohy- září 2016
2017-10-09 20:51:57 ----D---- C:\Windows\Logs
2017-10-08 06:57:16 ----D---- C:\Windows\Tasks
2017-10-05 10:41:10 ----D---- C:\fAKTURY
2017-10-01 23:11:00 ----D---- C:\Windows\SYSWOW64\config
2017-10-01 11:37:44 ----D---- C:\Users\Jarka\AppData\Roaming\WiseUpdate
2017-09-30 11:41:23 ----D---- C:\Windows\system32\catroot
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-09-23 18:05:21 ----D---- C:\Windows\Downloaded Installations
2017-09-23 18:05:05 ----D---- C:\ProgramData\Package Cache
2017-09-23 18:00:02 ----RSD---- C:\Windows\assembly
2017-09-23 17:59:53 ----D---- C:\Program Files (x86)\Lenovo
2017-09-22 07:03:59 ----D---- C:\Program Files\Intel
2017-09-20 19:32:21 ----D---- C:\Program Files\CCleaner

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-09-19 107336]
R0 file_tracker;Acronis File Tracker Driver; C:\Windows\system32\DRIVERS\file_tracker.sys [2017-06-26 366432]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2016-09-27 163160]
R0 iaStorA;Intel Chipset SATA RAID Controller; C:\Windows\system32\DRIVERS\iaStorA.sys [2017-07-07 891392]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2017-07-07 41472]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2017-09-12 252360]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2017-09-12 506400]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2017-06-26 340312]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2017-06-26 1267552]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-07-25 133360]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-09-19 180096]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-09-19 81888]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-09-19 61040]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-09-19 106312]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-12-10 27552]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\Windows\system32\DRIVERS\ndisrd.sys [2014-08-14 43088]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2017-09-28 384312]
R1 RapportCerberus_1804074;RapportCerberus_1804074; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804074.sys [2017-09-22 1269896]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2017-09-28 585432]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2017-09-28 610616]
R1 RawDisk3;RawDisk3; \??\C:\Windows\system32\drivers\rawdsk3.sys [2016-02-19 41576]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-09-19 50744]
R2 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2017-06-26 193376]
R2 virtual_file;Acronis Virtual File Driver; C:\Windows\system32\DRIVERS\virtual_file.sys [2016-09-27 279392]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2016-09-21 34552]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2017-05-12 158696]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2017-05-12 1560552]
R3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-07 32840]
R3 ibtusb;Aplikace Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2017-06-27 225808]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-06-20 7940600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-07-07 5545512]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2017-07-07 480800]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-09-04 394992]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2017-07-07 824848]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-09-11 200272]
R3 NETwNs64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw04.sys [2017-05-19 3470048]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2017-09-11 329184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2017-09-30 1075688]
R3 rtsuvc;EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2017-07-07 3127552]
R3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
R3 Tpm;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-09-02 181160]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 tnd;Acronis Try&Decide filter; C:\Windows\system32\DRIVERS\tnd.sys [2017-06-26 601432]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-30 23200]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2016-10-14 1244408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-06-26 4463592]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2017-05-10 1201896]
R2 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2017-05-10 1865448]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2017-05-10 1189608]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [2017-09-18 22816]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-09-22 1933872]
R2 ESRV_SVC_QUEENCREEK;Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-04-10 640928]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-07-06 321896]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-06-20 356352]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2017-09-28 2350064]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-04-10 157600]
R2 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe [2017-03-07 157456]
R2 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-08-29 10803440]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\Windows\system32\valWBFPolicyService.exe [2017-02-14 88400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-02-15 24576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-10 272384]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-06-20 284160]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 116224]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2017-06-09 271128]
S3 mmsminisrv;Acronis Managed Machine Service Mini; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [2015-08-11 4884064]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-10-03 175568]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-04-10 268704]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2017-08-16 23928]
S3 USER_ESRV_SVC_QUEENCREEK;User Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy: prosím o ko logu,

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy: prosím o ko logu,

#3 Příspěvek od jaruneczka »

# AdwCleaner 7.0.3.1 - Logfile created on Thu Oct 12 17:14:34 2017
# Updated on 2017/29/09 by Malwarebytes
# Running on Windows 7 Home Premium (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Users\Jarka\AppData\Roaming\Wise Euask


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{D4EF86C3-77D7-4F82-BBB8-6DFFAB6E2D32}


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1058 B] - [2017/10/12 17:13:43]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy: prosím o ko logu,

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy: prosím o ko logu,

#5 Příspěvek od jaruneczka »

Logfile of random's system information tool 1.16 (written by random/random)
Run by Jarka at 2017-10-12 21:13:05
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 132 GB (28%) free of 477 GB
Total RAM: 3955 MB (62% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:13:08, on 12.10.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\ESET\ESET Password Manager\pwm.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Sticky Password\stpass.exe
C:\Program Files (x86)\Sticky Password\spUIAManager.exe
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe
C:\Program Files\trend micro\Jarka_RSITx64.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [EsetPasswordManager] C:\Program Files\ESET\ESET Password Manager\pwm.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 5675463671
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: Acronis Managed Machine Service Mini (mmsminisrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9541 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-11a46f9c-bac3-4a80-a9b7-72114db42a29 -SystemEventPortName:HostProcess-bcad1ac4-85aa-4e1c-9437-300a2c8898d8 -IoCancelEventPortName:HostProcess-45082054-e78f-422b-a457-59d1d7f2f50d -NonStateChangingEventPortName:HostProcess-7d9fb87a-2abc-42a7-b107-0de505f8011c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:508eba56-cfc3-4ed6-a574-37b67670ce45 -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\WLANExt.exe 4094752
\??\C:\Windows\system32\conhost.exe "1897408512765292190-576088389766865917-1924220806-960317332578693167148691999
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe"
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\taskeng.exe
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\valWBFPolicyService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
"C:\Program Files\ESET\ESET Password Manager\pwm.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
\??\C:\Windows\system32\conhost.exe "360107776-4521737231378017093-1840241691-841109604-2114018961261786165881537491
C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Sticky Password\stpass.exe"
C:\Windows\system32\cmd.exe
\??\C:\Windows\system32\conhost.exe "820991477613059519-1229402781-7210354561224234161-5802770741350280798767504543
"C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe"
"C:\Program Files (x86)\Sticky Password\spUIAManager.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe" "--AUTO_START" "--start" "--start_options_registry_key" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ESRV_SVC_QUEENCREEK\_start"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe" backgroundagent
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-582464855-1890364033-424521494-100010_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-582464855-1890364033-424521494-100010 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Users\Jarka\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
C:\Windows\system32\SndVol.exe

====== Scheduled tasks folder ======

C:\Windows\tasks\HPCeeScheduleForJarka.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_159_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\HPCeeScheduleForJarka - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\HPCustParticipation HP DeskJet 3700 series - "C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPCustPartic.exe" /UA 17.5
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\USER_ESRV_SVC_QUEENCREEK - "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
C:\Windows\system32\tasks\User_Feed_Synchronization-{75BE8925-8583-480B-9BD7-93CC07C15906} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{276AE620-8B00-4599-8FA0-45D320233FFB} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\SetupOviPlayer.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{8044EBA9-3C63-4963-BDEC-1F48682EE181} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\win64_154519.4678.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{CE96D149-A560-40C7-82A7-C34100778F3F} - C:\Windows\system32\pcalua.exe -a "C:\drivers\Intel Bluetooth Driver\Setup.exe" -d "C:\drivers\Intel Bluetooth Driver"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-582464855-1890364033-424521494-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\TVT\TVSUUpdateTask - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" /CM -search R -action INSTALL -includerebootpackages 1,3,4 -noicon -noreboot -nolicense -defaultupdate -schtask
C:\Windows\system32\tasks\TVT\TVSUUpdateTask_UserLogOn - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" PendingTask
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\fplmonitor - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\fplmonitorConnect - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Solution Center Launcher - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus
C:\Windows\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\Windows\system32\tasks\Lenovo\LSC\LSCHardwareScan - C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-582464855-1890364033-424521494-1000 - "C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Intel\Intel Telemetry 2 - C:\Program Files\Intel\Telemetry 2.0\lrio.exe
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /r /m
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\Windows\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\Windows\system32\tasks\CyberLink\Photo Master Gadget startup - C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe backgroundagent

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\addons.json
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
uBlock Origin - extension - uBlock0@raymondhill.net
AdBlock for Firefox - extension - jid1-NIfFY2CA8fy1tg@jetpack

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\extensions.json
Activity Stream - extension - activity-stream@mozilla.org -
Application Update Service Helper - extension - aushelper@mozilla.org -
Click-to-Play staged rollout - extension - clicktoplay-rollout@mozilla.org -
Multi-process staged rollout - extension - e10srollout@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Firefox Screenshots - extension - screenshots@mozilla.org -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
IBM Security Rapport - webextension - rapportext@trusteer.com -
ESET Password Manager Autofill Engine - extension - {9C89F117-DC08-4D99-99F0-BF857F684AD9} -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -
Sticky Password extension - webextension - {ecb80162-dfbd-4d91-a8da-17b35ba4707a} -
uBlock Origin - webextension - uBlock0@raymondhill.net -
AdBlock - webextension - jid1-NIfFY2CA8fy1tg@jetpack -

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.159 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2017-01-03 863320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03 758360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=cmd /c /q C:\Program Files\ESET\ESET Security\ecmd.exe /launch /hide []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]
"EsetPasswordManager"=C:\Program Files\ESET\ESET Password Manager\pwm.exe [2017-08-12 92672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2016-10-14 567088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2016-04-25 421768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2017-05-10 7953576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DSATray]
C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [2017-09-18 131360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Smart Fingerprint]
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-07-31 1761208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LenovoUtility]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2016-10-14 1841496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PhotoMasterImportAgent]
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [2016-09-22 675608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_Dolby]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_DOLBYDRAGON]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_MICPKEY]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-07 16781824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
C:\Program Files (x86)\Sticky Password\stpass.exe [2017-08-27 64000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2017-06-23 7390424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-09-04 296216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jarka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledování výstrah kazety - HP DJ 3700 series.lnk]
C:\Program Files\HP\HP DeskJet 3700 series\bin\HPStatusBL.dll [2016-09-14 8067216]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ituneshelper]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_dolby]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_dolbydragon]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_micpkey]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-10-12 19:15:19 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-10-12 12:18:38 ----D---- C:\ProgramData\Logs
2017-10-11 22:56:01 ----D---- C:\rsit
2017-10-11 17:11:17 ----D---- C:\Users\Jarka\AppData\Roaming\ESET
2017-10-11 17:04:17 ----D---- C:\ProgramData\ESET
2017-10-11 17:04:17 ----D---- C:\Program Files\ESET
2017-10-11 09:13:52 ----D---- C:\Windows\system32\catroot2
2017-10-11 09:13:39 ----D---- C:\Windows\SoftwareDistribution
2017-10-11 05:16:34 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-11 05:12:12 ----SHD---- C:\Config.Msi
2017-10-11 05:07:52 ----A---- C:\Windows\system32\mshtml.dll
2017-10-11 05:07:51 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-10-11 05:07:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-10-11 05:07:50 ----A---- C:\Windows\system32\ieframe.dll
2017-10-11 05:07:49 ----A---- C:\Windows\system32\jscript9.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-10-11 05:07:48 ----A---- C:\Windows\system32\wininet.dll
2017-10-11 05:07:47 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\win32k.sys
2017-10-11 05:07:47 ----A---- C:\Windows\system32\urlmon.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\tquery.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-11 05:07:47 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\iertutil.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\schannel.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\Query.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\kerberos.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\jscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\schannel.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msfeeds.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msctf.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-11 05:07:45 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\wlansec.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\wdigest.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\TSpkg.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\ncrypt.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\certcli.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\adtschema.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\wlansec.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\mswstr10.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\t2embed.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-11 05:07:43 ----A---- C:\Windows\system32\iedkcs32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\gdi32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-11 05:07:43 ----A---- C:\Windows\system32\bcrypt.dll
2017-10-11 05:07:42 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2017-10-11 05:07:42 ----A---- C:\Windows\SYSWOW64\themeui.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\themeui.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\ntdll.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\wlanhlp.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\webcheck.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\sspicli.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\secur32.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\lsass.exe
2017-10-11 05:07:41 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\secur32.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\msjint40.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\credssp.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2017-10-11 05:07:40 ----A---- C:\Windows\system32\vbscript.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\mshtmled.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\msaudite.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\ieapfltr.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\dxtrans.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\credssp.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\auditpol.exe
2017-10-11 05:07:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\smss.exe
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssvp.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssrch.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssph.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\kernel32.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\ieui.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\dxtmsft.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-10-11 05:07:39 ----A---- C:\Windows\system32\advapi32.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\wow64win.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\winsrv.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\srcore.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\occache.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\msrating.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\KernelBase.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\jsproxy.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\wow64.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\inseng.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ieUnatt.exe
2017-10-11 05:07:37 ----A---- C:\Windows\system32\iesetup.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\iernonce.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ie4uinit.exe
2017-10-11 05:07:37 ----A---- C:\Windows\system32\drivers\appid.sys
2017-10-11 05:07:37 ----A---- C:\Windows\system32\csrsrv.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\conhost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\srclient.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\wow64cpu.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\srclient.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\rstrui.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\ntvdm64.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\msobjs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidsvc.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidapi.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2017-10-11 05:07:35 ----A---- C:\Windows\system32\msshooks.dll
2017-10-11 05:07:35 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\user.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\setup16.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\instnm.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2017-10-11 05:07:33 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-11 05:07:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-10-10 06:40:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-10 06:40:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-10-01 10:51:02 ----D---- C:\Users\Jarka\AppData\Roaming\Lamantine
2017-10-01 10:46:42 ----D---- C:\Program Files (x86)\Sticky Password
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-09-30 11:39:58 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-09-23 18:06:45 ----D---- C:\Program Files\Lenovo
2017-09-22 07:04:45 ----D---- C:\Program Files (x86)\Intel Driver and Support Assistant
2017-09-22 06:32:50 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\mf.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\mf.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\icaapi.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2017-09-19 20:47:22 ----A---- C:\Windows\SYSWOW64\mferror.dll
2017-09-19 20:47:22 ----A---- C:\Windows\system32\mferror.dll
2017-09-19 10:05:54 ----A---- C:\Windows\system32\drivers\epfwwfp.sys
2017-09-19 10:05:44 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys
2017-09-19 10:05:42 ----A---- C:\Windows\system32\drivers\epfw.sys
2017-09-19 10:05:40 ----A---- C:\Windows\system32\drivers\ekbdflt.sys
2017-09-19 10:05:38 ----A---- C:\Windows\system32\drivers\ehdrv.sys
2017-09-19 10:05:34 ----A---- C:\Windows\system32\drivers\edevmon.sys

====== List of files/folders modified in the last 1 month ======

2017-10-12 21:13:07 ----D---- C:\Windows\Temp
2017-10-12 21:13:07 ----D---- C:\Program Files\trend micro
2017-10-12 21:12:48 ----D---- C:\Windows
2017-10-12 19:50:08 ----D---- C:\Windows\system32\config
2017-10-12 19:19:59 ----D---- C:\Windows\System32
2017-10-12 19:19:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-10-12 19:19:58 ----D---- C:\Windows\inf
2017-10-12 19:15:45 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-10-12 19:15:26 ----D---- C:\ProgramData\Synaptics
2017-10-12 19:15:23 ----D---- C:\Windows\debug
2017-10-12 19:14:34 ----D---- C:\AdwCleaner
2017-10-12 19:07:45 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Disk Cleaner
2017-10-12 15:47:33 ----RSD---- C:\Windows\assembly
2017-10-12 12:42:28 ----D---- C:\Zálohy- srpen 2016 winRar
2017-10-12 12:42:02 ----RD---- C:\Program Files (x86)
2017-10-12 12:27:14 ----AD---- C:\ProgramData\Temp
2017-10-12 12:18:38 ----HD---- C:\ProgramData
2017-10-12 06:40:50 ----D---- C:\Users\Jarka\AppData\Roaming\WiseUpdate
2017-10-11 19:07:15 ----D---- C:\Windows\rescache
2017-10-11 17:05:10 ----D---- C:\Windows\system32\drivers
2017-10-11 17:05:09 ----D---- C:\Windows\system32\DriverStore
2017-10-11 17:05:05 ----SHD---- C:\Windows\Installer
2017-10-11 17:04:17 ----D---- C:\Program Files
2017-10-11 16:44:08 ----D---- C:\Windows\system32\NDF
2017-10-11 15:24:12 ----D---- C:\Users\Jarka\AppData\Roaming\Skype
2017-10-11 13:00:25 ----D---- C:\Windows\system32\Tasks
2017-10-11 12:39:22 ----D---- C:\Program Files (x86)\TeamViewer
2017-10-11 09:52:18 ----D---- C:\ProgramData\ProductData
2017-10-11 09:47:46 ----D---- C:\Windows\system32\wdi
2017-10-11 09:16:47 ----SHD---- C:\System Volume Information
2017-10-11 09:07:11 ----D---- C:\Windows\SysWOW64
2017-10-11 09:06:58 ----D---- C:\Windows\winsxs
2017-10-11 09:06:03 ----D---- C:\Windows\system32\drivers\etc
2017-10-11 09:04:45 ----A---- C:\Windows\win.ini
2017-10-11 07:19:59 ----D---- C:\Windows\Microsoft.NET
2017-10-11 06:47:07 ----D---- C:\Windows\SYSWOW64\wbem
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\migration
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\en-US
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-10-11 05:40:01 ----D---- C:\Program Files\Internet Explorer
2017-10-11 05:40:01 ----D---- C:\Program Files (x86)\Internet Explorer
2017-10-11 05:40:00 ----D---- C:\Windows\system32\migration
2017-10-11 05:40:00 ----D---- C:\Windows\system32\cs-CZ
2017-10-11 05:39:59 ----D---- C:\Windows\system32\en-US
2017-10-11 05:39:58 ----D---- C:\Windows\system32\Boot
2017-10-11 05:39:58 ----D---- C:\Windows\AppPatch
2017-10-11 05:39:19 ----D---- C:\Windows\system32\MRT
2017-10-11 05:16:16 ----AC---- C:\Windows\system32\MRT.exe
2017-10-11 05:13:20 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-10-10 20:39:13 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-10-10 20:39:09 ----D---- C:\Windows\system32\Macromed
2017-10-10 20:39:06 ----D---- C:\Windows\SYSWOW64\Macromed
2017-10-10 10:02:14 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2017-10-10 06:41:19 ----D---- C:\Users\Jarka\AppData\Roaming\Mozilla
2017-10-10 05:50:06 ----D---- C:\Zálohy- září 2016
2017-10-09 20:51:57 ----D---- C:\Windows\Logs
2017-10-08 06:57:16 ----D---- C:\Windows\Tasks
2017-10-05 10:41:10 ----D---- C:\fAKTURY
2017-10-01 23:11:00 ----D---- C:\Windows\SYSWOW64\config
2017-09-30 11:41:23 ----D---- C:\Windows\system32\catroot
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-09-23 18:05:21 ----D---- C:\Windows\Downloaded Installations
2017-09-23 18:05:05 ----D---- C:\ProgramData\Package Cache
2017-09-23 17:59:53 ----D---- C:\Program Files (x86)\Lenovo
2017-09-22 07:03:59 ----D---- C:\Program Files\Intel
2017-09-20 19:32:21 ----D---- C:\Program Files\CCleaner

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-09-19 107336]
R0 file_tracker;Acronis File Tracker Driver; C:\Windows\system32\DRIVERS\file_tracker.sys [2017-06-26 366432]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2016-09-27 163160]
R0 iaStorA;Intel Chipset SATA RAID Controller; C:\Windows\system32\DRIVERS\iaStorA.sys [2017-07-07 891392]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2017-07-07 41472]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2017-09-12 252360]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2017-09-12 506400]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2017-06-26 340312]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2017-06-26 1267552]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-07-25 133360]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-09-19 180096]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-09-19 81888]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-09-19 61040]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-09-19 106312]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-12-10 27552]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\Windows\system32\DRIVERS\ndisrd.sys [2014-08-14 43088]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2017-09-28 384312]
R1 RapportCerberus_1804074;RapportCerberus_1804074; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804074.sys [2017-09-22 1269896]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2017-09-28 585432]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2017-09-28 610616]
R1 RawDisk3;RawDisk3; \??\C:\Windows\system32\drivers\rawdsk3.sys [2016-02-19 41576]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-09-19 50744]
R2 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2017-06-26 193376]
R2 virtual_file;Acronis Virtual File Driver; C:\Windows\system32\DRIVERS\virtual_file.sys [2016-09-27 279392]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2016-09-21 34552]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2017-05-12 158696]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2017-05-12 1560552]
R3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-07 32840]
R3 ibtusb;Aplikace Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2017-06-27 225808]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-06-20 7940600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-07-07 5545512]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2017-07-07 480800]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-09-04 394992]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2017-07-07 824848]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-09-11 200272]
R3 NETwNs64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw04.sys [2017-05-19 3470048]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2017-09-11 329184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2017-09-30 1075688]
R3 rtsuvc;EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2017-07-07 3127552]
R3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
R3 Tpm;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-09-02 181160]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 tnd;Acronis Try&Decide filter; C:\Windows\system32\DRIVERS\tnd.sys [2017-06-26 601432]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-30 23200]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2016-10-14 1244408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-06-26 4463592]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2017-05-10 1201896]
R2 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2017-05-10 1865448]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2017-05-10 1189608]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [2017-09-18 22816]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-09-22 1933872]
R2 ESRV_SVC_QUEENCREEK;Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-04-10 640928]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-09-27 323952]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-06-20 356352]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2017-09-28 2350064]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-04-10 157600]
R2 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe [2017-03-07 157456]
R2 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-08-29 10803440]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\Windows\system32\valWBFPolicyService.exe [2017-02-14 88400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-02-15 24576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-10 272384]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-06-20 284160]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 116224]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2017-06-09 271128]
S3 mmsminisrv;Acronis Managed Machine Service Mini; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [2015-08-11 4884064]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-10-03 175568]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-04-10 268704]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2017-08-16 23928]
S3 USER_ESRV_SVC_QUEENCREEK;User Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy: prosím o ko logu,

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]/64
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

:services
Bonjour Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy: prosím o ko logu,

#7 Příspěvek od jaruneczka »

Logfile of random's system information tool 1.16 (written by random/random)
Run by Jarka at 2017-10-13 05:37:58
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 132 GB (28%) free of 477 GB
Total RAM: 3955 MB (39% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:38:01, on 13.10.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\ESET\ESET Password Manager\pwm.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\TanzanServer.exe
C:\Program Files\trend micro\Jarka_RSITx64.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [EsetPasswordManager] C:\Program Files\ESET\ESET Password Manager\pwm.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 5675463671
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: Acronis Managed Machine Service Mini (mmsminisrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9473 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c79d6fc1-9425-48ac-8aa5-0b33ef192b84 -SystemEventPortName:HostProcess-c4ef0210-9e01-48a0-9323-9cd554b63bac -IoCancelEventPortName:HostProcess-bae861ce-17fe-4bb1-bbea-c450d96a2d8e -NonStateChangingEventPortName:HostProcess-8544c94d-afd7-40ca-bcfe-975a92ea47df -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:dc8c018d-4e51-4f8f-9316-12a55cf9fd4a -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\WLANExt.exe 3556496
\??\C:\Windows\system32\conhost.exe "-6306936451354116900390062394-1660248115-1036528176-247088792-443098292-250460994
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe"
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\valWBFPolicyService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
"C:\Program Files\ESET\ESET Password Manager\pwm.exe"
C:\Windows\System32\svchost.exe -k swprv
\??\C:\Windows\system32\conhost.exe "1565744983-18663663819515227631259045707-1258966270222759281-1733923466992011397
C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\cmd.exe
\??\C:\Windows\system32\conhost.exe "-7099074472088870266-17502131491503221197-558615772112275818-1004721284-1359392954
"C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe" "--AUTO_START" "--start" "--start_options_registry_key" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ESRV_SVC_QUEENCREEK\_start"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://forum.viry.cz/ucp.php?mode=login ... 4a5d2fc770
"C:\Program Files (x86)\Trusteer\Rapport\bin\TanzanServer.exe" "C:\Program Files (x86)\Trusteer\Rapport\js\TanzanServer\manifest.json" rapportext@trusteer.com
\??\C:\Windows\system32\conhost.exe "7426836261704996833-1575687844-106253020811068769113808414301814363237-1603379354
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jarka\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

====== Scheduled tasks folder ======

C:\Windows\tasks\HPCeeScheduleForJarka.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_159_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\HPCeeScheduleForJarka - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\HPCustParticipation HP DeskJet 3700 series - "C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPCustPartic.exe" /UA 17.5
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\USER_ESRV_SVC_QUEENCREEK - "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
C:\Windows\system32\tasks\User_Feed_Synchronization-{75BE8925-8583-480B-9BD7-93CC07C15906} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{276AE620-8B00-4599-8FA0-45D320233FFB} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\SetupOviPlayer.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{8044EBA9-3C63-4963-BDEC-1F48682EE181} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\win64_154519.4678.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{CE96D149-A560-40C7-82A7-C34100778F3F} - C:\Windows\system32\pcalua.exe -a "C:\drivers\Intel Bluetooth Driver\Setup.exe" -d "C:\drivers\Intel Bluetooth Driver"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-582464855-1890364033-424521494-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\TVT\TVSUUpdateTask - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" /CM -search R -action INSTALL -includerebootpackages 1,3,4 -noicon -noreboot -nolicense -defaultupdate -schtask
C:\Windows\system32\tasks\TVT\TVSUUpdateTask_UserLogOn - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" PendingTask
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\fplmonitor - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\fplmonitorConnect - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Solution Center Launcher - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus
C:\Windows\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\Windows\system32\tasks\Lenovo\LSC\LSCHardwareScan - C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-582464855-1890364033-424521494-1000 - "C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Intel\Intel Telemetry 2 - C:\Program Files\Intel\Telemetry 2.0\lrio.exe
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /r /m
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\Windows\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\Windows\system32\tasks\CyberLink\Photo Master Gadget startup - C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe backgroundagent

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\addons.json
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
uBlock Origin - extension - uBlock0@raymondhill.net
AdBlock for Firefox - extension - jid1-NIfFY2CA8fy1tg@jetpack

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\extensions.json
Activity Stream - extension - activity-stream@mozilla.org -
Application Update Service Helper - extension - aushelper@mozilla.org -
Click-to-Play staged rollout - extension - clicktoplay-rollout@mozilla.org -
Multi-process staged rollout - extension - e10srollout@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Firefox Screenshots - extension - screenshots@mozilla.org -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
IBM Security Rapport - webextension - rapportext@trusteer.com -
ESET Password Manager Autofill Engine - extension - {9C89F117-DC08-4D99-99F0-BF857F684AD9} -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -
Sticky Password extension - webextension - {ecb80162-dfbd-4d91-a8da-17b35ba4707a} -
uBlock Origin - webextension - uBlock0@raymondhill.net -
AdBlock - webextension - jid1-NIfFY2CA8fy1tg@jetpack -

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\edb4w8yc.default\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.159 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2017-01-03 863320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03 758360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=cmd /c /q C:\Program Files\ESET\ESET Security\ecmd.exe /launch /hide []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]
"EsetPasswordManager"=C:\Program Files\ESET\ESET Password Manager\pwm.exe [2017-08-12 92672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2016-10-14 567088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2016-04-25 421768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2017-05-10 7953576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DSATray]
C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [2017-09-18 131360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Smart Fingerprint]
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-07-31 1761208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LenovoUtility]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2016-10-14 1841496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PhotoMasterImportAgent]
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [2016-09-22 675608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_Dolby]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_DOLBYDRAGON]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_MICPKEY]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-07 16781824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
C:\Program Files (x86)\Sticky Password\stpass.exe [2017-08-27 64000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2017-06-23 7390424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-09-04 296216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jarka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledování výstrah kazety - HP DJ 3700 series.lnk]
C:\Program Files\HP\HP DeskJet 3700 series\bin\HPStatusBL.dll [2016-09-14 8067216]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ituneshelper]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_dolby]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_dolbydragon]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_micpkey]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-10-13 05:26:47 ----D---- C:\_OTM
2017-10-13 05:17:05 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-10-12 21:43:08 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Euask
2017-10-12 21:27:47 ----D---- C:\Program Files (x86)\MozBackup
2017-10-12 12:18:38 ----D---- C:\ProgramData\Logs
2017-10-11 22:56:01 ----D---- C:\rsit
2017-10-11 17:11:17 ----D---- C:\Users\Jarka\AppData\Roaming\ESET
2017-10-11 17:04:17 ----D---- C:\ProgramData\ESET
2017-10-11 17:04:17 ----D---- C:\Program Files\ESET
2017-10-11 09:13:52 ----D---- C:\Windows\system32\catroot2
2017-10-11 09:13:39 ----D---- C:\Windows\SoftwareDistribution
2017-10-11 05:16:34 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-11 05:12:12 ----SHD---- C:\Config.Msi
2017-10-11 05:07:52 ----A---- C:\Windows\system32\mshtml.dll
2017-10-11 05:07:51 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-10-11 05:07:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-10-11 05:07:50 ----A---- C:\Windows\system32\ieframe.dll
2017-10-11 05:07:49 ----A---- C:\Windows\system32\jscript9.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-10-11 05:07:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-10-11 05:07:48 ----A---- C:\Windows\system32\wininet.dll
2017-10-11 05:07:47 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\win32k.sys
2017-10-11 05:07:47 ----A---- C:\Windows\system32\urlmon.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\tquery.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-11 05:07:47 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-11 05:07:47 ----A---- C:\Windows\system32\iertutil.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-10-11 05:07:46 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\schannel.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\Query.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\kerberos.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\jscript.dll
2017-10-11 05:07:46 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\schannel.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-10-11 05:07:45 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msfeeds.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\msctf.dll
2017-10-11 05:07:45 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-11 05:07:45 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-10-11 05:07:44 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\wlansec.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\wdigest.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\TSpkg.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\ncrypt.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-11 05:07:44 ----A---- C:\Windows\system32\certcli.dll
2017-10-11 05:07:44 ----A---- C:\Windows\system32\adtschema.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\wlansec.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\mswstr10.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\t2embed.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-11 05:07:43 ----A---- C:\Windows\system32\iedkcs32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\gdi32.dll
2017-10-11 05:07:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-11 05:07:43 ----A---- C:\Windows\system32\bcrypt.dll
2017-10-11 05:07:42 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2017-10-11 05:07:42 ----A---- C:\Windows\SYSWOW64\themeui.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\themeui.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\ntdll.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-10-11 05:07:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\wlanhlp.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-10-11 05:07:41 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\webcheck.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\sspicli.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\secur32.dll
2017-10-11 05:07:41 ----A---- C:\Windows\system32\lsass.exe
2017-10-11 05:07:41 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\secur32.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\msjint40.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\credssp.dll
2017-10-11 05:07:40 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2017-10-11 05:07:40 ----A---- C:\Windows\system32\vbscript.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\mshtmled.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\msaudite.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\ieapfltr.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\dxtrans.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\credssp.dll
2017-10-11 05:07:40 ----A---- C:\Windows\system32\auditpol.exe
2017-10-11 05:07:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\smss.exe
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssvp.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssrch.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\mssph.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\kernel32.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\ieui.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\dxtmsft.dll
2017-10-11 05:07:39 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-10-11 05:07:39 ----A---- C:\Windows\system32\advapi32.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-10-11 05:07:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\wow64win.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\winsrv.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\srcore.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\occache.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\msrating.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\KernelBase.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\jsproxy.dll
2017-10-11 05:07:38 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-10-11 05:07:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\wow64.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\inseng.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ieUnatt.exe
2017-10-11 05:07:37 ----A---- C:\Windows\system32\iesetup.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\iernonce.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\ie4uinit.exe
2017-10-11 05:07:37 ----A---- C:\Windows\system32\drivers\appid.sys
2017-10-11 05:07:37 ----A---- C:\Windows\system32\csrsrv.dll
2017-10-11 05:07:37 ----A---- C:\Windows\system32\conhost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\srclient.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-10-11 05:07:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\wow64cpu.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\srclient.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\rstrui.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\ntvdm64.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\msobjs.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidsvc.dll
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-10-11 05:07:36 ----A---- C:\Windows\system32\appidapi.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-11 05:07:35 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2017-10-11 05:07:35 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2017-10-11 05:07:35 ----A---- C:\Windows\system32\msshooks.dll
2017-10-11 05:07:35 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-11 05:07:34 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-11 05:07:33 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\user.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\setup16.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\instnm.exe
2017-10-11 05:07:33 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2017-10-11 05:07:33 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-11 05:07:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-10-10 06:40:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-10 06:40:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-10-01 10:51:02 ----D---- C:\Users\Jarka\AppData\Roaming\Lamantine
2017-10-01 10:46:42 ----D---- C:\Program Files (x86)\Sticky Password
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-09-30 11:39:58 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-09-23 18:06:45 ----D---- C:\Program Files\Lenovo
2017-09-22 07:04:45 ----D---- C:\Program Files (x86)\Intel Driver and Support Assistant
2017-09-22 06:32:50 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\mf.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\mf.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\icaapi.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2017-09-19 20:47:22 ----A---- C:\Windows\SYSWOW64\mferror.dll
2017-09-19 20:47:22 ----A---- C:\Windows\system32\mferror.dll
2017-09-19 10:05:54 ----A---- C:\Windows\system32\drivers\epfwwfp.sys
2017-09-19 10:05:44 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys
2017-09-19 10:05:42 ----A---- C:\Windows\system32\drivers\epfw.sys
2017-09-19 10:05:40 ----A---- C:\Windows\system32\drivers\ekbdflt.sys
2017-09-19 10:05:38 ----A---- C:\Windows\system32\drivers\ehdrv.sys
2017-09-19 10:05:34 ----A---- C:\Windows\system32\drivers\edevmon.sys

====== List of files/folders modified in the last 1 month ======

2017-10-13 05:38:00 ----D---- C:\Windows\Temp
2017-10-13 05:38:00 ----D---- C:\Program Files\trend micro
2017-10-13 05:37:48 ----D---- C:\Windows\System32
2017-10-13 05:37:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-10-13 05:37:47 ----D---- C:\Windows\inf
2017-10-13 05:34:04 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-10-13 05:33:27 ----D---- C:\ProgramData\Synaptics
2017-10-13 05:32:39 ----D---- C:\Windows\system32\config
2017-10-13 05:17:16 ----D---- C:\Windows
2017-10-13 05:17:09 ----D---- C:\Windows\debug
2017-10-12 21:45:16 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Disk Cleaner
2017-10-12 21:27:47 ----RD---- C:\Program Files (x86)
2017-10-12 21:27:36 ----D---- C:\Zálohy- září 2016
2017-10-12 19:14:34 ----D---- C:\AdwCleaner
2017-10-12 15:47:33 ----RSD---- C:\Windows\assembly
2017-10-12 12:42:28 ----D---- C:\Zálohy- srpen 2016 winRar
2017-10-12 12:27:14 ----AD---- C:\ProgramData\Temp
2017-10-12 12:18:38 ----HD---- C:\ProgramData
2017-10-12 06:40:50 ----D---- C:\Users\Jarka\AppData\Roaming\WiseUpdate
2017-10-11 19:07:15 ----D---- C:\Windows\rescache
2017-10-11 17:05:10 ----D---- C:\Windows\system32\drivers
2017-10-11 17:05:09 ----D---- C:\Windows\system32\DriverStore
2017-10-11 17:05:05 ----SHD---- C:\Windows\Installer
2017-10-11 17:04:17 ----D---- C:\Program Files
2017-10-11 16:44:08 ----D---- C:\Windows\system32\NDF
2017-10-11 15:24:12 ----D---- C:\Users\Jarka\AppData\Roaming\Skype
2017-10-11 13:00:25 ----D---- C:\Windows\system32\Tasks
2017-10-11 12:39:22 ----D---- C:\Program Files (x86)\TeamViewer
2017-10-11 09:52:18 ----D---- C:\ProgramData\ProductData
2017-10-11 09:47:46 ----D---- C:\Windows\system32\wdi
2017-10-11 09:16:47 ----SHD---- C:\System Volume Information
2017-10-11 09:07:11 ----D---- C:\Windows\SysWOW64
2017-10-11 09:06:58 ----D---- C:\Windows\winsxs
2017-10-11 09:06:03 ----D---- C:\Windows\system32\drivers\etc
2017-10-11 09:04:45 ----A---- C:\Windows\win.ini
2017-10-11 07:19:59 ----D---- C:\Windows\Microsoft.NET
2017-10-11 06:47:07 ----D---- C:\Windows\SYSWOW64\wbem
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\migration
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\en-US
2017-10-11 05:40:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-10-11 05:40:01 ----D---- C:\Program Files\Internet Explorer
2017-10-11 05:40:01 ----D---- C:\Program Files (x86)\Internet Explorer
2017-10-11 05:40:00 ----D---- C:\Windows\system32\migration
2017-10-11 05:40:00 ----D---- C:\Windows\system32\cs-CZ
2017-10-11 05:39:59 ----D---- C:\Windows\system32\en-US
2017-10-11 05:39:58 ----D---- C:\Windows\system32\Boot
2017-10-11 05:39:58 ----D---- C:\Windows\AppPatch
2017-10-11 05:39:19 ----D---- C:\Windows\system32\MRT
2017-10-11 05:16:16 ----AC---- C:\Windows\system32\MRT.exe
2017-10-11 05:13:20 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-10-10 20:39:13 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-10-10 20:39:09 ----D---- C:\Windows\system32\Macromed
2017-10-10 20:39:06 ----D---- C:\Windows\SYSWOW64\Macromed
2017-10-10 10:02:14 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2017-10-10 06:41:19 ----D---- C:\Users\Jarka\AppData\Roaming\Mozilla
2017-10-09 20:51:57 ----D---- C:\Windows\Logs
2017-10-08 06:57:16 ----D---- C:\Windows\Tasks
2017-10-05 10:41:10 ----D---- C:\fAKTURY
2017-10-01 23:11:00 ----D---- C:\Windows\SYSWOW64\config
2017-09-30 11:41:23 ----D---- C:\Windows\system32\catroot
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-09-23 18:05:21 ----D---- C:\Windows\Downloaded Installations
2017-09-23 18:05:05 ----D---- C:\ProgramData\Package Cache
2017-09-23 17:59:53 ----D---- C:\Program Files (x86)\Lenovo
2017-09-22 07:03:59 ----D---- C:\Program Files\Intel
2017-09-20 19:32:21 ----D---- C:\Program Files\CCleaner

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-09-19 107336]
R0 file_tracker;Acronis File Tracker Driver; C:\Windows\system32\DRIVERS\file_tracker.sys [2017-06-26 366432]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2016-09-27 163160]
R0 iaStorA;Intel Chipset SATA RAID Controller; C:\Windows\system32\DRIVERS\iaStorA.sys [2017-07-07 891392]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2017-07-07 41472]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2017-09-12 252360]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2017-09-12 506400]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2017-06-26 340312]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2017-06-26 1267552]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-07-25 133360]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-09-19 180096]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-09-19 81888]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-09-19 61040]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-09-19 106312]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-12-10 27552]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\Windows\system32\DRIVERS\ndisrd.sys [2014-08-14 43088]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2017-09-28 384312]
R1 RapportCerberus_1804074;RapportCerberus_1804074; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804074.sys [2017-09-22 1269896]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2017-09-28 585432]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2017-09-28 610616]
R1 RawDisk3;RawDisk3; \??\C:\Windows\system32\drivers\rawdsk3.sys [2016-02-19 41576]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-09-19 50744]
R2 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2017-06-26 193376]
R2 virtual_file;Acronis Virtual File Driver; C:\Windows\system32\DRIVERS\virtual_file.sys [2016-09-27 279392]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2016-09-21 34552]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2017-05-12 158696]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2017-05-12 1560552]
R3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-07 32840]
R3 ibtusb;Aplikace Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2017-06-27 225808]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-06-20 7940600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-07-07 5545512]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2017-07-07 480800]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-09-04 394992]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2017-07-07 824848]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-09-11 200272]
R3 NETwNs64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw04.sys [2017-05-19 3470048]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2017-09-11 329184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2017-09-30 1075688]
R3 rtsuvc;EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2017-07-07 3127552]
R3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
R3 Tpm;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-09-02 181160]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 tnd;Acronis Try&Decide filter; C:\Windows\system32\DRIVERS\tnd.sys [2017-06-26 601432]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-30 23200]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2016-10-14 1244408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-06-26 4463592]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2017-05-10 1201896]
R2 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2017-05-10 1865448]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2017-05-10 1189608]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [2017-09-18 22816]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-09-22 1933872]
R2 ESRV_SVC_QUEENCREEK;Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-04-10 640928]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-09-27 323952]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-06-20 356352]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2017-09-28 2350064]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-04-10 157600]
R2 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe [2017-03-07 157456]
R2 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-08-29 10803440]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\Windows\system32\valWBFPolicyService.exe [2017-02-14 88400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-02-15 24576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-10 272384]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-06-20 284160]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 116224]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2017-06-09 271128]
S3 mmsminisrv;Acronis Managed Machine Service Mini; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [2015-08-11 4884064]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-10-03 175568]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-04-10 268704]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2017-08-16 23928]
S3 USER_ESRV_SVC_QUEENCREEK;User Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy: prosím o ko logu,

#8 Příspěvek od Rudy »

Něco smazáno nebylo. Počkám na další log.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy: prosím o ko logu,

#9 Příspěvek od jaruneczka »

Nový log po obnově Acronis:
Logfile of random's system information tool 1.16 (written by random/random)
Run by Jarka at 2017-10-13 20:44:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 421 GB (88%) free of 477 GB
Total RAM: 3955 MB (32% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:44:46, on 13.10.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files\ESET\ESET Password Manager\pwm.exe
C:\Program Files (x86)\Sticky Password\stpass.exe
C:\Program Files (x86)\Sticky Password\spUIAManager.exe
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe
C:\Program Files\trend micro\Jarka_RSITx64.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [EsetPasswordManager] C:\Program Files\ESET\ESET Password Manager\pwm.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [StickyPassword] C:\Program Files (x86)\Sticky Password\stpass.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 5675463671
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DESlock+ Service (dlpsrv) - DESlock Limited. - C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: Acronis Managed Machine Service Mini (mmsminisrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9430 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-005e5d85-d466-4d87-811f-d88c804d7e29 -SystemEventPortName:HostProcess-235d70df-0abc-4701-97f5-80351a73c37d -IoCancelEventPortName:HostProcess-b247e5a7-590a-4340-b07f-57dcf0884f10 -NonStateChangingEventPortName:HostProcess-41ab8201-f12a-4672-b4d5-5dfe0131e59c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a70cd4a8-2983-4a4e-aac8-2a2236ac2edd -DeviceGroupId:
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
C:\Windows\system32\WLANExt.exe 4560960
\??\C:\Windows\system32\conhost.exe "162821435549780507-17321894382055967512-12512240141807460807167074878455720838
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe"
C:\Windows\system32\valWBFPolicyService.exe
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
\??\C:\Windows\system32\conhost.exe "-425858965-91337046814004549247260226561816508916312900161-2092958945-983904878
C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
"C:\Program Files\ESET\ESET Password Manager\pwm.exe"
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Sticky Password\stpass.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Sticky Password\spUIAManager.exe"
C:\Windows\system32\cmd.exe
\??\C:\Windows\system32\conhost.exe "5783690762080681142562694121-3782762079517301-762212037-492258501320093937
"C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe"
"C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe" "--AUTO_START" "--start" "--start_options_registry_key" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ESRV_SVC_QUEENCREEK\_start"
\??\C:\Windows\system32\conhost.exe "-1347876828650573239-1418464333-134040389582636316666479886-14450840171646254061
C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\DllHost.exe /Processid:{49F171DD-B51A-40D3-9A6C-52D674CC729D}
"C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe" backgroundagent
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Jarka\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{53362C64-A296-4F2D-A2F8-FD984D08340B}
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

====== Scheduled tasks folder ======

C:\Windows\tasks\HPCeeScheduleForJarka.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_159_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\HPCeeScheduleForJarka - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJarka (null)
C:\Windows\system32\tasks\HPCustParticipation HP DeskJet 3700 series - "C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPCustPartic.exe" /UA 17.5
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\USER_ESRV_SVC_QUEENCREEK - "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
C:\Windows\system32\tasks\User_Feed_Synchronization-{75BE8925-8583-480B-9BD7-93CC07C15906} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{276AE620-8B00-4599-8FA0-45D320233FFB} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\SetupOviPlayer.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{8044EBA9-3C63-4963-BDEC-1F48682EE181} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\win64_154519.4678.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{CE96D149-A560-40C7-82A7-C34100778F3F} - C:\Windows\system32\pcalua.exe -a "C:\drivers\Intel Bluetooth Driver\Setup.exe" -d "C:\drivers\Intel Bluetooth Driver"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-582464855-1890364033-424521494-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\TVT\TVSUUpdateTask - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" /CM -search R -action INSTALL -includerebootpackages 1,3,4 -noicon -noreboot -nolicense -defaultupdate -schtask
C:\Windows\system32\tasks\TVT\TVSUUpdateTask_UserLogOn - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" PendingTask
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\fplmonitor - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\fplmonitorConnect - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Solution Center Launcher - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus
C:\Windows\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\Windows\system32\tasks\Lenovo\LSC\LSCHardwareScan - C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-582464855-1890364033-424521494-1000 - "C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Intel\Intel Telemetry 2 - C:\Program Files\Intel\Telemetry 2.0\lrio.exe
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /r /m
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\Windows\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\Windows\system32\tasks\CyberLink\Photo Master Gadget startup - C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe backgroundagent

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\989aloob.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.159 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_159.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\989aloob.default\addons.json
uBlock Origin - extension - uBlock0@raymondhill.net
AdBlock for Firefox - extension - jid1-NIfFY2CA8fy1tg@jetpack

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\989aloob.default\extensions.json
Activity Stream - extension - activity-stream@mozilla.org -
Application Update Service Helper - extension - aushelper@mozilla.org -
Click-to-Play staged rollout - extension - clicktoplay-rollout@mozilla.org -
Multi-process staged rollout - extension - e10srollout@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Firefox Screenshots - extension - screenshots@mozilla.org -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
ESET Password Manager Autofill Engine - extension - {9C89F117-DC08-4D99-99F0-BF857F684AD9} -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -
uBlock Origin - webextension - uBlock0@raymondhill.net -
AdBlock - webextension - jid1-NIfFY2CA8fy1tg@jetpack -
IBM Security Rapport - webextension - rapportext@trusteer.com -

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\989aloob.default\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.159 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_159.dll

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2017-01-03 863320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03 758360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=cmd /c /q C:\Program Files\ESET\ESET Security\ecmd.exe /launch /hide []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EsetPasswordManager"=C:\Program Files\ESET\ESET Password Manager\pwm.exe [2017-08-12 92672]
""= []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]
"StickyPassword"=C:\Program Files (x86)\Sticky Password\stpass.exe [2017-08-27 64000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2016-10-14 567088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2016-04-25 421768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2017-05-10 7953576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DSATray]
C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [2017-09-18 131360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Smart Fingerprint]
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-07-31 1761208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LenovoUtility]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2016-10-14 1841496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PhotoMasterImportAgent]
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [2016-09-22 675608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_Dolby]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_DOLBYDRAGON]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_MICPKEY]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-07 16781824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
C:\Program Files (x86)\Sticky Password\stpass.exe [2017-08-27 64000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2017-06-23 7390424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-09-04 296216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jarka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledování výstrah kazety - HP DJ 3700 series.lnk]
C:\Program Files\HP\HP DeskJet 3700 series\bin\HPStatusBL.dll [2016-09-14 8067216]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ituneshelper]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_dolby]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_dolbydragon]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_micpkey]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-10-13 20:44:43 ----D---- C:\rsit
2017-10-13 20:18:59 ----A---- C:\Windows\system32\drivers\RapportHades64.sys
2017-10-13 20:18:57 ----A---- C:\Windows\system32\drivers\RapportKE64.sys
2017-10-13 20:16:57 ----D---- C:\Program Files (x86)\Trusteer
2017-10-13 19:45:25 ----D---- C:\Users\Jarka\AppData\Roaming\Mozilla
2017-10-13 19:45:17 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-13 19:45:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-10-13 18:20:33 ----SHD---- C:\$RECYCLE.BIN
2017-10-13 18:05:26 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-13 17:56:24 ----A---- C:\Windows\system32\mshtml.dll
2017-10-13 17:56:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-10-13 17:56:21 ----A---- C:\Windows\system32\ieframe.dll
2017-10-13 17:56:20 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-10-13 17:56:19 ----A---- C:\Windows\system32\jscript9.dll
2017-10-13 17:56:18 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-10-13 17:56:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-10-13 17:56:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-10-13 17:56:18 ----A---- C:\Windows\system32\wininet.dll
2017-10-13 17:56:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-10-13 17:56:17 ----A---- C:\Windows\system32\win32k.sys
2017-10-13 17:56:17 ----A---- C:\Windows\system32\urlmon.dll
2017-10-13 17:56:17 ----A---- C:\Windows\system32\tquery.dll
2017-10-13 17:56:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-13 17:56:17 ----A---- C:\Windows\system32\iertutil.dll
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-10-13 17:56:16 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-10-13 17:56:16 ----A---- C:\Windows\system32\Query.dll
2017-10-13 17:56:16 ----A---- C:\Windows\system32\msfeeds.dll
2017-10-13 17:56:16 ----A---- C:\Windows\system32\jscript.dll
2017-10-13 17:56:16 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-13 17:56:16 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-13 17:56:15 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-10-13 17:56:15 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-10-13 17:56:15 ----A---- C:\Windows\system32\msctf.dll
2017-10-13 17:56:15 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-13 17:56:15 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-13 17:56:14 ----A---- C:\Windows\SYSWOW64\wlansec.dll
2017-10-13 17:56:14 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-10-13 17:56:14 ----A---- C:\Windows\SYSWOW64\mswstr10.dll
2017-10-13 17:56:14 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-10-13 17:56:14 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-10-13 17:56:14 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\wlansec.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\themeui.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\t2embed.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-13 17:56:14 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\iedkcs32.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\gdi32.dll
2017-10-13 17:56:14 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-13 17:56:13 ----A---- C:\Windows\SYSWOW64\themeui.dll
2017-10-13 17:56:13 ----A---- C:\Windows\system32\ntdll.dll
2017-10-13 17:56:13 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-13 17:56:13 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\wlanhlp.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\msjint40.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-10-13 17:56:12 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\webcheck.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\mshtmled.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\dxtrans.dll
2017-10-13 17:56:12 ----A---- C:\Windows\system32\certcli.dll
2017-10-13 17:56:11 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2017-10-13 17:56:11 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-10-13 17:56:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-10-13 17:56:11 ----A---- C:\Windows\system32\vbscript.dll
2017-10-13 17:56:11 ----A---- C:\Windows\system32\smss.exe
2017-10-13 17:56:11 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-13 17:56:11 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-13 17:56:11 ----A---- C:\Windows\system32\kerberos.dll
2017-10-13 17:56:11 ----A---- C:\Windows\system32\ieapfltr.dll
2017-10-13 17:56:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-10-13 17:56:11 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-10-13 17:56:10 ----A---- C:\Windows\system32\schannel.dll
2017-10-13 17:56:10 ----A---- C:\Windows\system32\mssvp.dll
2017-10-13 17:56:10 ----A---- C:\Windows\system32\mssrch.dll
2017-10-13 17:56:10 ----A---- C:\Windows\system32\kernel32.dll
2017-10-13 17:56:10 ----A---- C:\Windows\system32\ieui.dll
2017-10-13 17:56:10 ----A---- C:\Windows\system32\dxtmsft.dll
2017-10-13 17:56:10 ----A---- C:\Windows\system32\advapi32.dll
2017-10-13 17:56:09 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-10-13 17:56:09 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2017-10-13 17:56:09 ----A---- C:\Windows\system32\mssph.dll
2017-10-13 17:56:09 ----A---- C:\Windows\system32\msrating.dll
2017-10-13 17:56:09 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-13 17:56:08 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2017-10-13 17:56:08 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-10-13 17:56:08 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-10-13 17:56:08 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\wow64win.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\winsrv.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\wdigest.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\TSpkg.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\srcore.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\occache.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\ncrypt.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\KernelBase.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\jsproxy.dll
2017-10-13 17:56:08 ----A---- C:\Windows\system32\ieUnatt.exe
2017-10-13 17:56:08 ----A---- C:\Windows\system32\conhost.exe
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-10-13 17:56:07 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\wow64.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\sspicli.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\inseng.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-10-13 17:56:07 ----A---- C:\Windows\system32\bcrypt.dll
2017-10-13 17:56:06 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2017-10-13 17:56:06 ----A---- C:\Windows\SYSWOW64\schannel.dll
2017-10-13 17:56:06 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2017-10-13 17:56:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-10-13 17:56:06 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-10-13 17:56:06 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-13 17:56:06 ----A---- C:\Windows\system32\lsass.exe
2017-10-13 17:56:06 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-13 17:56:06 ----A---- C:\Windows\system32\iesetup.dll
2017-10-13 17:56:06 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-13 17:56:06 ----A---- C:\Windows\system32\csrsrv.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-10-13 17:56:05 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\wow64cpu.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\srclient.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\secur32.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-13 17:56:05 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-13 17:56:05 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\iernonce.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-10-13 17:56:05 ----A---- C:\Windows\system32\ie4uinit.exe
2017-10-13 17:56:05 ----A---- C:\Windows\system32\drivers\appid.sys
2017-10-13 17:56:05 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-13 17:56:05 ----A---- C:\Windows\system32\appidapi.dll
2017-10-13 17:56:04 ----A---- C:\Windows\SYSWOW64\srclient.dll
2017-10-13 17:56:04 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-10-13 17:56:04 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-10-13 17:56:04 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-13 17:56:04 ----A---- C:\Windows\system32\rstrui.exe
2017-10-13 17:56:04 ----A---- C:\Windows\system32\ntvdm64.dll
2017-10-13 17:56:04 ----A---- C:\Windows\system32\credssp.dll
2017-10-13 17:56:04 ----A---- C:\Windows\system32\appidsvc.dll
2017-10-13 17:56:04 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-10-13 17:56:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\wow32.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\secur32.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\credssp.dll
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2017-10-13 17:56:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2017-10-13 17:56:03 ----A---- C:\Windows\system32\msshooks.dll
2017-10-13 17:56:03 ----A---- C:\Windows\system32\auditpol.exe
2017-10-13 17:56:03 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-13 17:56:02 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-13 17:56:01 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-13 17:56:01 ----A---- C:\Windows\SYSWOW64\user.exe
2017-10-13 17:56:01 ----A---- C:\Windows\SYSWOW64\setup16.exe
2017-10-13 17:56:01 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2017-10-13 17:56:01 ----A---- C:\Windows\SYSWOW64\instnm.exe
2017-10-13 17:56:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2017-10-13 17:56:01 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2017-10-13 17:56:01 ----A---- C:\Windows\system32\msaudite.dll
2017-10-13 17:56:01 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-13 17:56:01 ----A---- C:\Windows\system32\adtschema.dll
2017-10-13 17:56:00 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2017-10-13 17:56:00 ----A---- C:\Windows\system32\msobjs.dll
2017-10-13 17:55:59 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-10-13 17:30:22 ----SHD---- C:\System Volume Information
2017-10-13 17:30:22 ----ASH---- C:\pagefile.sys
2017-10-13 17:30:10 ----ASH---- C:\hiberfil.sys
2017-10-03 23:50:18 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Euask
2017-10-01 10:51:02 ----D---- C:\Users\Jarka\AppData\Roaming\Lamantine
2017-10-01 10:46:42 ----D---- C:\Program Files (x86)\Sticky Password
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-09-30 11:39:58 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-09-30 07:24:52 ----D---- C:\Program Files (x86)\Google
2017-09-23 18:06:45 ----D---- C:\Program Files\Lenovo
2017-09-23 06:24:48 ----D---- C:\Program Files\stinger
2017-09-22 07:04:45 ----D---- C:\Program Files (x86)\Intel Driver and Support Assistant
2017-09-22 06:32:50 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\SYSWOW64\mf.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\rdpcore.dll
2017-09-19 20:47:24 ----A---- C:\Windows\system32\mf.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\rrinstaller.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfps.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\mfpmp.exe
2017-09-19 20:47:23 ----A---- C:\Windows\system32\icaapi.dll
2017-09-19 20:47:23 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2017-09-19 20:47:22 ----A---- C:\Windows\SYSWOW64\mferror.dll
2017-09-19 20:47:22 ----A---- C:\Windows\system32\mferror.dll
2017-09-19 10:23:53 ----D---- C:\Users\Jarka\AppData\Roaming\Apowersoft

====== List of files/folders modified in the last 1 month ======

2017-10-13 20:44:45 ----D---- C:\Program Files\trend micro
2017-10-13 20:44:21 ----D---- C:\Windows\Temp
2017-10-13 20:41:56 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Disk Cleaner
2017-10-13 20:41:30 ----D---- C:\Windows\System32
2017-10-13 20:41:27 ----D---- C:\Windows\inf
2017-10-13 20:41:26 ----D---- C:\Windows
2017-10-13 20:40:53 ----D---- C:\AdwCleaner
2017-10-13 20:36:54 ----D---- C:\Zálohy- září 2016
2017-10-13 20:34:29 ----D---- C:\Windows\system32\config
2017-10-13 20:29:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-10-13 20:26:36 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-10-13 20:24:43 ----D---- C:\ProgramData\Synaptics
2017-10-13 20:19:09 ----SHD---- C:\Windows\Installer
2017-10-13 20:18:59 ----D---- C:\Windows\system32\drivers
2017-10-13 20:16:57 ----RD---- C:\Program Files (x86)
2017-10-13 19:55:04 ----D---- C:\Windows\SoftwareDistribution
2017-10-13 19:52:22 ----D---- C:\Windows\debug
2017-10-13 19:43:56 ----D---- C:\Program Files
2017-10-13 19:41:14 ----D---- C:\Users\Jarka\AppData\Roaming\WiseUpdate
2017-10-13 19:40:29 ----D---- C:\Windows\system32\Tasks
2017-10-13 19:40:05 ----D---- C:\Windows\system32\catroot2
2017-10-13 19:39:15 ----D---- C:\Windows\SysWOW64
2017-10-13 19:39:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-10-13 19:39:10 ----D---- C:\Windows\system32\Macromed
2017-10-13 19:39:06 ----D---- C:\Windows\SYSWOW64\Macromed
2017-10-13 18:40:15 ----D---- C:\Windows\Tasks
2017-10-13 18:33:23 ----RSD---- C:\Windows\assembly
2017-10-13 18:31:49 ----D---- C:\Windows\Microsoft.NET
2017-10-13 18:20:27 ----D---- C:\Windows\winsxs
2017-10-13 18:17:00 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2017-10-13 18:14:12 ----D---- C:\Program Files\Internet Explorer
2017-10-13 18:14:12 ----D---- C:\Program Files (x86)\Internet Explorer
2017-10-13 18:14:11 ----D---- C:\Windows\SYSWOW64\migration
2017-10-13 18:14:11 ----D---- C:\Windows\SYSWOW64\en-US
2017-10-13 18:14:11 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-10-13 18:14:08 ----D---- C:\Windows\system32\migration
2017-10-13 18:14:08 ----D---- C:\Windows\system32\en-US
2017-10-13 18:14:08 ----D---- C:\Windows\system32\cs-CZ
2017-10-13 18:14:05 ----D---- C:\Windows\system32\Boot
2017-10-13 18:14:05 ----D---- C:\Windows\AppPatch
2017-10-13 18:10:04 ----D---- C:\ProgramData\ProductData
2017-10-13 18:05:48 ----D---- C:\Windows\system32\MRT
2017-10-13 18:05:05 ----AC---- C:\Windows\system32\MRT.exe
2017-10-13 18:01:53 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-10-13 17:34:04 ----D---- C:\Windows\system32\NDF
2017-10-03 23:15:50 ----D---- C:\Windows\system32\DriverStore
2017-10-03 23:14:43 ----D---- C:\Program Files\ESET
2017-10-03 19:51:58 ----D---- C:\fAKTURY
2017-10-01 23:11:00 ----D---- C:\Windows\SYSWOW64\config
2017-10-01 11:20:48 ----D---- C:\Users\Jarka\AppData\Roaming\Skype
2017-09-30 11:41:23 ----D---- C:\Windows\system32\catroot
2017-09-30 11:39:58 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-09-23 18:05:21 ----D---- C:\Windows\Downloaded Installations
2017-09-23 18:05:05 ----D---- C:\ProgramData\Package Cache
2017-09-23 17:59:53 ----D---- C:\Program Files (x86)\Lenovo
2017-09-22 07:03:59 ----D---- C:\Program Files\Intel
2017-09-20 19:32:21 ----D---- C:\Program Files\CCleaner
2017-09-20 11:24:00 ----D---- C:\Windows\rescache

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 DLMFENC;DLMFENC; C:\Windows\system32\DRIVERS\DLMFENC.sys [2016-08-04 179712]
R0 DLPCRYPT;DLPCRYPT; C:\Windows\system32\DRIVERS\dlpcrypt.sys [2016-08-09 121184]
R0 dlpvdisk;dlpvdisk; C:\Windows\system32\DRIVERS\dlpvdisk.sys [2016-08-04 98304]
R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-09-19 107336]
R0 file_tracker;Acronis File Tracker Driver; C:\Windows\system32\DRIVERS\file_tracker.sys [2017-06-26 366432]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2016-09-27 163160]
R0 iaStorA;Intel Chipset SATA RAID Controller; C:\Windows\system32\DRIVERS\iaStorA.sys [2017-07-07 891392]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2017-07-07 41472]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2017-09-28 253912]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2017-09-28 507960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2017-06-26 340312]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2017-06-26 1267552]
R0 VDLPToken2;VDLPToken2; C:\Windows\system32\DRIVERS\vdlptkn2.sys [2016-08-04 135736]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-08-10 133360]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-09-19 180096]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-09-19 81888]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-09-19 61040]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-09-19 106312]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-12-10 27552]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\Windows\system32\DRIVERS\ndisrd.sys [2014-08-14 43088]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2017-09-28 384312]
R1 RapportCerberus_1804077;RapportCerberus_1804077; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804077.sys [2017-10-13 1271448]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2017-09-28 585432]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2017-09-28 610616]
R1 RawDisk3;RawDisk3; \??\C:\Windows\system32\drivers\rawdsk3.sys [2016-02-19 41576]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-09-19 50744]
R2 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2017-06-26 193376]
R2 virtual_file;Acronis Virtual File Driver; C:\Windows\system32\DRIVERS\virtual_file.sys [2016-09-27 279392]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2016-09-21 34552]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2017-05-12 158696]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2017-05-12 1560552]
R3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-07 32840]
R3 ibtusb;Aplikace Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2017-06-27 225808]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-06-20 7940600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-07-07 5545512]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2017-07-07 480800]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-09-04 394992]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2017-07-07 824848]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-09-11 200272]
R3 NETwNs64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw04.sys [2017-05-19 3470048]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2017-09-11 329184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2017-09-30 1075688]
R3 rtsuvc;EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2017-07-07 3127552]
R3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
R3 Tpm;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-09-02 181160]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 tnd;Acronis Try&Decide filter; C:\Windows\system32\DRIVERS\tnd.sys [2017-06-26 601432]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-30 23200]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2016-10-14 1244408]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-06-26 4463592]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2017-05-10 1201896]
R2 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2017-05-10 1865448]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2017-05-10 1189608]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 dlpsrv;DESlock+ Service; C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe [2016-07-08 540864]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [2017-09-18 22816]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-09-22 1933872]
R2 ESRV_SVC_QUEENCREEK;Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-04-10 640928]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-09-27 323952]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-06-20 356352]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2017-09-28 2350064]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-04-10 157600]
R2 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe [2017-03-07 157456]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\Windows\system32\valWBFPolicyService.exe [2017-02-14 88400]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-02-15 24576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-13 272384]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-06-20 284160]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 116224]
S3 LSC.Services.SystemService;Lenovo Solution Center System Service; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [2017-06-09 271128]
S3 mmsminisrv;Acronis Managed Machine Service Mini; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [2015-08-11 4884064]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-10-03 175568]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-04-10 268704]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2017-08-16 23928]
S3 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-08-17 10803440]
S3 USER_ESRV_SVC_QUEENCREEK;User Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [2017-03-07 824592]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy: prosím o ko logu,

#10 Příspěvek od Rudy »

Log je OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy: prosím o ko logu,

#11 Příspěvek od jaruneczka »

děkuji pěkně :wub:

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy: prosím o ko logu,

#12 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno