Pomalejší počítač, odinstalace

[Rudy]

Disk je v pořádku. Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu.

[Mufff]

Zdravím.

Přikládám rar. Jenom ještě jedna věc. Při kliku na Firefox se objeví "Could not load XPCOM".

M.

[Rudy]

Neměnil/nepřidával jste v poslední době nějaký hardware, nebo něco neinstaloval?

[Mufff]

Zdravím. Odinstalovával a opět doinstalovával jsem Wifi. Bohužel tu mám RTL8723BE. Na diskuzích jsem se až teď dočetl, že nic moc... Notebook má poslední týden problém najít síť a když už ji najde, tak vypadává nebo je rychlost minimální. Už se mi to kdysi stalo. Vrátil jsem se k původnímu ovladači . Spustil jsem správce zařízení, zvolil jsem "síťové adaptéry", klikl na Realtek. Pod záložkou "Upřesnit" se až dole skrývá "WiFi Config". Tam bylo potřeba zvolit "WiFi" místo "Performance". Fungovalo to až doposud a teď už zase ne... . Ovladače jsem zkoušel snad všechny, co kdy vydali... Bohužel nevím, co s tím. Na ostatních PC tu mám 18 Mbit a na tomhle 0,5...

[Rudy]

Problém bude patrně tam. Budete si muset pohrát s nastavením toho adaptéru. Virový problém to asi není.

[Mufff]

To už zkouším týden a bohužel nic... Jsem laik, asi se budu muset někde poradit...

[Rudy]

Na tohle jsme už krátcí. jsme bezpečnostní fórum.

[Mufff]

Rozumím... Co dále? Nějaký log nebo... ?

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[Mufff]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22.11.2015
Čas skenování: 21:26
Protokol: Malware_log.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.11.22.05
Databáze rootkitů: v2015.11.22.02
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Probook

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 341941
Uplynulý čas: 9 min, 45 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 2
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\bitstreams, , [af5eaad7d3b8e5517c6c9dbb639f8f71],

Soubory: 24
PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumncdtkndx.exe, , [c5488af7a6e5b086f38148af778a1ee2],
PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumncgnfj.exe, , [5db0eb96078480b6c0b409ee738ee61a],
PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumncmieqp.exe, , [a964235e177461d5f183fef9f809ac54],
Trojan.BitCoinMiner, C:\Windows\SysWOW64\dcgmncdtkndx.exe, , [a9642d54a9e2360090067b7c1ee306fa],
Trojan.BitCoinMiner, C:\Windows\SysWOW64\dcgmncgnfj.exe, , [bd50136e3655eb4bbdd9cc2b27da43bd],
Trojan.BitCoinMiner, C:\Windows\SysWOW64\dcgmncmieqp.exe, , [cf3eb3cec6c568cebdd9a750738e5ea2],
Trojan.Agent.BCM, C:\Windows\SysWOW64\lcpmncdtkndx.exe, , [0efff68b216af44299746a37e11fe719],
Trojan.Agent.BCM, C:\Windows\SysWOW64\lcpmncgnfj.exe, , [2de0047d523958debf4ef6abfc04e51b],
Trojan.Agent.BCM, C:\Windows\SysWOW64\lcpmncmieqp.exe, , [50bdc0c193f8999d7895e9b8748c4ab6],
Trojan.Agent.Trace, C:\Windows\inf\ntvdm.inf, , [1af3760b52397abcadb33b837192946c],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\diablo130302.cl, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\diakgcn121016.cl, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\libcurl-4.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\libeay32.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\libidn-11.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\librtmp.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\libssh2.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\mncgakmbe.exe, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\phatk121016.cl, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\poclbm130302.cl, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\scrypt130511.cl, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\ssleay32.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\zlib1.dll, , [af5eaad7d3b8e5517c6c9dbb639f8f71],
Trojan.Agent.BCM, C:\Windows\inf\mncgakmbe\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, , [af5eaad7d3b8e5517c6c9dbb639f8f71],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Rudy]

Nalezené položky smažte.

[Mufff]

Smazáno, přikládám další RSIT log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Probook at 2015-11-23 06:55:07
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 88 GB (19%) free of 461 GB
Total RAM: 3968 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:55:33, on 23.11.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\windows\SysWOW64\mshta.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
C:\Users\Probook\Desktop\RSIT.exe
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
C:\Program Files (x86)\trend micro\Probook.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [YouCam Tray] "c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [PowerDVD13Agent] "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\windows\SysWOW64\NeroCheck.exe
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [ToolboxFX] "C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DriverPack Notifier] C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe --run startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [T-Mobile Communication Centre] "C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [osk.exe] osk.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [osk.exe] osk.exe (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ISCTSystray.lnk = C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {414FB93D-DEDD-4FEF-AD7F-167992EBDB52} (SlimClient Class) - https://fw.ulz.cz/sslvpn/SNX/CSHELL/extender.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: AvrcpService - Realtek Semiconductor Corporation - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: Check Point SSL Network Extender (cpextender) - Check Point Software Technologies - C:\Program Files (x86)\CheckPoint\SSL Network Extender\slimsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: CyberLink PowerDVD 13 Media Server Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
O23 - Service: CyberLink PowerDVD 13 Media Server Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Hotkey Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HotkeyService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: RtkBleServ - Realtek Semiconductor Corporation - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17636 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore1cfdf47ea6e0091.job
C:\windows\tasks\GoogleUpdateTaskMachineCore1d0bf948d1a4342.job
C:\windows\tasks\GoogleUpdateTaskMachineCore1d0e3b9d079cd95.job
C:\windows\tasks\GoogleUpdateTaskMachineCore1d0efdf878589a9.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskMachineUA1d041a6ad1647d6.job
C:\windows\tasks\GoogleUpdateTaskMachineUA1d08ecb1cb332d5.job
C:\windows\tasks\GoogleUpdateTaskMachineUA1d0bf948d536449.job
C:\windows\tasks\GoogleUpdateTaskMachineUA1d0e3b9d0d441df.job
C:\windows\tasks\GoogleUpdateTaskMachineUA1d0efdf87d41712.job
C:\windows\tasks\HPCeeScheduleForProbook.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Probook\AppData\Roaming\Mozilla\Firefox\Profiles\2nrq2654.default

prefs.js - "browser.search.useDBForOrder" - false
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/?clid=6826"

"dpmaxz_ng@jetpack"=C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=602XML Filler Plugin
"Path"=C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\digitalpersona.com/ChromeDPAgent]
"Description"=
"Path"=C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\components\npChromeDPAgent.dll


C:\Users\Probook\AppData\Roaming\Mozilla\Firefox\Profiles\2nrq2654.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

C:\Users\Probook\AppData\Roaming\Mozilla\Firefox\Profiles\2nrq2654.default\searchplugins\
firmy.cz-155924.xml
seznam.cz-155924.xml
videa.seznam.cz-155924.xml
zbozi.cz-155924.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-05 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-05 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-03-01 293872]
"YouCam Tray"=c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2013-09-16 167488]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05 111576]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2013-08-07 490760]
"PowerDVD13Agent"=C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe [2013-07-05 517144]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2009-07-01 37888]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2009-09-05 417792]
"NeroFilterCheck"=C:\windows\SysWOW64\NeroCheck.exe [2005-09-25 155648]
"Print2PDF Print Monitor"=C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [2011-04-12 222776]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"HPConnectionManager"=C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2015-03-20 191112]
"ToolboxFX"=C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe [2014-08-13 59632]
"AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2015-07-08 127528]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2015-08-03 430120]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"DriverPack Notifier"=C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe [2015-10-21 265456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-09-25 6480664]
"T-Mobile Communication Centre"=C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2012-08-22 1368768]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2005-09-25 94208]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2015-10-29 1403304]
"Gadwin PrintScreen"=C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe [2011-05-03 487424]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
ISCTSystray.lnk - C:\Program Files (x86)\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe

C:\Users\Probook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.l3codecp"=l3codecp.acm
"vidc.XVID"=xvidvfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-23 06:55:07 ----D---- C:\rsit
2015-11-22 21:23:24 ----D---- C:\ProgramData\Malwarebytes
2015-11-22 21:23:24 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-22 12:36:32 ----D---- C:\Program Files (x86)\CrystalDiskInfo
2015-11-20 17:58:48 ----D---- C:\AdwCleaner
2015-11-20 17:39:14 ----D---- C:\Program Files (x86)\trend micro
2015-11-20 16:43:58 ----D---- C:\Users\Probook\AppData\Roaming\AIMP3
2015-11-20 16:43:53 ----D---- C:\Program Files (x86)\AIMP3
2015-11-20 15:59:18 ----D---- C:\Users\Probook\AppData\Roaming\Yandex
2015-11-20 15:59:12 ----D---- C:\Users\Probook\AppData\Roaming\DriverPack Notifier
2015-11-20 15:59:12 ----D---- C:\Program Files (x86)\DriverPack Notifier
2015-11-20 15:59:08 ----D---- C:\Users\Probook\AppData\Roaming\DriverPack Easy Search
2015-11-20 15:57:27 ----A---- C:\windows\SET6CA4.tmp
2015-11-20 15:57:25 ----A---- C:\windows\SysWOW64\RtCamX.dll
2015-11-20 15:57:24 ----A---- C:\windows\SysWOW64\RsDecode.dll
2015-11-20 15:57:24 ----A---- C:\windows\RtCamU64.exe
2015-11-20 15:57:04 ----A---- C:\windows\SysWOW64\SynCom.dll
2015-11-20 15:56:19 ----A---- C:\windows\SysWOW64\SRCOM.dll
2015-11-20 13:23:18 ----D---- C:\Users\Probook\AppData\Roaming\DRPSu
2015-11-18 21:06:30 ----A---- C:\windows\SwUSB.exe
2015-11-18 21:06:30 ----A---- C:\windows\runSW.exe
2015-11-18 21:06:05 ----D---- C:\DRIVERS
2015-11-11 20:03:14 ----A---- C:\windows\SysWOW64\urlmon.dll
2015-11-11 20:03:14 ----A---- C:\windows\SysWOW64\occache.dll
2015-11-11 20:03:14 ----A---- C:\windows\SysWOW64\mshtmled.dll
2015-11-11 20:03:14 ----A---- C:\windows\SysWOW64\MshtmlDac.dll
2015-11-11 20:03:14 ----A---- C:\windows\SysWOW64\ieetwproxystub.dll
2015-11-11 20:03:14 ----A---- C:\windows\SysWOW64\iedkcs32.dll
2015-11-11 20:03:13 ----A---- C:\windows\SysWOW64\vbscript.dll
2015-11-11 20:03:13 ----A---- C:\windows\SysWOW64\mshtml.dll
2015-11-11 20:03:13 ----A---- C:\windows\SysWOW64\msfeeds.dll
2015-11-11 20:03:13 ----A---- C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-11-11 20:03:13 ----A---- C:\windows\SysWOW64\dxtrans.dll
2015-11-11 20:03:11 ----A---- C:\windows\SysWOW64\iesetup.dll
2015-11-11 20:03:11 ----A---- C:\windows\SysWOW64\iertutil.dll
2015-11-11 20:03:11 ----A---- C:\windows\SysWOW64\ieapfltr.dll
2015-11-11 20:03:10 ----A---- C:\windows\SysWOW64\jsproxy.dll
2015-11-11 20:03:10 ----A---- C:\windows\SysWOW64\jscript9diag.dll
2015-11-11 20:03:10 ----A---- C:\windows\SysWOW64\jscript.dll
2015-11-11 20:03:10 ----A---- C:\windows\SysWOW64\ieui.dll
2015-11-11 20:03:10 ----A---- C:\windows\SysWOW64\iernonce.dll
2015-11-11 20:03:10 ----A---- C:\windows\SysWOW64\dxtmsft.dll
2015-11-11 20:03:09 ----A---- C:\windows\SysWOW64\ieframe.dll
2015-11-11 20:03:06 ----A---- C:\windows\SysWOW64\wininet.dll
2015-11-11 20:03:06 ----A---- C:\windows\SysWOW64\webcheck.dll
2015-11-11 20:03:06 ----A---- C:\windows\SysWOW64\mshtmlmedia.dll
2015-11-11 20:03:06 ----A---- C:\windows\SysWOW64\jscript9.dll
2015-11-11 20:03:06 ----A---- C:\windows\SysWOW64\ieUnatt.exe
2015-11-11 20:03:05 ----A---- C:\windows\SysWOW64\msrating.dll
2015-11-11 09:59:51 ----A---- C:\windows\SysWOW64\wuwebv.dll
2015-11-11 09:59:51 ----A---- C:\windows\SysWOW64\wudriver.dll
2015-11-11 09:59:51 ----A---- C:\windows\SysWOW64\wuapi.dll
2015-11-11 09:59:50 ----A---- C:\windows\SysWOW64\wups.dll
2015-11-11 09:59:50 ----A---- C:\windows\SysWOW64\wuapp.exe
2015-11-11 09:58:46 ----A---- C:\windows\SysWOW64\shimeng.dll
2015-11-11 09:58:46 ----A---- C:\windows\SysWOW64\sdbinst.exe
2015-11-11 09:58:46 ----A---- C:\windows\SysWOW64\apphelp.dll
2015-11-11 09:30:33 ----A---- C:\windows\SysWOW64\schannel.dll
2015-11-11 09:30:33 ----A---- C:\windows\SysWOW64\kerberos.dll
2015-11-11 09:30:31 ----A---- C:\windows\SysWOW64\ncrypt.dll
2015-11-11 09:30:30 ----A---- C:\windows\SysWOW64\ntoskrnl.exe
2015-11-11 09:30:30 ----A---- C:\windows\SysWOW64\ntkrnlpa.exe
2015-11-11 09:30:29 ----A---- C:\windows\SysWOW64\bcryptprimitives.dll
2015-11-11 09:30:27 ----A---- C:\windows\SysWOW64\ntdll.dll
2015-11-11 09:30:25 ----A---- C:\windows\SysWOW64\msv1_0.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\wdigest.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\TSpkg.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\srclient.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\setup16.exe
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\secur32.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\rpcrt4.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\ntvdm64.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\cryptbase.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\credssp.dll
2015-11-11 09:30:24 ----A---- C:\windows\SysWOW64\auditpol.exe
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:30:23 ----AH---- C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:30:23 ----A---- C:\windows\SysWOW64\wow32.dll
2015-11-11 09:30:23 ----A---- C:\windows\SysWOW64\sspicli.dll
2015-11-11 09:30:23 ----A---- C:\windows\SysWOW64\KernelBase.dll
2015-11-11 09:30:23 ----A---- C:\windows\SysWOW64\kernel32.dll
2015-11-11 09:30:22 ----AH---- C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:30:22 ----AH---- C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:30:22 ----AH---- C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:30:22 ----AH---- C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:30:22 ----A---- C:\windows\SysWOW64\instnm.exe
2015-11-11 09:30:22 ----A---- C:\windows\SysWOW64\apisetschema.dll
2015-11-11 09:30:21 ----A---- C:\windows\SysWOW64\user.exe
2015-11-11 09:30:20 ----A---- C:\windows\SysWOW64\adtschema.dll
2015-11-11 09:30:16 ----A---- C:\windows\SysWOW64\msaudite.dll
2015-11-11 09:30:14 ----A---- C:\windows\SysWOW64\msobjs.dll
2015-11-11 09:16:17 ----A---- C:\windows\SysWOW64\InkEd.dll
2015-11-10 23:28:07 ----A---- C:\windows\SysWOW64\FlashPlayerInstaller.exe
2015-11-06 20:47:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-11-01 18:50:23 ----A---- C:\windows\HPSetLog.txt
2015-10-27 09:53:32 ----SHD---- C:\Users\Probook\AppData\Roaming\.#
2015-10-27 09:53:07 ----D---- C:\ProgramData\HP
2015-10-27 09:53:05 ----D---- C:\Users\Probook\AppData\Roaming\HpUpdate
2015-10-27 09:52:41 ----D---- C:\Users\Probook\AppData\Roaming\Hewlett-Packard Company
2015-10-27 09:51:07 ----A---- C:\windows\SysWOW64\hpcdmc32.dll
2015-10-27 09:51:07 ----A---- C:\windows\SysWOW64\hpcc3101.dll
2015-10-27 09:50:49 ----D---- C:\Program Files (x86)\HP
2015-10-27 09:50:13 ----A---- C:\windows\SysWOW64\hpptsp06.dll

======List of files/folders modified in the last 1 month======

2015-11-23 06:55:33 ----D---- C:\windows\Prefetch
2015-11-23 06:55:31 ----D---- C:\windows\Temp
2015-11-23 06:54:56 ----D---- C:\windows\System32
2015-11-23 06:54:56 ----D---- C:\windows\inf
2015-11-23 06:49:08 ----D---- C:\ProgramData\Validity
2015-11-23 06:47:58 ----D---- C:\windows\SysWOW64
2015-11-23 06:16:01 ----D---- C:\Windows
2015-11-23 06:14:52 ----D---- C:\windows\Minidump
2015-11-22 21:23:24 ----RD---- C:\Program Files (x86)
2015-11-22 21:23:24 ----HD---- C:\ProgramData
2015-11-22 20:27:56 ----D---- C:\Program Files (x86)\Opera
2015-11-22 20:22:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-22 17:55:55 ----SHD---- C:\windows\Installer
2015-11-22 17:55:25 ----SHD---- C:\System Volume Information
2015-11-22 17:55:24 ----D---- C:\Program Files (x86)\Realtek
2015-11-21 17:20:11 ----D---- C:\windows\Tasks
2015-11-21 17:20:10 ----D---- C:\Users\Probook\AppData\Roaming\vlc
2015-11-21 17:19:46 ----D---- C:\Program Files (x86)\SereneScreen
2015-11-21 17:19:38 ----D---- C:\windows\registration
2015-11-20 22:51:10 ----D---- C:\windows\ModemLogs
2015-11-20 16:06:31 ----D---- C:\windows\SysWOW64\RTCOM
2015-11-18 21:37:12 ----D---- C:\SWSETUP
2015-11-18 21:06:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-11-18 07:50:56 ----D---- C:\Users\Probook\AppData\Roaming\hpqLog
2015-11-17 15:54:29 ----D---- C:\windows\Hewlett-Packard
2015-11-15 09:54:13 ----D---- C:\Program Files (x86)\Hewlett-Packard
2015-11-15 09:54:11 ----RSD---- C:\windows\assembly
2015-11-12 17:30:10 ----D---- C:\windows\winsxs
2015-11-12 14:41:27 ----D---- C:\windows\rescache
2015-11-12 12:09:33 ----D---- C:\windows\SysWOW64\en-US
2015-11-12 12:09:32 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-12 07:06:13 ----D---- C:\ProgramData\Microsoft Help
2015-11-11 19:19:17 ----D---- C:\windows\Microsoft.NET
2015-11-11 19:11:32 ----D---- C:\windows\SysWOW64\cs-CZ
2015-11-11 19:11:27 ----D---- C:\windows\AppPatch
2015-11-11 15:48:09 ----A---- C:\windows\SysWOW64\PerfStringBackup.INI
2015-11-10 23:28:16 ----A---- C:\windows\SysWOW64\FlashPlayerApp.exe
2015-11-07 09:46:05 ----D---- C:\ProgramData\Package Cache
2015-11-07 09:44:48 ----D---- C:\Program Files (x86)\Garmin
2015-11-04 08:30:00 ----D---- C:\Users\Probook\AppData\Roaming\Skype
2015-10-27 09:52:40 ----D---- C:\windows\twain_32
2015-10-27 09:52:40 ----D---- C:\ProgramData\Hewlett-Packard

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\drivers\hpdskflt.sys []
R0 iaStorA;iaStorA; C:\windows\system32\drivers\iaStorA.sys []
R0 iaStorF;iaStorF; C:\windows\system32\drivers\iaStorF.sys []
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\windows\system32\drivers\iusb3hcs.sys []
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys []
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys []
R0 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys []
R1 CLVirtualDrive;CLVirtualDrive; C:\windows\system32\DRIVERS\CLVirtualDrive.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys []
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys []
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys []
R1 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys []
R2 epfwwfpr;epfwwfpr; C:\windows\system32\DRIVERS\epfwwfpr.sys []
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys []
R3 BthEnum;Služba Bluetooth Enumerator; C:\windows\system32\DRIVERS\BthEnum.sys []
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys []
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys []
R3 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\windows\system32\Drivers\CVPNDRVA.sys []
R3 DNE;Deterministic Network Enhancer Miniport; C:\windows\system32\DRIVERS\dne64x.sys []
R3 ElbyDelay;ElbyDelay; C:\windows\System32\Drivers\ElbyDelay.sys [2007-02-16 14032]
R3 huawei_enumerator;huawei_enumerator; C:\windows\system32\DRIVERS\ew_jubusenum.sys []
R3 IFXTPM;IFXTPM; C:\windows\system32\DRIVERS\IFXTPM.SYS []
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys []
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\windows\system32\DRIVERS\ikbevent.sys []
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\windows\system32\DRIVERS\imsevent.sys []
R3 INETMON;INETMON; \??\C:\windows\System32\Drivers\INETMON.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys []
R3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\windows\system32\DRIVERS\ISCTD.sys []
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\windows\system32\DRIVERS\iusb3hub.sys []
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\windows\system32\DRIVERS\iusb3xhc.sys []
R3 MBAMProtector;MBAMProtector; \??\C:\windows\system32\drivers\mbam.sys []
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys []
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\windows\system32\drivers\mwac.sys []
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\TeeDriverx64.sys []
R3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys []
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys []
R3 RtkBtFilter;Realtek Bluetooth Filter Driver; C:\windows\system32\DRIVERS\RtkBtfilter.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys []
R3 rtsuvc;HP Universal Camera Driver; C:\windows\system32\DRIVERS\rtsuvc.sys []
R3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\windows\system32\DRIVERS\rtwlane.sys []
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys []
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys []
S1 InCDPass;InCDPass; C:\windows\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\windows\system32\drivers\InCDRm.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys []
S3 cmshusbser;Mobile Connector USB Device for Legacy Serial Communication IN ANDROID DEVICE; C:\windows\system32\DRIVERS\cmshusbser.sys []
S3 CVirtA;Cisco Systems VPN Adapter for 64-bit Windows; C:\windows\system32\DRIVERS\CVirtA64.sys []
S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys []
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\windows\system32\DRIVERS\ew_hwusbdev.sys []
S3 huawei_cdcacm;huawei_cdcacm; C:\windows\system32\DRIVERS\ew_jucdcacm.sys []
S3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys []
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys []
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys []
S3 RtkAvrcp;Realtek Bluetooth A/V Remote Control Target; C:\windows\system32\drivers\RtkAvrcp.sys []
S3 RTL8168;Realtek 8168 NT Driver; C:\windows\system32\DRIVERS\Rt630x64.sys []
S3 RTSPER;Realtek PCIE Card Reader - PER; C:\windows\system32\DRIVERS\RtsPer.sys []
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys []
S3 SmbDrv;SmbDrv; C:\windows\system32\drivers\Smb_driver_AMDASF.sys []
S3 SmbDrvI;SmbDrvI; C:\windows\system32\drivers\Smb_driver_Intel.sys []
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys []
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys []
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys []
S4 InCDFs;InCD File System; C:\windows\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-03-14 84520]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2012-08-22 123320]
R2 AvrcpService;AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [2014-07-03 43224]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2014-10-11 98816]
R2 cpextender;Check Point SSL Network Extender; C:\Program Files (x86)\CheckPoint\SSL Network Extender\slimsvc.exe [2015-02-23 368272]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe [2010-02-16 1528616]
R2 CyberLink PowerDVD 13 Media Server Monitor Service;CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [2013-07-05 77576]
R2 CyberLink PowerDVD 13 Media Server Service;CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [2013-07-05 327432]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 DpHost;@C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2014-07-28 500048]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2014-02-24 1343408]
R2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2015-10-29 777744]
R2 HP Hotkey Service;HP Hotkey Service; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HotkeyService.exe [2015-08-03 850144]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2010-10-25 145920]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe []
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2014-06-25 16232]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\windows\system32\igfxCUIService.exe []
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2013-09-07 198120]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-10-10 158496]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-10-10 409376]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-06-14 292568]
R2 RtkBleServ;RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [2014-07-03 50392]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-08-22 237736]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\windows\system32\valWBFPolicyService.exe []
R2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2013-09-12 2741648]
R3 hpCMSrv;HP Connection Manager 4 Service; C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2015-03-20 1527432]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-07-01 1102376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10 269000]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 20992]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2015-06-14 279952]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe /V []
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-06 147624]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Mufff]

Zdravím.

Stále trvá:
1. Pokud PC "usne", spadne až na černou, popř. modrou obrazovku (obnova po chybě).
2. Nejde odinstalovat AIMP3.

Díky.

[Mufff]

Ještě jeden problém vypozorovaný z používání - stále se mi seká Word a Excel...

[Rudy]

Ještě zkusíme ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Obávám se ale chyby přímo v systému.