Prosím o kontrolu
Napsal: 13 úno 2018 14:30
Dobrý deň,
prosím o kontrolu pc. Vkladám prílohy podľa návodu FRST.
Ďakujem za Váš čas.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.02.2018
Ran by BMO (administrator) on LAPTOP-N9BI6R0C (13-02-2018 14:22:40)
Running from C:\Users\BMO\Desktop
Loaded Profiles: BMO (Available Profiles: defaultuser0 & BMO)
Platform: Windows 10 Home Version 1709 16299.192 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2502b44bc436c53a\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
() C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Windows\SysWOW64\spdsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2502b44bc436c53a\IntelCpHeciSvc.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(LULU Software) C:\Program Files\Soda PDF Desktop\updater-ws.exe
(LULU Software) C:\Program Files\Soda PDF Desktop\creator\common\creator-ws.exe
(LULU Software) C:\Program Files\Soda PDF Desktop\ws.exe
(LULU Software Limited) C:\Program Files (x86)\Soda PDF Desktop Manager\Soda PDF Desktop\Soda Manager.exe
(Disc Soft Ltd) D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2502b44bc436c53a\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Microsoft Corporation) C:\Windows\System32\CastSrv.exe
(Spotify Ltd) C:\Users\BMO\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\BMO\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SweetLabs, Inc) C:\Users\BMO\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11801.1001.6.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) D:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(forum.viry.cz) C:\Users\BMO\Downloads\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [pac] => C:\Program Files\Autodesk\Personal Accelerator for Revit\RevitAccelerator.exe [339464 2016-02-10] (Autodesk, Inc.)
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4148664 2014-04-04] (ESET)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] ()
HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [629248 2015-11-13] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [UMonit] => C:\WINDOWS\SysWOW64\UMonit64.exe [53832 2015-07-15] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4657312 2016-08-21] ()
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [706392 2017-11-21] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5235128 2012-06-14] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1761120 2015-12-07] (Western Digital Technologies, Inc.)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2007576 2017-02-03] (Autodesk, Inc.)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-13] (Piriform Ltd)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [McAfeeSafeConnect] => C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Spotify] => C:\Users\BMO\AppData\Roaming\Spotify\Spotify.exe [21091728 2018-02-02] (Spotify Ltd)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Spotify Web Helper] => C:\Users\BMO\AppData\Roaming\Spotify\SpotifyWebHelper.exe [780688 2018-02-02] (Spotify Ltd)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Policies\Explorer: []
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\MountPoints2: F - "F:\setup.exe"
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\MountPoints2: {808bd053-6402-11e7-83fa-58fb848e09ee} - "G:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\MountPoints2: {808bd0c3-6402-11e7-83fa-58fb848e09ee} - "H:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2007576 2017-02-03] (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{02a4cbe3-9d78-4400-b0dd-8aa38d32a5a6}: [DhcpNameServer] 147.175.167.251 208.67.222.222
Tcpip\..\Interfaces\{6cc0096a-a492-4122-bbd3-854af5d99930}: [DhcpNameServer] 10.0.33.12 10.0.33.13
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-3529660226-3304449268-922964883-1001 -> DefaultScope {F4C68E70-543B-4CCD-8019-EC66419C7918} URL =
SearchScopes: HKU\S-1-5-21-3529660226-3304449268-922964883-1001 -> {F4C68E70-543B-4CCD-8019-EC66419C7918} URL =
BHO: No Name -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> F:\OldNewExplorer64.dll => No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-02-06] (Microsoft Corporation)
BHO: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: No Name -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> F:\OldNewExplorer32.dll => No File
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-12-22] (Oracle Corporation)
BHO-x32: Soda PDF Desktop Helper -> {A2792EEC-6618-4C4C-8ECF-B51ECB5DC2A1} -> C:\Program Files (x86)\Soda PDF Desktop\creator\plugins\IEAddin\creator-ie-helper.dll [2017-12-15] (LULU Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-12-22] (Oracle Corporation)
Toolbar: HKLM-x32 - Soda PDF Desktop Toolbar - {D53D09FE-B1AC-4EE8-AE26-FD43D8B4B62F} - C:\Program Files (x86)\Soda PDF Desktop\creator\plugins\IEAddin\creator-ie-plugin.dll [2017-12-15] (LULU Software)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: vqyu7gk6.default
FF ProfilePath: C:\Users\BMO\AppData\Roaming\Mozilla\Firefox\Profiles\vqyu7gk6.default [2018-01-17]
FF Homepage: Mozilla\Firefox\Profiles\vqyu7gk6.default -> www.google.sk
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2017-10-29] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: Soda PDF Desktop -> C:\Program Files\Soda PDF Desktop\np-previewer.dll [2017-12-15] (LULU Software)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-12-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-12-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-08-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-01-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-01-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-01-04] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default [2018-02-13]
CHR Extension: (Prezentácie) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-08]
CHR Extension: (YouTube) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-08]
CHR Extension: (Tabuľky) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Stylish - Custom themes for any website) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2018-01-18]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-08]
CHR Extension: (AdBlock) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-02-04]
CHR Extension: (IE Tab) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2018-02-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-08]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2018-01-18]
CHR Extension: (Gmail) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-08]
CHR Extension: (Chrome Media Router) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-10]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1277688 2016-08-21] ()
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1364904 2017-11-21] (Autodesk Inc.)
R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3019024 2017-09-24] (Intel Corporation)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6086744 2017-09-08] ()
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-05] ()
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [666608 2016-03-22] (Lenovo)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7968432 2018-01-30] (Microsoft Corporation)
R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [176640 2015-09-22] () [File not signed]
R3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291904 2017-08-14] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [526888 2017-12-24] (EasyAntiCheat Ltd)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [42048 2014-04-04] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [1029704 2014-04-04] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [191368 2014-04-04] (ESET)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1210352 2016-03-23] (Lenovo)
U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-19] (Hi-Rez Studios) [File not signed]
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] ()
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [190216 2016-10-14] (Intel Corporation)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408 2017-11-12] (Lenovo Group Limited)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-11] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4692840 2016-08-15] (Acronis International GmbH)
R2 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [7717528 2016-07-18] (Acronis International GmbH)
R2 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1516920 2016-08-21] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-05-03] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 Samsung Printer Dianostics Service; C:\WINDOWS\SysWOW64\\spdsvc.exe [506680 2017-02-19] ()
R3 Soda PDF Desktop; C:\Program Files\Soda PDF Desktop\ws.exe [2779888 2017-12-15] (LULU Software)
R2 Soda PDF Desktop Creator; C:\Program Files\Soda PDF Desktop\creator\common\creator-ws.exe [756464 2017-12-15] (LULU Software)
R2 Soda PDF Desktop Manager; C:\Program Files (x86)\Soda PDF Desktop Manager\Soda PDF Desktop\Soda Manager.exe [961568 2017-06-23] (LULU Software Limited)
R2 Soda PDF Desktop Update Service; C:\Program Files\Soda PDF Desktop\updater-ws.exe [751344 2017-12-15] (LULU Software)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9729272 2016-08-11] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267360 2017-01-23] (Synaptics Incorporated)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1151424 2012-06-14] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2015-12-07] (Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1177536 2012-06-14] (Western Digital )
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [2306456 2017-09-29] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-05-03] (Intel® Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-03-17] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-03-17] (Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [219696 2014-04-10] (ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [185224 2013-09-09] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [155896 2013-09-09] (ESET)
R2 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [198096 2013-09-09] (ESET)
R1 EpfwLWF; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [40512 2013-09-09] (ESET)
R0 epfwwfp; C:\WINDOWS\System32\DRIVERS\epfwwfp.sys [59064 2013-09-09] (ESET)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2017-07-26] (Huawei Technologies Co., Ltd.)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [375136 2017-09-08] (Acronis International GmbH)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [115704 2015-07-15] (GenesysLogic)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.)
S3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-06-16] (Intel Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [250624 2016-10-14] (Intel Corporation)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-01-05] (Malwarebytes)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2017-09-29] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_3e0ccd5eb9f5a1e6\nvlddmkm.sys [17486096 2018-01-05] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-11-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50808 2017-11-16] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-12-16] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [888064 2015-08-19] (Realtek )
S3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3119872 2016-06-08] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [68704 2017-01-23] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [72800 2017-01-23] (Synaptics Incorporated)
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [25608 2017-10-28] (SlimWare Utilities, Inc.)
S3 SynRMIHID; C:\WINDOWS\System32\drivers\SynRMIHID.sys [48296 2015-07-23] (Synaptics Incorporated)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1267544 2017-09-08] (Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [212320 2017-09-08] (Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [687968 2017-09-08] (Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331104 2017-09-08] (Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-13 14:22 - 2018-02-13 14:22 - 000031823 _____ C:\Users\BMO\Desktop\FRST.txt
2018-02-13 14:22 - 2018-02-13 14:22 - 000000000 ____D C:\FRST
2018-02-13 14:20 - 2018-02-13 14:22 - 000112640 _____ (forum.viry.cz) C:\Users\BMO\Downloads\FRSTLauncher.exe
2018-02-13 14:14 - 2018-02-13 14:14 - 002405376 _____ (Farbar) C:\Users\BMO\Downloads\FRST64.exe
2018-02-13 14:14 - 2018-02-13 14:14 - 002405376 _____ (Farbar) C:\Users\BMO\Desktop\FRST64.exe
2018-02-12 13:10 - 2018-02-12 13:10 - 000032768 _____ C:\Users\BMO\Downloads\prehlad_CHVU.xls
2018-02-12 13:10 - 2018-02-12 13:10 - 000032768 _____ C:\Users\BMO\Downloads\prehlad_CHVU (1).xls
2018-02-12 09:03 - 2018-02-12 09:03 - 000075430 _____ C:\Users\BMO\Desktop\ROZVRH1-Model.pdf
2018-02-11 20:57 - 2018-02-11 20:57 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2018-02-11 20:57 - 2018-02-11 20:57 - 000002214 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2018-02-11 20:57 - 2018-02-11 20:57 - 000000000 ____D C:\Program Files\Google
2018-02-09 07:49 - 2018-02-09 07:49 - 000017967 _____ C:\Users\BMO\Desktop\kuchyna-Model.pdf
2018-02-09 07:49 - 2018-02-07 19:43 - 002153920 _____ C:\Users\BMO\Documents\kuchyna.bak
2018-02-07 19:43 - 2018-02-09 07:49 - 002004539 _____ C:\Users\BMO\Documents\kuchyna.dwg
2018-02-07 10:09 - 2018-02-13 14:09 - 000003268 _____ C:\WINDOWS\System32\Tasks\CorelUpdateHelperTask-
2018-02-07 08:09 - 2018-02-06 13:07 - 000000233 ___SH C:\Users\Public\Libraries.ini
2018-02-07 08:04 - 2018-02-07 08:04 - 000000000 ____D C:\Users\BMO\AppData\Local\FortniteGame
2018-02-05 15:29 - 2018-02-07 08:04 - 000000000 ____D C:\Users\BMO\AppData\Local\UnrealEngine
2018-02-05 15:29 - 2018-02-05 15:31 - 000000000 ____D C:\ProgramData\Epic
2018-02-05 15:29 - 2018-02-05 15:29 - 000000951 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2018-02-05 15:29 - 2018-02-05 15:29 - 000000951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2018-02-05 15:29 - 2018-02-05 15:29 - 000000000 ____D C:\Users\BMO\AppData\Local\UnrealEngineLauncher
2018-02-05 15:29 - 2018-02-05 15:29 - 000000000 ____D C:\Users\BMO\AppData\Local\EpicGamesLauncher
2018-02-05 15:27 - 2018-02-05 15:28 - 032264192 _____ C:\Users\BMO\Downloads\EpicInstaller-7.2.1-fortnite-ef2a6e8b1058433e95958c070113348a.msi
2018-02-05 13:00 - 2018-02-05 13:00 - 000097628 _____ C:\Users\BMO\Downloads\0902zsskCD.pdf
2018-02-05 12:37 - 2018-02-05 12:37 - 000097928 _____ C:\Users\BMO\Downloads\1102zsskCD.pdf
2018-02-04 10:28 - 2018-02-04 10:28 - 000000000 ____D C:\ProgramData\Coronet_SecureConnect
2018-02-02 11:04 - 2018-02-02 11:04 - 000160494 _____ C:\Users\BMO\Downloads\zsskCD.pdf
2018-02-01 06:20 - 2018-02-01 06:20 - 000169091 _____ C:\Users\BMO\Desktop\WhatsApp Image 2018-02-01 at 06.08.17(1).jpeg
2018-02-01 06:12 - 2018-02-01 06:12 - 000169091 _____ C:\Users\BMO\Desktop\WhatsApp Image 2018-02-01 at 06.08.17.jpeg
2018-02-01 05:57 - 2018-02-01 05:57 - 000142828 _____ C:\Users\BMO\Desktop\WhatsApp Image 2018-02-01 at 05.56.41.jpeg
2018-01-29 12:28 - 2018-01-29 12:28 - 000128566 _____ C:\Users\BMO\Desktop\Jablonica text.pdf
2018-01-28 19:27 - 2018-01-28 10:43 - 033300326 _____ C:\Users\BMO\Downloads\Urbanizmus Jablonica Finál.bak
2018-01-28 18:35 - 2018-01-28 19:08 - 000000000 ____D C:\Users\BMO\Desktop\U3-OPRAVA
2018-01-28 10:43 - 2018-01-28 19:27 - 041159044 _____ C:\Users\BMO\Downloads\Urbanizmus Jablonica Finál.dwg
2018-01-27 20:16 - 2018-01-31 17:18 - 000000000 ____D C:\Users\BMO\Desktop\Drevo nové
2018-01-27 20:03 - 2018-01-27 20:03 - 016003730 _____ C:\Users\BMO\Downloads\fwd.zip
2018-01-27 18:13 - 2018-01-27 18:13 - 000014245 _____ C:\Users\BMO\Downloads\1.I-PSA.pdf
2018-01-27 15:34 - 2018-01-27 15:34 - 000014245 _____ C:\Users\BMO\Desktop\1.I-PSA.pdf
2018-01-24 10:17 - 2018-01-24 10:18 - 000000000 ____D C:\Users\BMO\Desktop\TLAČ
2018-01-22 12:52 - 2018-01-22 12:52 - 005239333 _____ C:\Users\BMO\Downloads\PASIVNE_A_NULOVE_BUDOVY_2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 004720834 _____ C:\Users\BMO\Downloads\tieniaca_technika_2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003882202 _____ C:\Users\BMO\Downloads\tieniaca_technika_4.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003857671 _____ C:\Users\BMO\Downloads\Adaptivne_obvodove_steny_2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003747388 _____ C:\Users\BMO\Downloads\Adaptivne_obvodove_steny_1.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003410970 _____ C:\Users\BMO\Downloads\tieniaca_technika_3.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003369705 _____ C:\Users\BMO\Downloads\PASIVNE_A_NULOVE_BUDOVY_1.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 002741032 _____ C:\Users\BMO\Downloads\zasklenia2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 002204534 _____ C:\Users\BMO\Downloads\tieniaca_technika_1.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 002083528 _____ C:\Users\BMO\Downloads\IAQ_short.pdf
2018-01-22 12:51 - 2018-01-24 10:13 - 000000000 ____D C:\Users\BMO\Downloads\Nový priečinok (4)
2018-01-22 12:51 - 2018-01-22 12:52 - 003946684 _____ C:\Users\BMO\Downloads\zasklenia1.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 004051560 _____ C:\Users\BMO\Downloads\aspekty_udrzatelnej_vystavby_cast_2.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 003887159 _____ C:\Users\BMO\Downloads\aspekty_udrzatelnej_vystavby_cast_1.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 001598205 _____ C:\Users\BMO\Downloads\aspekty_udrzatelnej_vystavby_cast_3.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 000755403 _____ C:\Users\BMO\Downloads\uvod,_podmienky_skusky.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 000254197 _____ C:\Users\BMO\Downloads\temy_cviceni_priklady_17_18.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 000103966 _____ C:\Users\BMO\Downloads\POKYNY_NA_PISANIE_SEMESTRALNEJ_PRACE.pdf
2018-01-22 12:32 - 2018-01-22 12:33 - 000000000 ____D C:\Users\BMO\Desktop\DAU3- seminárka funkcionalizmus
2018-01-19 20:05 - 2018-01-19 20:05 - 000000000 ____D C:\Users\BMO\AppData\Local\__SHARED
2018-01-19 19:28 - 2018-02-13 10:57 - 000000000 ____D C:\Users\BMO\AppData\Local\Spotify
2018-01-19 19:28 - 2018-02-13 09:18 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Spotify
2018-01-18 15:10 - 2018-01-18 15:10 - 000000000 ____D C:\Users\BMO\AppData\LocalLow\KMPlayer
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Users\BMO\Documents\Soda PDF Files
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Soda PDF Desktop
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soda PDF Desktop
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Program Files\Soda PDF Desktop
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Program Files (x86)\Soda PDF Desktop Manager
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Program Files (x86)\Soda PDF Desktop
2018-01-17 06:43 - 2018-01-17 06:51 - 000000000 ____D C:\ProgramData\Soda PDF Desktop
2018-01-14 09:39 - 2018-01-14 09:40 - 022699364 _____ C:\Users\BMO\Downloads\prednášky UA 1. cast.rar
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-13 14:13 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-02-13 14:12 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-02-13 14:12 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-02-13 10:57 - 2017-11-02 17:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-02-13 09:17 - 2017-09-08 21:05 - 000000000 ____D C:\Users\BMO\AppData\Local\Host App Service
2018-02-13 08:28 - 2017-11-02 17:38 - 000004206 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A7218E63-F75F-4BEF-9C5D-2801C189C645}
2018-02-12 21:11 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-02-12 17:57 - 2017-09-10 08:56 - 000181457 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2018-02-12 13:10 - 2017-11-02 17:33 - 000000000 ____D C:\Users\BMO\AppData\Local\Packages
2018-02-12 07:36 - 2017-03-17 15:57 - 000000000 __SHD C:\Users\BMO\IntelGraphicsProfiles
2018-02-07 20:07 - 2017-11-02 17:38 - 000004596 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-02-07 20:07 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-02-07 20:07 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-02-07 08:05 - 2017-10-03 10:02 - 000000000 ____D C:\Users\BMO\AppData\Local\NVIDIA Corporation
2018-02-06 19:47 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-02-06 19:46 - 2016-11-20 16:18 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-02-06 19:35 - 2017-11-22 10:02 - 000003336 _____ C:\WINDOWS\System32\Tasks\CorelUpdateHelperTaskCore
2018-02-06 19:35 - 2017-11-22 10:02 - 000000000 ____D C:\Program Files (x86)\Corel
2018-02-06 03:49 - 2017-09-29 14:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-02-06 03:49 - 2017-09-29 14:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-05 15:31 - 2016-11-20 16:28 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-04 23:23 - 2017-10-03 10:01 - 000000000 ____D C:\Users\BMO\AppData\Local\NVIDIA
2018-02-02 04:35 - 2017-09-08 21:52 - 000000000 ____D C:\Program Files (x86)\Google
2018-02-01 13:54 - 2017-09-13 19:32 - 000000000 ____D C:\ProgramData\RevitInterProcess
2018-02-01 07:10 - 2017-10-10 14:40 - 000000000 ____D C:\Users\BMO\AppData\Roaming\WhatsApp
2018-01-31 13:05 - 2017-11-02 17:38 - 000003372 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3529660226-3304449268-922964883-1001
2018-01-31 13:05 - 2017-09-08 21:11 - 000002368 _____ C:\Users\BMO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-01-31 13:05 - 2017-03-17 15:58 - 000000000 ___RD C:\Users\BMO\OneDrive
2018-01-25 17:29 - 2018-01-09 16:07 - 000000000 ____D C:\Users\BMO\Downloads\Nový priečinok (3)
2018-01-25 15:39 - 2017-12-23 12:34 - 000000000 ____D C:\Users\BMO\AppData\Local\ElevatedDiagnostics
2018-01-24 13:50 - 2017-10-16 17:54 - 000000000 ____D C:\Users\BMO\AppData\Local\CrashDumps
2018-01-23 14:51 - 2017-08-23 07:25 - 000000000 ____D C:\Users\BMO\Desktop\Plocha
2018-01-23 14:40 - 2017-10-10 14:40 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2018-01-23 14:40 - 2017-10-10 14:40 - 000000000 ____D C:\Users\BMO\AppData\Local\WhatsApp
2018-01-23 14:15 - 2017-12-22 11:59 - 000004212 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-01-19 20:03 - 2017-10-17 20:33 - 000000000 ____D C:\Users\BMO\Downloads\Nový priečinok (2)
2018-01-19 19:28 - 2017-09-08 21:46 - 000001833 _____ C:\Users\BMO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2018-01-17 16:44 - 2017-09-12 20:56 - 000000000 ____D C:\Program Files\Autodesk
2018-01-17 16:44 - 2017-09-12 20:53 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2018-01-17 16:44 - 2017-09-12 19:32 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Autodesk
2018-01-17 16:44 - 2017-09-12 19:32 - 000000000 ____D C:\ProgramData\Autodesk
2018-01-15 21:45 - 2017-11-02 17:43 - 001146898 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-15 21:39 - 2017-11-02 17:38 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-01-15 21:38 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
==================== Files in the root of some directories =======
Some files in TEMP:
====================
2018-02-06 23:07 - 2018-02-06 23:08 - 022545488 _____ (SweetLabs,Inc.) C:\Users\BMO\AppData\Local\Temp\oct568F.tmp.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-02-13 07:42
==================== End of FRST.txt ============================
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (Windows) (Fixed) (Total:100.68 GB) (Free:10.61 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:931.39 GB) (Free:76.04 GB) NTFS
\\?\Volume{22a5b39d-1343-41bc-a439-2e81d4687f18}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
\\?\Volume{c8ff15fc-c189-43db-b1da-57f0b781b773}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.53 GB) NTFS
\\?\Volume{3c0c8bb6-ef31-42a2-b04e-6bf57ba0e7d3}\ (LENOVO_PART) (Fixed) (Total:16.34 GB) (Free:2.25 GB) NTFS
Available physical RAM: 2928.45 MB
Total physical RAM: 7953.36 MB
Percentage of memory in use: 63%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 119.2 GB) (Disk ID: E5A91B58)
Disk: 1 (Size: 931.5 GB) (Disk ID: 8AD67153)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => D:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\Temp:1CE11B51 [106]
AlternateDataStreams: C:\Users\Public\AppData:CSM [468]
==================== Security Center ==================
AV: ESET Endpoint Security 5.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Endpoint Security 5.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: Eset Pesonálny Firewall (Disabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\BMO\Desktop" je 2748 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================
prosím o kontrolu pc. Vkladám prílohy podľa návodu FRST.
Ďakujem za Váš čas.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.02.2018
Ran by BMO (administrator) on LAPTOP-N9BI6R0C (13-02-2018 14:22:40)
Running from C:\Users\BMO\Desktop
Loaded Profiles: BMO (Available Profiles: defaultuser0 & BMO)
Platform: Windows 10 Home Version 1709 16299.192 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2502b44bc436c53a\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
() C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
() C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Windows\SysWOW64\spdsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2502b44bc436c53a\IntelCpHeciSvc.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe
() C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe
() C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(LULU Software) C:\Program Files\Soda PDF Desktop\updater-ws.exe
(LULU Software) C:\Program Files\Soda PDF Desktop\creator\common\creator-ws.exe
(LULU Software) C:\Program Files\Soda PDF Desktop\ws.exe
(LULU Software Limited) C:\Program Files (x86)\Soda PDF Desktop Manager\Soda PDF Desktop\Soda Manager.exe
(Disc Soft Ltd) D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2502b44bc436c53a\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Microsoft Corporation) C:\Windows\System32\CastSrv.exe
(Spotify Ltd) C:\Users\BMO\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\BMO\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SweetLabs, Inc) C:\Users\BMO\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11801.1001.6.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) D:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(forum.viry.cz) C:\Users\BMO\Downloads\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-01-22] (Realtek Semiconductor)
HKLM\...\Run: [pac] => C:\Program Files\Autodesk\Personal Accelerator for Revit\RevitAccelerator.exe [339464 2016-02-10] (Autodesk, Inc.)
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4148664 2014-04-04] (ESET)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] ()
HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [629248 2015-11-13] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [UMonit] => C:\WINDOWS\SysWOW64\UMonit64.exe [53832 2015-07-15] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4657312 2016-08-21] ()
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [706392 2017-11-21] (Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5235128 2012-06-14] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1761120 2015-12-07] (Western Digital Technologies, Inc.)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2007576 2017-02-03] (Autodesk, Inc.)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-13] (Piriform Ltd)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [McAfeeSafeConnect] => C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Spotify] => C:\Users\BMO\AppData\Roaming\Spotify\Spotify.exe [21091728 2018-02-02] (Spotify Ltd)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Run: [Spotify Web Helper] => C:\Users\BMO\AppData\Roaming\Spotify\SpotifyWebHelper.exe [780688 2018-02-02] (Spotify Ltd)
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\Policies\Explorer: []
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\MountPoints2: F - "F:\setup.exe"
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\MountPoints2: {808bd053-6402-11e7-83fa-58fb848e09ee} - "G:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\...\MountPoints2: {808bd0c3-6402-11e7-83fa-58fb848e09ee} - "H:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2007576 2017-02-03] (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{02a4cbe3-9d78-4400-b0dd-8aa38d32a5a6}: [DhcpNameServer] 147.175.167.251 208.67.222.222
Tcpip\..\Interfaces\{6cc0096a-a492-4122-bbd3-854af5d99930}: [DhcpNameServer] 10.0.33.12 10.0.33.13
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3529660226-3304449268-922964883-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-3529660226-3304449268-922964883-1001 -> DefaultScope {F4C68E70-543B-4CCD-8019-EC66419C7918} URL =
SearchScopes: HKU\S-1-5-21-3529660226-3304449268-922964883-1001 -> {F4C68E70-543B-4CCD-8019-EC66419C7918} URL =
BHO: No Name -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> F:\OldNewExplorer64.dll => No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-02-06] (Microsoft Corporation)
BHO: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: No Name -> {27DD0F8B-3E0E-4ADC-A78A-66047E71ADC5} -> F:\OldNewExplorer32.dll => No File
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-12-22] (Oracle Corporation)
BHO-x32: Soda PDF Desktop Helper -> {A2792EEC-6618-4C4C-8ECF-B51ECB5DC2A1} -> C:\Program Files (x86)\Soda PDF Desktop\creator\plugins\IEAddin\creator-ie-helper.dll [2017-12-15] (LULU Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-12-22] (Oracle Corporation)
Toolbar: HKLM-x32 - Soda PDF Desktop Toolbar - {D53D09FE-B1AC-4EE8-AE26-FD43D8B4B62F} - C:\Program Files (x86)\Soda PDF Desktop\creator\plugins\IEAddin\creator-ie-plugin.dll [2017-12-15] (LULU Software)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-06] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: vqyu7gk6.default
FF ProfilePath: C:\Users\BMO\AppData\Roaming\Mozilla\Firefox\Profiles\vqyu7gk6.default [2018-01-17]
FF Homepage: Mozilla\Firefox\Profiles\vqyu7gk6.default -> www.google.sk
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2017-10-29] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-07] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: Soda PDF Desktop -> C:\Program Files\Soda PDF Desktop\np-previewer.dll [2017-12-15] (LULU Software)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-07] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-12-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-12-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-08-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-01-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-01-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-01-04] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default [2018-02-13]
CHR Extension: (Prezentácie) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-08]
CHR Extension: (YouTube) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-08]
CHR Extension: (Tabuľky) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Stylish - Custom themes for any website) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2018-01-18]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-08]
CHR Extension: (AdBlock) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-02-04]
CHR Extension: (IE Tab) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2018-02-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-08]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2018-01-18]
CHR Extension: (Gmail) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-08]
CHR Extension: (Chrome Media Router) - C:\Users\BMO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-10]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1277688 2016-08-21] ()
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1364904 2017-11-21] (Autodesk Inc.)
R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3019024 2017-09-24] (Intel Corporation)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6086744 2017-09-08] ()
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-05] ()
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [666608 2016-03-22] (Lenovo)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7968432 2018-01-30] (Microsoft Corporation)
R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [176640 2015-09-22] () [File not signed]
R3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291904 2017-08-14] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [526888 2017-12-24] (EasyAntiCheat Ltd)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [42048 2014-04-04] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [1029704 2014-04-04] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [191368 2014-04-04] (ESET)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1210352 2016-03-23] (Lenovo)
U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-19] (Hi-Rez Studios) [File not signed]
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] ()
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [190216 2016-10-14] (Intel Corporation)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408 2017-11-12] (Lenovo Group Limited)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-11] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4692840 2016-08-15] (Acronis International GmbH)
R2 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [7717528 2016-07-18] (Acronis International GmbH)
R2 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1516920 2016-08-21] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-05-03] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 Samsung Printer Dianostics Service; C:\WINDOWS\SysWOW64\\spdsvc.exe [506680 2017-02-19] ()
R3 Soda PDF Desktop; C:\Program Files\Soda PDF Desktop\ws.exe [2779888 2017-12-15] (LULU Software)
R2 Soda PDF Desktop Creator; C:\Program Files\Soda PDF Desktop\creator\common\creator-ws.exe [756464 2017-12-15] (LULU Software)
R2 Soda PDF Desktop Manager; C:\Program Files (x86)\Soda PDF Desktop Manager\Soda PDF Desktop\Soda Manager.exe [961568 2017-06-23] (LULU Software Limited)
R2 Soda PDF Desktop Update Service; C:\Program Files\Soda PDF Desktop\updater-ws.exe [751344 2017-12-15] (LULU Software)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9729272 2016-08-11] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267360 2017-01-23] (Synaptics Incorporated)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1151424 2012-06-14] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2015-12-07] (Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1177536 2012-06-14] (Western Digital )
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [2306456 2017-09-29] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-05-03] (Intel® Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-03-17] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-03-17] (Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [219696 2014-04-10] (ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [185224 2013-09-09] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [155896 2013-09-09] (ESET)
R2 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [198096 2013-09-09] (ESET)
R1 EpfwLWF; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [40512 2013-09-09] (ESET)
R0 epfwwfp; C:\WINDOWS\System32\DRIVERS\epfwwfp.sys [59064 2013-09-09] (ESET)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2017-07-26] (Huawei Technologies Co., Ltd.)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [375136 2017-09-08] (Acronis International GmbH)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [115704 2015-07-15] (GenesysLogic)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.)
S3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-06-16] (Intel Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [250624 2016-10-14] (Intel Corporation)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-01-05] (Malwarebytes)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2017-09-29] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_3e0ccd5eb9f5a1e6\nvlddmkm.sys [17486096 2018-01-05] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-11-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50808 2017-11-16] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-12-16] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [888064 2015-08-19] (Realtek )
S3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3119872 2016-06-08] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [68704 2017-01-23] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [72800 2017-01-23] (Synaptics Incorporated)
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [25608 2017-10-28] (SlimWare Utilities, Inc.)
S3 SynRMIHID; C:\WINDOWS\System32\drivers\SynRMIHID.sys [48296 2015-07-23] (Synaptics Incorporated)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1267544 2017-09-08] (Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [212320 2017-09-08] (Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [687968 2017-09-08] (Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331104 2017-09-08] (Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-13 14:22 - 2018-02-13 14:22 - 000031823 _____ C:\Users\BMO\Desktop\FRST.txt
2018-02-13 14:22 - 2018-02-13 14:22 - 000000000 ____D C:\FRST
2018-02-13 14:20 - 2018-02-13 14:22 - 000112640 _____ (forum.viry.cz) C:\Users\BMO\Downloads\FRSTLauncher.exe
2018-02-13 14:14 - 2018-02-13 14:14 - 002405376 _____ (Farbar) C:\Users\BMO\Downloads\FRST64.exe
2018-02-13 14:14 - 2018-02-13 14:14 - 002405376 _____ (Farbar) C:\Users\BMO\Desktop\FRST64.exe
2018-02-12 13:10 - 2018-02-12 13:10 - 000032768 _____ C:\Users\BMO\Downloads\prehlad_CHVU.xls
2018-02-12 13:10 - 2018-02-12 13:10 - 000032768 _____ C:\Users\BMO\Downloads\prehlad_CHVU (1).xls
2018-02-12 09:03 - 2018-02-12 09:03 - 000075430 _____ C:\Users\BMO\Desktop\ROZVRH1-Model.pdf
2018-02-11 20:57 - 2018-02-11 20:57 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2018-02-11 20:57 - 2018-02-11 20:57 - 000002214 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2018-02-11 20:57 - 2018-02-11 20:57 - 000000000 ____D C:\Program Files\Google
2018-02-09 07:49 - 2018-02-09 07:49 - 000017967 _____ C:\Users\BMO\Desktop\kuchyna-Model.pdf
2018-02-09 07:49 - 2018-02-07 19:43 - 002153920 _____ C:\Users\BMO\Documents\kuchyna.bak
2018-02-07 19:43 - 2018-02-09 07:49 - 002004539 _____ C:\Users\BMO\Documents\kuchyna.dwg
2018-02-07 10:09 - 2018-02-13 14:09 - 000003268 _____ C:\WINDOWS\System32\Tasks\CorelUpdateHelperTask-
2018-02-07 08:09 - 2018-02-06 13:07 - 000000233 ___SH C:\Users\Public\Libraries.ini
2018-02-07 08:04 - 2018-02-07 08:04 - 000000000 ____D C:\Users\BMO\AppData\Local\FortniteGame
2018-02-05 15:29 - 2018-02-07 08:04 - 000000000 ____D C:\Users\BMO\AppData\Local\UnrealEngine
2018-02-05 15:29 - 2018-02-05 15:31 - 000000000 ____D C:\ProgramData\Epic
2018-02-05 15:29 - 2018-02-05 15:29 - 000000951 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2018-02-05 15:29 - 2018-02-05 15:29 - 000000951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2018-02-05 15:29 - 2018-02-05 15:29 - 000000000 ____D C:\Users\BMO\AppData\Local\UnrealEngineLauncher
2018-02-05 15:29 - 2018-02-05 15:29 - 000000000 ____D C:\Users\BMO\AppData\Local\EpicGamesLauncher
2018-02-05 15:27 - 2018-02-05 15:28 - 032264192 _____ C:\Users\BMO\Downloads\EpicInstaller-7.2.1-fortnite-ef2a6e8b1058433e95958c070113348a.msi
2018-02-05 13:00 - 2018-02-05 13:00 - 000097628 _____ C:\Users\BMO\Downloads\0902zsskCD.pdf
2018-02-05 12:37 - 2018-02-05 12:37 - 000097928 _____ C:\Users\BMO\Downloads\1102zsskCD.pdf
2018-02-04 10:28 - 2018-02-04 10:28 - 000000000 ____D C:\ProgramData\Coronet_SecureConnect
2018-02-02 11:04 - 2018-02-02 11:04 - 000160494 _____ C:\Users\BMO\Downloads\zsskCD.pdf
2018-02-01 06:20 - 2018-02-01 06:20 - 000169091 _____ C:\Users\BMO\Desktop\WhatsApp Image 2018-02-01 at 06.08.17(1).jpeg
2018-02-01 06:12 - 2018-02-01 06:12 - 000169091 _____ C:\Users\BMO\Desktop\WhatsApp Image 2018-02-01 at 06.08.17.jpeg
2018-02-01 05:57 - 2018-02-01 05:57 - 000142828 _____ C:\Users\BMO\Desktop\WhatsApp Image 2018-02-01 at 05.56.41.jpeg
2018-01-29 12:28 - 2018-01-29 12:28 - 000128566 _____ C:\Users\BMO\Desktop\Jablonica text.pdf
2018-01-28 19:27 - 2018-01-28 10:43 - 033300326 _____ C:\Users\BMO\Downloads\Urbanizmus Jablonica Finál.bak
2018-01-28 18:35 - 2018-01-28 19:08 - 000000000 ____D C:\Users\BMO\Desktop\U3-OPRAVA
2018-01-28 10:43 - 2018-01-28 19:27 - 041159044 _____ C:\Users\BMO\Downloads\Urbanizmus Jablonica Finál.dwg
2018-01-27 20:16 - 2018-01-31 17:18 - 000000000 ____D C:\Users\BMO\Desktop\Drevo nové
2018-01-27 20:03 - 2018-01-27 20:03 - 016003730 _____ C:\Users\BMO\Downloads\fwd.zip
2018-01-27 18:13 - 2018-01-27 18:13 - 000014245 _____ C:\Users\BMO\Downloads\1.I-PSA.pdf
2018-01-27 15:34 - 2018-01-27 15:34 - 000014245 _____ C:\Users\BMO\Desktop\1.I-PSA.pdf
2018-01-24 10:17 - 2018-01-24 10:18 - 000000000 ____D C:\Users\BMO\Desktop\TLAČ
2018-01-22 12:52 - 2018-01-22 12:52 - 005239333 _____ C:\Users\BMO\Downloads\PASIVNE_A_NULOVE_BUDOVY_2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 004720834 _____ C:\Users\BMO\Downloads\tieniaca_technika_2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003882202 _____ C:\Users\BMO\Downloads\tieniaca_technika_4.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003857671 _____ C:\Users\BMO\Downloads\Adaptivne_obvodove_steny_2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003747388 _____ C:\Users\BMO\Downloads\Adaptivne_obvodove_steny_1.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003410970 _____ C:\Users\BMO\Downloads\tieniaca_technika_3.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 003369705 _____ C:\Users\BMO\Downloads\PASIVNE_A_NULOVE_BUDOVY_1.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 002741032 _____ C:\Users\BMO\Downloads\zasklenia2.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 002204534 _____ C:\Users\BMO\Downloads\tieniaca_technika_1.pdf
2018-01-22 12:52 - 2018-01-22 12:52 - 002083528 _____ C:\Users\BMO\Downloads\IAQ_short.pdf
2018-01-22 12:51 - 2018-01-24 10:13 - 000000000 ____D C:\Users\BMO\Downloads\Nový priečinok (4)
2018-01-22 12:51 - 2018-01-22 12:52 - 003946684 _____ C:\Users\BMO\Downloads\zasklenia1.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 004051560 _____ C:\Users\BMO\Downloads\aspekty_udrzatelnej_vystavby_cast_2.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 003887159 _____ C:\Users\BMO\Downloads\aspekty_udrzatelnej_vystavby_cast_1.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 001598205 _____ C:\Users\BMO\Downloads\aspekty_udrzatelnej_vystavby_cast_3.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 000755403 _____ C:\Users\BMO\Downloads\uvod,_podmienky_skusky.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 000254197 _____ C:\Users\BMO\Downloads\temy_cviceni_priklady_17_18.pdf
2018-01-22 12:51 - 2018-01-22 12:51 - 000103966 _____ C:\Users\BMO\Downloads\POKYNY_NA_PISANIE_SEMESTRALNEJ_PRACE.pdf
2018-01-22 12:32 - 2018-01-22 12:33 - 000000000 ____D C:\Users\BMO\Desktop\DAU3- seminárka funkcionalizmus
2018-01-19 20:05 - 2018-01-19 20:05 - 000000000 ____D C:\Users\BMO\AppData\Local\__SHARED
2018-01-19 19:28 - 2018-02-13 10:57 - 000000000 ____D C:\Users\BMO\AppData\Local\Spotify
2018-01-19 19:28 - 2018-02-13 09:18 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Spotify
2018-01-18 15:10 - 2018-01-18 15:10 - 000000000 ____D C:\Users\BMO\AppData\LocalLow\KMPlayer
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Users\BMO\Documents\Soda PDF Files
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Soda PDF Desktop
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soda PDF Desktop
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Program Files\Soda PDF Desktop
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Program Files (x86)\Soda PDF Desktop Manager
2018-01-17 06:44 - 2018-01-17 06:44 - 000000000 ____D C:\Program Files (x86)\Soda PDF Desktop
2018-01-17 06:43 - 2018-01-17 06:51 - 000000000 ____D C:\ProgramData\Soda PDF Desktop
2018-01-14 09:39 - 2018-01-14 09:40 - 022699364 _____ C:\Users\BMO\Downloads\prednášky UA 1. cast.rar
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-13 14:13 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-02-13 14:12 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-02-13 14:12 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-02-13 10:57 - 2017-11-02 17:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-02-13 09:17 - 2017-09-08 21:05 - 000000000 ____D C:\Users\BMO\AppData\Local\Host App Service
2018-02-13 08:28 - 2017-11-02 17:38 - 000004206 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A7218E63-F75F-4BEF-9C5D-2801C189C645}
2018-02-12 21:11 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-02-12 17:57 - 2017-09-10 08:56 - 000181457 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2018-02-12 13:10 - 2017-11-02 17:33 - 000000000 ____D C:\Users\BMO\AppData\Local\Packages
2018-02-12 07:36 - 2017-03-17 15:57 - 000000000 __SHD C:\Users\BMO\IntelGraphicsProfiles
2018-02-07 20:07 - 2017-11-02 17:38 - 000004596 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-02-07 20:07 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-02-07 20:07 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-02-07 08:05 - 2017-10-03 10:02 - 000000000 ____D C:\Users\BMO\AppData\Local\NVIDIA Corporation
2018-02-06 19:47 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-02-06 19:46 - 2016-11-20 16:18 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-02-06 19:35 - 2017-11-22 10:02 - 000003336 _____ C:\WINDOWS\System32\Tasks\CorelUpdateHelperTaskCore
2018-02-06 19:35 - 2017-11-22 10:02 - 000000000 ____D C:\Program Files (x86)\Corel
2018-02-06 03:49 - 2017-09-29 14:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-02-06 03:49 - 2017-09-29 14:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-05 15:31 - 2016-11-20 16:28 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-04 23:23 - 2017-10-03 10:01 - 000000000 ____D C:\Users\BMO\AppData\Local\NVIDIA
2018-02-02 04:35 - 2017-09-08 21:52 - 000000000 ____D C:\Program Files (x86)\Google
2018-02-01 13:54 - 2017-09-13 19:32 - 000000000 ____D C:\ProgramData\RevitInterProcess
2018-02-01 07:10 - 2017-10-10 14:40 - 000000000 ____D C:\Users\BMO\AppData\Roaming\WhatsApp
2018-01-31 13:05 - 2017-11-02 17:38 - 000003372 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3529660226-3304449268-922964883-1001
2018-01-31 13:05 - 2017-09-08 21:11 - 000002368 _____ C:\Users\BMO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-01-31 13:05 - 2017-03-17 15:58 - 000000000 ___RD C:\Users\BMO\OneDrive
2018-01-25 17:29 - 2018-01-09 16:07 - 000000000 ____D C:\Users\BMO\Downloads\Nový priečinok (3)
2018-01-25 15:39 - 2017-12-23 12:34 - 000000000 ____D C:\Users\BMO\AppData\Local\ElevatedDiagnostics
2018-01-24 13:50 - 2017-10-16 17:54 - 000000000 ____D C:\Users\BMO\AppData\Local\CrashDumps
2018-01-23 14:51 - 2017-08-23 07:25 - 000000000 ____D C:\Users\BMO\Desktop\Plocha
2018-01-23 14:40 - 2017-10-10 14:40 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2018-01-23 14:40 - 2017-10-10 14:40 - 000000000 ____D C:\Users\BMO\AppData\Local\WhatsApp
2018-01-23 14:15 - 2017-12-22 11:59 - 000004212 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-01-19 20:03 - 2017-10-17 20:33 - 000000000 ____D C:\Users\BMO\Downloads\Nový priečinok (2)
2018-01-19 19:28 - 2017-09-08 21:46 - 000001833 _____ C:\Users\BMO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2018-01-17 16:44 - 2017-09-12 20:56 - 000000000 ____D C:\Program Files\Autodesk
2018-01-17 16:44 - 2017-09-12 20:53 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2018-01-17 16:44 - 2017-09-12 19:32 - 000000000 ____D C:\Users\BMO\AppData\Roaming\Autodesk
2018-01-17 16:44 - 2017-09-12 19:32 - 000000000 ____D C:\ProgramData\Autodesk
2018-01-15 21:45 - 2017-11-02 17:43 - 001146898 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-15 21:39 - 2017-11-02 17:38 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-01-15 21:38 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
==================== Files in the root of some directories =======
Some files in TEMP:
====================
2018-02-06 23:07 - 2018-02-06 23:08 - 022545488 _____ (SweetLabs,Inc.) C:\Users\BMO\AppData\Local\Temp\oct568F.tmp.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-02-13 07:42
==================== End of FRST.txt ============================
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (Windows) (Fixed) (Total:100.68 GB) (Free:10.61 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:931.39 GB) (Free:76.04 GB) NTFS
\\?\Volume{22a5b39d-1343-41bc-a439-2e81d4687f18}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
\\?\Volume{c8ff15fc-c189-43db-b1da-57f0b781b773}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.53 GB) NTFS
\\?\Volume{3c0c8bb6-ef31-42a2-b04e-6bf57ba0e7d3}\ (LENOVO_PART) (Fixed) (Total:16.34 GB) (Free:2.25 GB) NTFS
Available physical RAM: 2928.45 MB
Total physical RAM: 7953.36 MB
Percentage of memory in use: 63%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 119.2 GB) (Disk ID: E5A91B58)
Disk: 1 (Size: 931.5 GB) (Disk ID: 8AD67153)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => D:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\Temp:1CE11B51 [106]
AlternateDataStreams: C:\Users\Public\AppData:CSM [468]
==================== Security Center ==================
AV: ESET Endpoint Security 5.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Endpoint Security 5.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: Eset Pesonálny Firewall (Disabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\BMO\Desktop" je 2748 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================
Odporucam nepouzivat a odinstalovat DriverToolkit a vyhnut sa podobnym programom, najma IObit programom.