Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola notebooku

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Kontrola notebooku

#1 Příspěvek od nobody »

Zdravím,
prosím vás potřebovala bych kouknout jestli nemám v notebooku nějaký vir. Když zapnu internet najede mi hned tato stránka: http://www.piesearch.com/?type=sc&ts=145182143... a píše mi, že hrozí riziko. Neumím se toho zbavit. A ještě jsem se chtěla zeptat, vždycky mi načítaly SD karty v notebooku normálně a najednou to nejede, nechce to vůbec přijmout, dá se s tím něco dělat? Děkuji :)


Logfile of random's system information tool 1.10 (written by random/random)
Run by Ludmila at 2016-02-19 16:29:51
Microsoft Windows 8.1
System drive C: has 42 GB (35%) free of 121 GB
Total RAM: 12211 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:30:28, on 19. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Users\Ludmila\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Ludmila.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... 1x50n4k91x
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 33034BBAF3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... 1x50n4k91x
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 33034BBAF3
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [SafeQClient] C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Search Protection] C:\ProgramData\Search Protection\SearchProtection.exe
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~2\INSTAL~1\{C413C~1\setup.exe -rebootC:\PROGRA~2\INSTAL~1\{C413C~1\reboot.ini -l0x0409
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Application Restart #0] C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: McAfee Application Installer Cleanup (0038041455776177) (0038041455776177mcinstcleanup) - McAfee, Inc. - C:\Windows\TEMP\003804~1.EXE
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros - C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel® ME Service (Intel(R) ME Service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MustangService DispalyName (MustangService_2015_10_10) - MustangService - C:\ProgramData\TempMoudleSet\MustangSer344.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15282 bytes

======Listing Processes======





wininit.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 183501262384
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {da4f5c2f-082b-4b6c-9877b14359d25ff6}
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 8970621a-f20f-4656-9ca1-224fb429d253 0
\??\C:\Windows\system32\conhost.exe 0x4

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\Ludmila\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-3497575666-2220848565-2583033622-1001 -c 392 -s 542 -g "C:\ProgramData\acer\CCD"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding

C:\Windows\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
taskhostex.exe
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe" /LOGON
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Dolby Digital Plus\ddp.exe" -autostart
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\SafeQ\SafeQ_cli.exe"
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Users\Ludmila\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe" -showminimized -checkautorun -peruser
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\splwow64.exe 8192
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\system32\igfxext.exe" -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe" --type=renderer --disable-breakpad --disable-desktop-notifications --disable-logging --disable-speech-input --lang=en-US --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/10/OneClickSignIn/Standard/Prefetch/ContentPrefetchPrefetchOn/Prerender/PrerenderMulti/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V1/SpeculativePrefetchingLearning/SpeculativePrefetchingLearningEnabled/Test0PercentDefault/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/last_accessed_socket/ --noerrdialogs --disable-client-side-phishing-detection --disable-bundled-ppapi-flash --channel="39988.1.1216799817\1204021946" /prefetch:3
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe"
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe" task
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files\Windows Defender\MSASCui.exe" /ScanNow
taskhost.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.piesearch.com/?type=sc&ts=14 ... 4fb429d253

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe143_ Global\UsGthrCtrlFltPipeMssGthrPipe143 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\Users\Ludmila\Downloads\RSITx64.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey CD14D0FA-DC8F-D9E9-4389-3A2C326E7C2C -Reinvoke
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\
1447241010_xpi

C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\searchplugins\
McSiteAdvisor.xml
mystartsearch.xml
so-v.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-10-31 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-10-31 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2016-01-18 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2016-01-18 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-06 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-01-06 2824504]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-26 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"AutoKMS"=C:\Windows\AutoKMS.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #0"=C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe [2016-02-15 7874536]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2015-11-17 522784]
"SafeQClient"=C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [2014-08-22 493056]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2015-09-24 41360]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2015-09-24 840592]
"Search Protection"=C:\ProgramData\Search Protection\SearchProtection.exe []
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-10-06 597040]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"InstallShieldSetup"=C:\PROGRA~2\INSTAL~1\{C413C~1\setup.exe -rebootC:\PROGRA~2\INSTAL~1\{C413C~1\reboot.ini -l0x0409 []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-02-19 16:29:51 ----DC---- C:\rsit
2016-02-19 16:29:51 ----DC---- C:\Program Files\trend micro
2016-02-19 15:47:51 ----DC---- C:\Users\Ludmila\AppData\Roaming\dvdcss
2016-02-19 14:03:19 ----DC---- C:\Users\Ludmila\AppData\Roaming\ProtectDisc
2016-02-19 14:03:10 ----DC---- C:\Program Files (x86)\Biathlon 2009 (Demo)
2016-02-19 13:30:12 ----DC---- C:\Users\Ludmila\AppData\Roaming\Milestone
2016-02-19 13:28:29 ----DC---- C:\Program Files (x86)\Milestone
2016-02-15 04:13:44 ----AC---- C:\Windows\system32\mshtml.dll
2016-02-15 04:13:43 ----AC---- C:\Windows\system32\iertutil.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\system32\urlmon.dll
2016-02-15 04:13:40 ----AC---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-15 04:13:39 ----AC---- C:\Windows\system32\ieframe.dll
2016-02-15 04:13:37 ----AC---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-13 14:09:22 ----DC---- C:\Program Files (x86)\Mozilla Firefox
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\invagent.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\generaltel.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\devinv.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\CompatTelRunner.exe
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\appraiser.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\aeinv.dll
2016-02-10 22:39:40 ----AC---- C:\Windows\system32\acmigration.dll
2016-02-10 22:39:38 ----AC---- C:\Windows\system32\shell32.dll
2016-02-10 22:39:37 ----AC---- C:\Windows\system32\twinui.dll
2016-02-10 22:39:36 ----AC---- C:\Windows\SYSWOW64\twinui.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\SYSWOW64\shell32.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\SYSWOW64\authui.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\system32\authui.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\system32\EncDec.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\system32\CPFilters.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\cfgbkend.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuwebv.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\WUSettingsProvider.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wudriver.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wucltux.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuaueng.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuauclt.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuapp.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuapi.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\mtxoci.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\cfgbkend.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\SYSWOW64\glcndFilter.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\system32\glcndFilter.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\msv1_0.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\lsasrv.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\kerberos.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 22:39:19 ----AC---- C:\Windows\SYSWOW64\certcli.dll
2016-02-10 22:39:19 ----AC---- C:\Windows\system32\dpapisrv.dll
2016-02-10 22:39:19 ----AC---- C:\Windows\system32\certcli.dll
2016-02-10 22:38:59 ----AC---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\WinTypes.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\WinSync.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\wincorlib.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\combase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\WinTypes.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\WinSync.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\ntdll.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\KernelBase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\combase.dll
2016-02-10 22:38:57 ----AC---- C:\Windows\system32\win32k.sys
2016-02-10 22:38:51 ----AC---- C:\Windows\system32\jscript9.dll
2016-02-10 22:38:50 ----AC---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\system32\wininet.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\system32\msfeeds.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\SYSWOW64\hlink.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\webcheck.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\hlink.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\actxprxy.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\system32\iedkcs32.dll
2016-02-10 22:38:46 ----AC---- C:\Windows\system32\inetcomm.dll
2016-02-10 22:38:46 ----AC---- C:\Windows\system32\ie4uinit.exe
2016-02-10 22:38:45 ----AC---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\SYSWOW64\inetcomm.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\system32\vbscript.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\system32\jscript.dll
2016-02-10 22:38:43 ----AC---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 22:38:43 ----AC---- C:\Windows\system32\ieapfltr.dll
2016-02-10 22:38:42 ----AC---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 22:38:28 ----AC---- C:\Windows\system32\rdpcorets.dll
2016-02-10 22:38:27 ----AC---- C:\Windows\system32\rdpudd.dll
2016-02-03 23:52:05 ----DC---- C:\Users\Ludmila\AppData\Roaming\Zoner
2016-02-03 00:14:08 ----AC---- C:\Windows\system32\drivers\RtsUer.sys
2016-01-20 13:52:57 ----C---- C:\Windows\system32\MpSigStub.exe

======List of files/folders modified in the last 1 month======

2016-02-19 16:30:11 ----DC---- C:\Windows\Prefetch
2016-02-19 16:29:51 ----RDC---- C:\Program Files
2016-02-19 16:00:00 ----DC---- C:\Windows\system32\sru
2016-02-19 15:59:30 ----DC---- C:\Users\Ludmila\AppData\Roaming\vlc
2016-02-19 14:34:25 ----RDC---- C:\Program Files (x86)
2016-02-19 14:34:25 ----DC---- C:\Windows\system32\drivers
2016-02-19 14:07:22 ----DC---- C:\Windows\Temp
2016-02-19 14:02:51 ----HDC---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-19 14:02:50 ----SHDC---- C:\Windows\Installer
2016-02-19 13:28:27 ----SHD---- C:\System Volume Information
2016-02-19 13:18:16 ----DC---- C:\Windows\AppReadiness
2016-02-19 11:53:09 ----DC---- C:\Windows\system32\Tasks
2016-02-18 07:15:48 ----DC---- C:\Program Files (x86)\McAfee
2016-02-17 21:12:24 ----DC---- C:\Windows\system32\config
2016-02-17 02:59:42 ----DC---- C:\Windows\Inf
2016-02-16 17:42:05 ----DC---- C:\Windows\SysWOW64
2016-02-15 14:29:24 ----DC---- C:\Windows\Microsoft.NET
2016-02-15 14:29:19 ----RSDC---- C:\Windows\assembly
2016-02-15 14:16:22 ----RDC---- C:\Windows\System32
2016-02-15 14:16:22 ----AC---- C:\Windows\system32\PerfStringBackup.INI
2016-02-15 08:28:55 ----D---- C:\Windows\WinSxS
2016-02-15 08:27:24 ----DC---- C:\Windows
2016-02-15 08:27:24 ----DC---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-15 08:26:56 ----RD---- C:\Windows\ToastData
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\sk-SK
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\en-US
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\cs-CZ
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\sk-SK
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\en-US
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\cs-CZ
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\appraiser
2016-02-15 08:26:56 ----DC---- C:\Windows\apppatch
2016-02-15 08:26:55 ----DC---- C:\Windows\system32\wbem
2016-02-15 08:26:55 ----DC---- C:\Program Files\Windows Journal
2016-02-15 08:26:55 ----DC---- C:\Program Files\Internet Explorer
2016-02-15 08:26:55 ----DC---- C:\Program Files (x86)\Internet Explorer
2016-02-15 04:43:06 ----DC---- C:\Windows\CbsTemp
2016-02-15 04:40:55 ----DC---- C:\ProgramData\Microsoft Help
2016-02-15 04:39:20 ----AC---- C:\Windows\win.ini
2016-02-15 04:26:01 ----DC---- C:\Windows\system32\MRT
2016-02-15 04:18:53 ----DC---- C:\Windows\debug
2016-02-15 04:18:52 ----AC---- C:\Windows\system32\MRT.exe
2016-02-14 20:47:09 ----DC---- C:\Users\Ludmila\AppData\Roaming\Skype
2016-02-10 23:58:54 ----DC---- C:\Users\Ludmila\AppData\Roaming\Adobe
2016-02-10 22:40:28 ----HD---- C:\Program Files\WindowsApps
2016-02-10 22:33:37 ----DC---- C:\Windows\system32\catroot2
2016-02-04 17:49:24 ----HDC---- C:\OEM
2016-02-03 23:00:35 ----DC---- C:\Program Files\CCleaner
2016-02-03 23:00:19 ----DC---- C:\Windows\Minidump
2016-02-03 00:14:11 ----DC---- C:\Windows\SYSWOW64\sda
2016-02-03 00:14:11 ----D---- C:\Windows\system32\DriverStore
2016-02-03 00:14:07 ----DC---- C:\Program Files (x86)\Realtek
2016-02-02 03:37:41 ----AC---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-02 00:18:57 ----DC---- C:\Windows\Tasks
2016-02-01 01:22:36 ----DC---- C:\ProgramData\CanonIJPLM
2016-01-28 00:12:20 ----DC---- C:\ProgramData\McAfee
2016-01-25 10:43:21 ----DC---- C:\Users\Ludmila\AppData\Roaming\Abvent_Artlantis5
2016-01-23 01:58:24 ----DC---- C:\Program Files\Common Files
2016-01-20 13:43:03 ----HDC---- C:\Windows\ELAMBKUP

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-06-16 3793408]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-03 3986392]
R3 iwdbus;@oem4.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-05-06 27032]
R3 LMDriver;@oem14.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\Windows\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-02-20 116736]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2016-01-19 36968]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-01-06 13036232]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-06 19600]
R3 nvvad_WaveExtensible;@oem23.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-01-06 38032]
R3 Qcamain;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2014-08-26 2220544]
R3 RadioShim;@oem14.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\Windows\System32\drivers\RadioShim.sys [2013-07-18 14680]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-05-08 871640]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
R4 acedrv11;acedrv11; \??\C:\Windows\system32\drivers\acedrv11.sys []
S0 mfeelamk;McAfee Inc. mfeelamk; C:\Windows\system32\drivers\mfeelamk.sys [2015-09-23 82072]
S3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-08-26 47720]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
S3 dg_ssudbus;@oem15.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-05-06 38296]
S3 IntcDAud;@oem1.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-06-16 450520]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RSUSBVSTOR;@oem12.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys []
S3 ssudmdm;@oem17.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2015-11-17 1139744]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe [2014-08-22 305664]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2014-02-07 31192]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2016-01-14 2860760]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-06-16 315352]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
R2 Intel(R) ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2014-02-20 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-20 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-20 398296]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-12-30 455912]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2016-02-08 163592]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-06 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2016-01-06 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-24 934032]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-07-22 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-10-17 458984]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-10-17 449768]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-06-24 233216]
S2 0038041455776177mcinstcleanup;McAfee Application Installer Cleanup (0038041455776177); C:\Windows\TEMP\003804~1.EXE [2015-05-04 883024]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02 144200]
S2 MustangService_2015_10_10;MustangService DispalyName; C:\ProgramData\TempMoudleSet\MustangSer344.exe [2015-12-15 235776]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-06-16 279000]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2015-09-28 1357104]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-04-24 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02 144200]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-02-01 887232]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-13 146888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#3 Příspěvek od nobody »

# AdwCleaner v5.035 - Logfile created 19/02/2016 at 19:07:29
# Updated 18/02/2016 by Xplode
# Database : 2016-02-18.5 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Ludmila - LUDMILKA
# Running from : C:\Users\Ludmila\Desktop\adwcleaner_5.035.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : MustangService_2015_10_10

***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\pokki
[-] Folder Deleted : C:\ProgramData\TempMoudleSet
[-] Folder Deleted : C:\Users\Ludmila\AppData\Local\SweetLabs App Platform
[#] Folder Deleted : C:\Windows\SysNative\Tasks\SweetLabs App Platform

***** [ Files ] *****

[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\adawaretb.xml
[-] File Deleted : C:\Users\Ludmila\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Pokki Start Menu.lnk
[-] File Deleted : C:\Users\Ludmila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
[-] File Deleted : C:\Users\Ludmila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
[-] File Deleted : C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\searchplugins\mystartsearch.xml

***** [ DLLs ] *****


***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[-] Shortcut Disinfected : C:\Users\Ludmila\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : SweetLabs App Platform

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
[-] Key Deleted : HKCU\Software\Mozilla\Extends
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [deskCutv2@gmail.com]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}
[!] Key Not Deleted : HKCU\Software\Mozilla\Extends
[-] Key Deleted : HKCU\Software\SweetLabs App Platform
[-] Key Deleted : HKLM\SOFTWARE\ihpmserver
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\RayDld
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Search Protection]
[-] Key Deleted : HKCU\Software\Classes\pokki

***** [ Web browsers ] *****

[-] [C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\prefs.js] [Preference] Deleted : user_pref("browser.newtab.url", "hxxp://www.mystartsearch.com/newtab/?type=nt&t ... 1x50n4k91x");

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4131 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#5 Příspěvek od nobody »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ludmila at 2016-02-20 09:52:16
Microsoft Windows 8.1
System drive C: has 42 GB (34%) free of 121 GB
Total RAM: 12211 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:52:16, on 20. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Ludmila\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\Ludmila.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 33034BBAF3
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 33034BBAF3
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [SafeQClient] C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\RunOnce: [Application Restart #0] C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros - C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel® ME Service (Intel(R) ME Service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13624 bytes

======Listing Processes======





wininit.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 1018013310208
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 8970621a-f20f-4656-9ca1-224fb429d253 0
\??\C:\Windows\system32\conhost.exe 0x4
dashost.exe {83a42385-d4b8-47ce-95202b2c924d8745}

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\Ludmila\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-3497575666-2220848565-2583033622-1001 -c 388 -s 541 -g "C:\ProgramData\acer\CCD"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"

C:\Windows\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session

"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
taskhostex.exe
C:\Windows\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:\Program Files\Dolby Digital Plus\ddp.exe" -autostart
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Users\Ludmila\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe" -showminimized -checkautorun -peruser
"C:\Program Files (x86)\SafeQ\SafeQ_cli.exe"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
C:\Windows\splwow64.exe 8192
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\system32\igfxext.exe" -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe" task
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" auto
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"

"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ludmila\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\
1447241010_xpi

C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\searchplugins\
McSiteAdvisor.xml
so-v.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-10-31 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-10-31 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2016-01-18 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2016-01-18 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-06 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-01-06 2824504]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-26 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"AutoKMS"=C:\Windows\AutoKMS.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #0"=C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2015-11-17 522784]
"SafeQClient"=C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [2014-08-22 493056]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2015-09-24 41360]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2015-09-24 840592]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-10-06 597040]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-02-19 19:03:22 ----DC---- C:\AdwCleaner
2016-02-19 19:00:23 ----ASH---- C:\pagefile.sys
2016-02-19 16:29:51 ----DC---- C:\rsit
2016-02-19 16:29:51 ----DC---- C:\Program Files\trend micro
2016-02-19 15:47:51 ----DC---- C:\Users\Ludmila\AppData\Roaming\dvdcss
2016-02-19 14:03:19 ----DC---- C:\Users\Ludmila\AppData\Roaming\ProtectDisc
2016-02-19 14:03:10 ----DC---- C:\Program Files (x86)\Biathlon 2009 (Demo)
2016-02-19 13:30:12 ----DC---- C:\Users\Ludmila\AppData\Roaming\Milestone
2016-02-19 13:28:29 ----DC---- C:\Program Files (x86)\Milestone
2016-02-15 04:13:44 ----AC---- C:\Windows\system32\mshtml.dll
2016-02-15 04:13:43 ----AC---- C:\Windows\system32\iertutil.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\system32\urlmon.dll
2016-02-15 04:13:40 ----AC---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-15 04:13:39 ----AC---- C:\Windows\system32\ieframe.dll
2016-02-15 04:13:37 ----AC---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-13 14:09:22 ----DC---- C:\Program Files (x86)\Mozilla Firefox
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\invagent.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\generaltel.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\devinv.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\CompatTelRunner.exe
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\appraiser.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\aeinv.dll
2016-02-10 22:39:40 ----AC---- C:\Windows\system32\acmigration.dll
2016-02-10 22:39:38 ----AC---- C:\Windows\system32\shell32.dll
2016-02-10 22:39:37 ----AC---- C:\Windows\system32\twinui.dll
2016-02-10 22:39:36 ----AC---- C:\Windows\SYSWOW64\twinui.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\SYSWOW64\shell32.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\SYSWOW64\authui.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\system32\authui.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\system32\EncDec.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\system32\CPFilters.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\cfgbkend.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuwebv.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\WUSettingsProvider.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wudriver.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wucltux.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuaueng.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuauclt.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuapp.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuapi.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\mtxoci.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\cfgbkend.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\SYSWOW64\glcndFilter.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\system32\glcndFilter.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\msv1_0.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\lsasrv.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\kerberos.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 22:39:19 ----AC---- C:\Windows\SYSWOW64\certcli.dll
2016-02-10 22:39:19 ----AC---- C:\Windows\system32\dpapisrv.dll
2016-02-10 22:39:19 ----AC---- C:\Windows\system32\certcli.dll
2016-02-10 22:38:59 ----AC---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\WinTypes.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\WinSync.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\wincorlib.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\combase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\WinTypes.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\WinSync.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\ntdll.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\KernelBase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\combase.dll
2016-02-10 22:38:57 ----AC---- C:\Windows\system32\win32k.sys
2016-02-10 22:38:51 ----AC---- C:\Windows\system32\jscript9.dll
2016-02-10 22:38:50 ----AC---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\system32\wininet.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\system32\msfeeds.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\SYSWOW64\hlink.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\webcheck.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\hlink.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\actxprxy.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\system32\iedkcs32.dll
2016-02-10 22:38:46 ----AC---- C:\Windows\system32\inetcomm.dll
2016-02-10 22:38:46 ----AC---- C:\Windows\system32\ie4uinit.exe
2016-02-10 22:38:45 ----AC---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\SYSWOW64\inetcomm.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\system32\vbscript.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\system32\jscript.dll
2016-02-10 22:38:43 ----AC---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 22:38:43 ----AC---- C:\Windows\system32\ieapfltr.dll
2016-02-10 22:38:42 ----AC---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 22:38:28 ----AC---- C:\Windows\system32\rdpcorets.dll
2016-02-10 22:38:27 ----AC---- C:\Windows\system32\rdpudd.dll
2016-02-03 23:52:05 ----DC---- C:\Users\Ludmila\AppData\Roaming\Zoner
2016-02-03 00:14:08 ----AC---- C:\Windows\system32\drivers\RtsUer.sys

======List of files/folders modified in the last 1 month======

2016-02-20 09:49:00 ----DC---- C:\Windows\system32\Tasks
2016-02-20 09:48:59 ----DC---- C:\Windows\Temp
2016-02-20 09:48:55 ----DC---- C:\Windows\Prefetch
2016-02-20 09:48:50 ----SHDC---- C:\Windows\Installer
2016-02-20 09:45:59 ----DC---- C:\Windows\system32\sru
2016-02-19 21:53:30 ----DC---- C:\Windows\AppReadiness
2016-02-19 19:14:28 ----RDC---- C:\Windows\System32
2016-02-19 19:14:28 ----DC---- C:\Windows\Inf
2016-02-19 19:14:28 ----AC---- C:\Windows\system32\PerfStringBackup.INI
2016-02-19 19:11:54 ----DC---- C:\Windows\system32\wdi
2016-02-19 19:07:29 ----HDC---- C:\ProgramData
2016-02-19 19:00:23 ----DC---- C:\Program Files (x86)\McAfee
2016-02-19 18:58:36 ----RDC---- C:\Program Files
2016-02-19 15:59:30 ----DC---- C:\Users\Ludmila\AppData\Roaming\vlc
2016-02-19 14:34:25 ----RDC---- C:\Program Files (x86)
2016-02-19 14:34:25 ----DC---- C:\Windows\system32\drivers
2016-02-19 14:02:51 ----HDC---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-19 13:28:27 ----SHD---- C:\System Volume Information
2016-02-17 21:12:24 ----DC---- C:\Windows\system32\config
2016-02-16 17:42:05 ----DC---- C:\Windows\SysWOW64
2016-02-15 14:29:24 ----DC---- C:\Windows\Microsoft.NET
2016-02-15 14:29:19 ----RSDC---- C:\Windows\assembly
2016-02-15 08:28:55 ----D---- C:\Windows\WinSxS
2016-02-15 08:27:24 ----DC---- C:\Windows
2016-02-15 08:27:24 ----DC---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-15 08:26:56 ----RD---- C:\Windows\ToastData
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\sk-SK
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\en-US
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\cs-CZ
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\sk-SK
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\en-US
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\cs-CZ
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\appraiser
2016-02-15 08:26:56 ----DC---- C:\Windows\apppatch
2016-02-15 08:26:55 ----DC---- C:\Windows\system32\wbem
2016-02-15 08:26:55 ----DC---- C:\Program Files\Windows Journal
2016-02-15 08:26:55 ----DC---- C:\Program Files\Internet Explorer
2016-02-15 08:26:55 ----DC---- C:\Program Files (x86)\Internet Explorer
2016-02-15 04:43:06 ----DC---- C:\Windows\CbsTemp
2016-02-15 04:40:55 ----DC---- C:\ProgramData\Microsoft Help
2016-02-15 04:39:20 ----AC---- C:\Windows\win.ini
2016-02-15 04:26:01 ----DC---- C:\Windows\system32\MRT
2016-02-15 04:18:53 ----DC---- C:\Windows\debug
2016-02-15 04:18:52 ----AC---- C:\Windows\system32\MRT.exe
2016-02-14 20:47:09 ----DC---- C:\Users\Ludmila\AppData\Roaming\Skype
2016-02-10 23:58:54 ----DC---- C:\Users\Ludmila\AppData\Roaming\Adobe
2016-02-10 22:40:28 ----HD---- C:\Program Files\WindowsApps
2016-02-10 22:33:37 ----DC---- C:\Windows\system32\catroot2
2016-02-04 17:49:24 ----HDC---- C:\OEM
2016-02-03 23:00:19 ----DC---- C:\Windows\Minidump
2016-02-03 00:14:11 ----DC---- C:\Windows\SYSWOW64\sda
2016-02-03 00:14:11 ----D---- C:\Windows\system32\DriverStore
2016-02-03 00:14:07 ----DC---- C:\Program Files (x86)\Realtek
2016-02-02 03:37:41 ----AC---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-02 00:18:57 ----DC---- C:\Windows\Tasks
2016-02-01 01:22:36 ----DC---- C:\ProgramData\CanonIJPLM
2016-01-28 00:12:20 ----DC---- C:\ProgramData\McAfee
2016-01-25 10:43:21 ----DC---- C:\Users\Ludmila\AppData\Roaming\Abvent_Artlantis5
2016-01-23 01:58:24 ----DC---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-06-16 3793408]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-03 3986392]
R3 iwdbus;@oem4.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-05-06 27032]
R3 LMDriver;@oem14.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\Windows\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-02-20 116736]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2016-01-19 36968]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-01-06 13036232]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-06 19600]
R3 nvvad_WaveExtensible;@oem23.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-01-06 38032]
R3 Qcamain;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2014-08-26 2220544]
R3 RadioShim;@oem14.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\Windows\System32\drivers\RadioShim.sys [2013-07-18 14680]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-05-08 871640]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\Windows\system32\drivers\mfeelamk.sys [2015-09-23 82072]
S3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-08-26 47720]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
S3 dg_ssudbus;@oem15.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-05-06 38296]
S3 IntcDAud;@oem1.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-06-16 450520]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RSUSBVSTOR;@oem12.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys []
S3 ssudmdm;@oem17.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2015-11-17 1139744]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe [2014-08-22 305664]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2014-02-07 31192]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2016-01-14 2860760]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-06-16 315352]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
R2 Intel(R) ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2014-02-20 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-20 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-20 398296]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-12-30 455912]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2016-02-11 158952]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-06 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2016-01-06 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-24 934032]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-07-22 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-10-17 458984]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-10-17 449768]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-06-24 233216]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-06-16 279000]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2015-09-28 1357104]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-04-24 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02 144200]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-02-01 887232]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-13 146888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi
C:\Windows\AutoKMS.exe

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AutoKMS"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #0"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#7 Příspěvek od nobody »

All processes killed
========== FILES ==========
File/Folder C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe not found.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\modules folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\defaults\preferences folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\defaults folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\skin folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\zh-TW folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\zh-CN folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\vi folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\tr folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\ru-MO folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\ru folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\pt-BR folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\pl folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\it-CH folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\it folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\fr-LU folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\fr-CH folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\fr-CA folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\fr-BE folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\fr folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\es-419 folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\es folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\en-US folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale\en folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\locale folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content\js\pack folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content\js\module folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content\js\lib folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content\js folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content\include\tools folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content\include folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome\content folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi\chrome folder moved successfully.
C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\extensions\1447241010_xpi folder moved successfully.
File/Folder C:\Windows\AutoKMS.exe not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AutoKMS not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Application Restart #0 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Ludmila
->Temp folder emptied: 1962934749 bytes
->Temporary Internet Files folder emptied: 32399712 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 368469754 bytes
->Flash cache emptied: 2004 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 26382465 bytes
RecycleBin emptied: 38029420050 bytes

Total Files Cleaned = 38 547,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Ludmila
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 02202016_163305

Files moved on Reboot...
File C:\Users\Ludmila\AppData\Local\Temp\~PI1063.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI1969.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI2499.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI3CA.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI5FC8.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI60A5.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI64E7.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI64E8.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI6A9F.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI6F98.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI6FB.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI7203.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PI74DB.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PIC4BE.tmp not found!
File C:\Users\Ludmila\AppData\Local\Temp\~PIDED2.tmp not found!
C:\Users\Ludmila\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.

Registry entries deleted on Reboot...

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#8 Příspěvek od Rudy »

Poprosím o ještě jeden RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#9 Příspěvek od nobody »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ludmila at 2016-02-20 21:07:53
Microsoft Windows 8.1
System drive C: has 50 GB (42%) free of 121 GB
Total RAM: 12211 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:07:56, on 20. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
C:\Users\Ludmila\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files\trend micro\Ludmila.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 33034BBAF3
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 33034BBAF3
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [SafeQClient] C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKUS\S-1-5-18\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros - C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel® ME Service (Intel(R) ME Service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12442 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 195833018528
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {e7f8f3d9-ae0e-49b3-ab8dc544ed207233}
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 8970621a-f20f-4656-9ca1-224fb429d253 0
\??\C:\Windows\system32\conhost.exe 0x4

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
taskeng.exe {76F4FD29-B209-4DCD-968A-B649BAF178CB}
taskhostex.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\Explorer.EXE
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Dolby Digital Plus\ddp.exe" -autostart
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\SafeQ\SafeQ_cli.exe"
"C:\Users\Ludmila\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe" -showminimized -checkautorun -peruser
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
C:\Windows\splwow64.exe 8192
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\system32\igfxext.exe" -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\Ludmila\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-3497575666-2220848565-2583033622-1001 -c 456 -s 541 -g "C:\ProgramData\acer\CCD"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe" task
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"
"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"

"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ludmila\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\p25wtr7j.default\searchplugins\
McSiteAdvisor.xml
so-v.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-10-31 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-10-31 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2016-01-18 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2016-01-18 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24 343456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-06 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-01-06 2824504]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-26 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]
"AutoKMS"=C:\Windows\AutoKMS.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2015-11-17 522784]
"SafeQClient"=C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [2014-08-22 493056]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2015-09-24 41360]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2015-09-24 840592]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-02-20 16:33:05 ----DC---- C:\_OTM
2016-02-19 19:03:22 ----DC---- C:\AdwCleaner
2016-02-19 19:00:23 ----ASH---- C:\pagefile.sys
2016-02-19 16:29:51 ----DC---- C:\rsit
2016-02-19 16:29:51 ----DC---- C:\Program Files\trend micro
2016-02-19 15:47:51 ----DC---- C:\Users\Ludmila\AppData\Roaming\dvdcss
2016-02-19 14:03:19 ----DC---- C:\Users\Ludmila\AppData\Roaming\ProtectDisc
2016-02-19 14:03:10 ----DC---- C:\Program Files (x86)\Biathlon 2009 (Demo)
2016-02-19 13:30:12 ----DC---- C:\Users\Ludmila\AppData\Roaming\Milestone
2016-02-19 13:28:29 ----DC---- C:\Program Files (x86)\Milestone
2016-02-15 04:13:44 ----AC---- C:\Windows\system32\mshtml.dll
2016-02-15 04:13:43 ----AC---- C:\Windows\system32\iertutil.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-15 04:13:42 ----AC---- C:\Windows\system32\urlmon.dll
2016-02-15 04:13:40 ----AC---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-15 04:13:39 ----AC---- C:\Windows\system32\ieframe.dll
2016-02-15 04:13:37 ----AC---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-13 14:09:22 ----DC---- C:\Program Files (x86)\Mozilla Firefox
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\invagent.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\generaltel.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\devinv.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\CompatTelRunner.exe
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\appraiser.dll
2016-02-10 22:39:41 ----AC---- C:\Windows\system32\aeinv.dll
2016-02-10 22:39:40 ----AC---- C:\Windows\system32\acmigration.dll
2016-02-10 22:39:38 ----AC---- C:\Windows\system32\shell32.dll
2016-02-10 22:39:37 ----AC---- C:\Windows\system32\twinui.dll
2016-02-10 22:39:36 ----AC---- C:\Windows\SYSWOW64\twinui.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\SYSWOW64\shell32.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\SYSWOW64\authui.dll
2016-02-10 22:39:34 ----AC---- C:\Windows\system32\authui.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\system32\EncDec.dll
2016-02-10 22:39:23 ----AC---- C:\Windows\system32\CPFilters.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\SYSWOW64\cfgbkend.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuwebv.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\WUSettingsProvider.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wudriver.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wucltux.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuaueng.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuauclt.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuapp.exe
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\wuapi.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\mtxoci.dll
2016-02-10 22:39:22 ----AC---- C:\Windows\system32\cfgbkend.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\SYSWOW64\glcndFilter.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-10 22:39:21 ----AC---- C:\Windows\system32\glcndFilter.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\msv1_0.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\lsasrv.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\kerberos.dll
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 22:39:20 ----AC---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 22:39:19 ----AC---- C:\Windows\SYSWOW64\certcli.dll
2016-02-10 22:39:19 ----AC---- C:\Windows\system32\dpapisrv.dll
2016-02-10 22:39:19 ----AC---- C:\Windows\system32\certcli.dll
2016-02-10 22:38:59 ----AC---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\WinTypes.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\WinSync.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\wincorlib.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\SYSWOW64\combase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\WinTypes.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\WinSync.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\ntdll.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\KernelBase.dll
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 22:38:58 ----AC---- C:\Windows\system32\combase.dll
2016-02-10 22:38:57 ----AC---- C:\Windows\system32\win32k.sys
2016-02-10 22:38:51 ----AC---- C:\Windows\system32\jscript9.dll
2016-02-10 22:38:50 ----AC---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\system32\wininet.dll
2016-02-10 22:38:49 ----AC---- C:\Windows\system32\msfeeds.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\SYSWOW64\hlink.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\webcheck.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\hlink.dll
2016-02-10 22:38:48 ----AC---- C:\Windows\system32\actxprxy.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 22:38:47 ----AC---- C:\Windows\system32\iedkcs32.dll
2016-02-10 22:38:46 ----AC---- C:\Windows\system32\inetcomm.dll
2016-02-10 22:38:46 ----AC---- C:\Windows\system32\ie4uinit.exe
2016-02-10 22:38:45 ----AC---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\SYSWOW64\inetcomm.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\system32\vbscript.dll
2016-02-10 22:38:45 ----AC---- C:\Windows\system32\jscript.dll
2016-02-10 22:38:43 ----AC---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 22:38:43 ----AC---- C:\Windows\system32\ieapfltr.dll
2016-02-10 22:38:42 ----AC---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 22:38:28 ----AC---- C:\Windows\system32\rdpcorets.dll
2016-02-10 22:38:27 ----AC---- C:\Windows\system32\rdpudd.dll
2016-02-03 23:52:05 ----DC---- C:\Users\Ludmila\AppData\Roaming\Zoner
2016-02-03 00:14:08 ----AC---- C:\Windows\system32\drivers\RtsUer.sys

======List of files/folders modified in the last 1 month======

2016-02-20 21:00:00 ----DC---- C:\Windows\system32\sru
2016-02-20 16:47:01 ----DC---- C:\Windows\Temp
2016-02-20 16:46:58 ----DC---- C:\Windows\AppReadiness
2016-02-20 16:40:38 ----RDC---- C:\Windows\System32
2016-02-20 16:40:38 ----DC---- C:\Windows\Inf
2016-02-20 16:40:38 ----AC---- C:\Windows\system32\PerfStringBackup.INI
2016-02-20 16:39:05 ----DC---- C:\Windows\system32\Tasks
2016-02-20 16:39:00 ----DC---- C:\Windows\Prefetch
2016-02-20 16:38:55 ----SHDC---- C:\Windows\Installer
2016-02-20 16:33:05 ----DC---- C:\Windows\Tasks
2016-02-19 19:11:54 ----DC---- C:\Windows\system32\wdi
2016-02-19 19:07:29 ----HDC---- C:\ProgramData
2016-02-19 19:00:23 ----DC---- C:\Program Files (x86)\McAfee
2016-02-19 18:58:36 ----RDC---- C:\Program Files
2016-02-19 15:59:30 ----DC---- C:\Users\Ludmila\AppData\Roaming\vlc
2016-02-19 14:34:25 ----RDC---- C:\Program Files (x86)
2016-02-19 14:34:25 ----DC---- C:\Windows\system32\drivers
2016-02-19 14:02:51 ----HDC---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-19 13:28:27 ----SHD---- C:\System Volume Information
2016-02-17 21:12:24 ----DC---- C:\Windows\system32\config
2016-02-16 17:42:05 ----DC---- C:\Windows\SysWOW64
2016-02-15 14:29:24 ----DC---- C:\Windows\Microsoft.NET
2016-02-15 14:29:19 ----RSDC---- C:\Windows\assembly
2016-02-15 08:28:55 ----D---- C:\Windows\WinSxS
2016-02-15 08:27:24 ----DC---- C:\Windows
2016-02-15 08:27:24 ----DC---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-15 08:26:56 ----RD---- C:\Windows\ToastData
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\sk-SK
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\en-US
2016-02-15 08:26:56 ----DC---- C:\Windows\SYSWOW64\cs-CZ
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\sk-SK
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\en-US
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\cs-CZ
2016-02-15 08:26:56 ----DC---- C:\Windows\system32\appraiser
2016-02-15 08:26:56 ----DC---- C:\Windows\apppatch
2016-02-15 08:26:55 ----DC---- C:\Windows\system32\wbem
2016-02-15 08:26:55 ----DC---- C:\Program Files\Windows Journal
2016-02-15 08:26:55 ----DC---- C:\Program Files\Internet Explorer
2016-02-15 08:26:55 ----DC---- C:\Program Files (x86)\Internet Explorer
2016-02-15 04:43:06 ----DC---- C:\Windows\CbsTemp
2016-02-15 04:40:55 ----DC---- C:\ProgramData\Microsoft Help
2016-02-15 04:39:20 ----AC---- C:\Windows\win.ini
2016-02-15 04:26:01 ----DC---- C:\Windows\system32\MRT
2016-02-15 04:18:53 ----DC---- C:\Windows\debug
2016-02-15 04:18:52 ----AC---- C:\Windows\system32\MRT.exe
2016-02-14 20:47:09 ----DC---- C:\Users\Ludmila\AppData\Roaming\Skype
2016-02-10 23:58:54 ----DC---- C:\Users\Ludmila\AppData\Roaming\Adobe
2016-02-10 22:40:28 ----HD---- C:\Program Files\WindowsApps
2016-02-10 22:33:37 ----DC---- C:\Windows\system32\catroot2
2016-02-04 17:49:24 ----HDC---- C:\OEM
2016-02-03 23:00:19 ----DC---- C:\Windows\Minidump
2016-02-03 00:14:11 ----DC---- C:\Windows\SYSWOW64\sda
2016-02-03 00:14:11 ----D---- C:\Windows\system32\DriverStore
2016-02-03 00:14:07 ----DC---- C:\Program Files (x86)\Realtek
2016-02-02 03:37:41 ----AC---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-01 01:22:36 ----DC---- C:\ProgramData\CanonIJPLM
2016-01-28 00:12:20 ----DC---- C:\ProgramData\McAfee
2016-01-25 10:43:21 ----DC---- C:\Users\Ludmila\AppData\Roaming\Abvent_Artlantis5
2016-01-23 01:58:24 ----DC---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-06-16 3793408]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-03 3986392]
R3 iwdbus;@oem4.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-05-06 27032]
R3 LMDriver;@oem14.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\Windows\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-02-20 116736]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2016-01-19 36968]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-01-06 13036232]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-06 19600]
R3 nvvad_WaveExtensible;@oem23.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-01-06 38032]
R3 Qcamain;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\Qcamainx64.sys [2014-08-26 2220544]
R3 RadioShim;@oem14.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\Windows\System32\drivers\RadioShim.sys [2013-07-18 14680]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-05-08 871640]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\Windows\system32\drivers\mfeelamk.sys [2015-09-23 82072]
S3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-08-26 47720]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
S3 dg_ssudbus;@oem15.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-05-06 38296]
S3 IntcDAud;@oem1.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-06-16 450520]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RSUSBVSTOR;@oem12.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys []
S3 ssudmdm;@oem17.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2015-11-17 1139744]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe [2014-08-22 305664]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2014-02-07 31192]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2016-01-14 2860760]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-06-16 315352]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
R2 Intel(R) ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2014-02-20 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-20 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-20 398296]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-12-30 455912]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2016-02-11 158952]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-06 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2016-01-06 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-24 934032]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-07-22 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-10-17 458984]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-10-17 449768]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-06-24 233216]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-06-16 279000]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2015-09-28 1357104]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-04-24 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-02 144200]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-02-01 887232]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-13 146888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#10 Příspěvek od Rudy »

Log je již OK. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#11 Příspěvek od nobody »

No před tím posledním spuštěním OTM už mi na netu žádné stránky sami nenajížděly a po tom posledním vyčištění se mi sekl celý počítač a spustilo se mi obnovení systému .... smazaly se mi všechny potřebné programy co jsem měla

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#12 Příspěvek od Rudy »

Nebylo mazáno nic potřebného, pouze AdWary a zbytečnosti. Takže nevím, co se dělo. Co konkrétně vám nyní nefunguje?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#13 Příspěvek od nobody »

Už mi funguje vše, jen jsem si musela znovu nainstalovat všechny školní programy ..... ale poprosila bych ještě radši o kontrolu :)

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Kontrola notebooku

#14 Příspěvek od Rudy »

OK. Dejte tedy nový RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

nobody
Návštěvník
Návštěvník
Příspěvky: 49
Registrován: 17 úno 2015 20:04

Re: Kontrola notebooku

#15 Příspěvek od nobody »

Děkuji :) Tady to je:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ludmila at 2016-02-21 11:53:18
Microsoft Windows 8.1
System drive C: has 45 GB (37%) free of 121 GB
Total RAM: 12211 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:18, on 21. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Ludmila\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Ludmila.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Ludmila\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Ludmila\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros - C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel® ME Service (Intel(R) ME Service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee OOBE Service2 (McOobeSv2) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\WINDOWS\SysWOW64\ssins.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14047 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Windows\system32\nvvsvc.exe"
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 352736348288
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
"C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\Windows\system32\mfevtps.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\WINDOWS\SysWOW64\ssins.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 8970621a-f20f-4656-9ca1-224fb429d253 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
taskhostex.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe" /LOGON
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
dashost.exe {a04ac04e-35ff-44d5-997c31022eeb4a5c}
"C:\Program Files\Dolby Digital Plus\ddp.exe" -autostart
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
szndesktop.exe default start
"C:\Users\Ludmila\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui /runkey
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe"
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\system32\igfxext.exe" -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe" --type=renderer --disable-breakpad --disable-desktop-notifications --disable-logging --disable-speech-input --lang=en-US --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/13/OneClickSignIn/BlueOnWhite/Prefetch/ContentPrefetchPrefetchOn/Prerender/PrerenderControl/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V1/SpdyCwnd/cwndMin10/SpeculativePrefetchingLearning/SpeculativePrefetchingLearningEnabled/Test0PercentDefault/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warm_socket/ --noerrdialogs --disable-client-side-phishing-detection --disable-bundled-ppapi-flash --channel="6708.1.1694824186\4962594" /prefetch:3
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
"C:\Users\Ludmila\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe"
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\Ludmila\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-3497575666-2220848565-2583033622-1001 -c 464 -s 541 -g "C:\ProgramData\acer\CCD"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"
"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"
"C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe" {39b4cd0f-3131-441d-8202-cfb3fbcbaeef} /pid=6408
"C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe" {89d04569-9cff-4ac1-abb8-01757f2dd63c} /pid=6408
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe" {9cf019bb-f60f-413d-a1b5-aeb0040a26cc} /pid=6408
taskhost.exe $(Arg0)

"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ludmila\Downloads\RSITx64(1).exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\g3h8nc6w.default-1456023389873

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~2\mcafee\msc\npmcsnffpl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~1\mcafee\msc\npmcsnffpl64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Ludmila\AppData\Roaming\Mozilla\Firefox\Profiles\g3h8nc6w.default-1456023389873\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05 339872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05 339872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-30 2199840]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-04-30 1225920]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-26 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]
"cz.seznam.software.autoupdate"=C:\Users\Ludmila\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Ludmila\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"mcpltui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2014-01-28 537992]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-17 1085656]
""= []
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2011-09-05 36760]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2011-09-05 2904984]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-21 11:52:50 ----DC---- C:\rsit
2016-02-21 11:52:50 ----D---- C:\Program Files\trend micro
2016-02-21 11:31:25 ----SHDC---- C:\Config.Msi
2016-02-21 09:37:01 ----DC---- C:\Windows.old
2016-02-21 09:32:29 ----DC---- C:\$WINDOWS.~BT
2016-02-21 09:31:33 ----HDC---- C:\$SysReset
2016-02-21 04:39:09 ----A---- C:\WINDOWS\AutoKMS.ini
2016-02-21 04:36:30 ----D---- C:\Program Files (x86)\Seznam.cz
2016-02-21 04:36:01 ----D---- C:\Users\Ludmila\AppData\Roaming\Seznam.cz
2016-02-21 04:35:10 ----D---- C:\Program Files\Common Files\DESIGNER
2016-02-21 04:35:04 ----D---- C:\WINDOWS\PCHEALTH
2016-02-21 04:32:21 ----D---- C:\Program Files\Microsoft Analysis Services
2016-02-21 04:32:21 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2016-02-21 04:32:19 ----D---- C:\Program Files\Microsoft Office
2016-02-21 04:32:18 ----D---- C:\ProgramData\Microsoft Help
2016-02-21 04:02:07 ----D---- C:\Program Files (x86)\VideoLAN
2016-02-21 03:55:58 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-21 03:55:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-02-21 03:50:25 ----D---- C:\Users\Ludmila\AppData\Roaming\Abvent_Artlantis5
2016-02-21 03:48:11 ----D---- C:\ProgramData\Abvent
2016-02-21 03:46:41 ----D---- C:\Program Files\Artlantis Studio 5
2016-02-21 03:16:25 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-21 03:16:25 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-21 02:53:49 ----D---- C:\WINDOWS\system32\MRT
2016-02-21 02:53:48 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-21 02:49:52 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-21 02:49:52 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-02-21 02:49:51 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-21 02:49:51 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-21 02:49:51 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-21 02:49:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-21 02:49:51 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-21 02:49:50 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-02-21 02:44:07 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-02-21 02:44:04 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-02-21 02:44:04 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-21 02:44:04 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-02-21 02:44:04 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-21 02:43:02 ----A---- C:\WINDOWS\SYSWOW64\ssinstall-uninstall.bat
2016-02-21 02:43:00 ----A---- C:\WINDOWS\SYSWOW64\ssins.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\WerFault.exe
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\wer.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\Faultrep.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\EncDump.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\ci.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-21 02:41:59 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-02-21 02:41:54 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-02-21 02:41:54 ----A---- C:\WINDOWS\system32\qedit.dll
2016-02-21 02:41:52 ----A---- C:\WINDOWS\SYSWOW64\wshrm.dll
2016-02-21 02:41:52 ----A---- C:\WINDOWS\system32\wshrm.dll
2016-02-21 02:41:52 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2016-02-21 02:41:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-02-21 02:41:51 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2016-02-21 02:41:51 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-02-21 02:41:51 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2016-02-21 02:41:44 ----A---- C:\WINDOWS\system32\poqexec.exe
2016-02-21 02:41:43 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2016-02-21 02:41:34 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-02-21 02:41:34 ----A---- C:\WINDOWS\system32\msi.dll
2016-02-21 02:41:34 ----A---- C:\WINDOWS\system32\appinfo.dll
2016-02-21 02:41:33 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2016-02-21 02:41:33 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2016-02-21 02:41:33 ----A---- C:\WINDOWS\system32\msihnd.dll
2016-02-21 02:41:33 ----A---- C:\WINDOWS\system32\msiexec.exe
2016-02-21 02:41:33 ----A---- C:\WINDOWS\system32\consent.exe
2016-02-21 02:41:28 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-02-21 02:41:27 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2016-02-21 02:41:27 ----A---- C:\WINDOWS\system32\osk.exe
2016-02-21 02:41:25 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-21 02:41:25 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-21 02:41:23 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\quartz.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-02-21 02:41:21 ----A---- C:\WINDOWS\system32\evr.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\ksuser.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\SysFxUI.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\mfps.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\ksuser.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\devenum.dll
2016-02-21 02:41:20 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2016-02-21 02:41:07 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2016-02-21 02:41:07 ----A---- C:\WINDOWS\system32\scesrv.dll
2016-02-21 02:41:03 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-21 02:41:03 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2016-02-21 02:41:03 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-02-21 02:41:02 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-21 02:40:48 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-02-21 02:40:48 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-02-21 02:40:48 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-02-21 02:40:48 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-02-21 02:40:47 ----A---- C:\WINDOWS\system32\win32k.sys
2016-02-21 02:40:15 ----A---- C:\WINDOWS\SYSWOW64\atlthunk.dll
2016-02-21 02:40:15 ----A---- C:\WINDOWS\system32\sysmain.dll
2016-02-21 02:40:15 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2016-02-21 02:40:15 ----A---- C:\WINDOWS\system32\atlthunk.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\schannel.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\msaudite.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\certcli.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-02-21 02:40:04 ----A---- C:\WINDOWS\system32\adtschema.dll
2016-02-21 02:39:50 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2016-02-21 02:39:49 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-02-21 02:39:49 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2016-02-21 02:39:49 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-02-21 02:39:49 ----A---- C:\WINDOWS\system32\catsrvut.dll
2016-02-21 02:39:42 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2016-02-21 02:39:34 ----D---- C:\Users\Ludmila\AppData\Roaming\Skype
2016-02-21 02:39:27 ----RD---- C:\Program Files (x86)\Skype
2016-02-21 02:39:24 ----D---- C:\ProgramData\Skype
2016-02-21 02:35:18 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-02-21 02:35:18 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-02-21 02:35:18 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-02-21 02:35:18 ----A---- C:\WINDOWS\system32\user32.dll
2016-02-21 02:35:18 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-02-21 02:35:18 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-02-21 02:35:18 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-02-21 02:34:47 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-02-21 02:34:47 ----A---- C:\WINDOWS\system32\localspl.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\printui.exe
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\SYSWOW64\compstui.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\puiobj.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\puiapi.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\prnntfy.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\printui.exe
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\findnetprinters.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2016-02-21 02:34:46 ----A---- C:\WINDOWS\system32\compstui.dll
2016-02-21 02:30:40 ----D---- C:\Users\Ludmila\AppData\Roaming\SketchUp
2016-02-21 02:28:21 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-02-21 02:28:21 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\typeperf.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\relog.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\logman.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\SYSWOW64\diskperf.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\typeperf.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\tracerpt.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\tdh.dll
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\sechost.dll
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\relog.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\logman.exe
2016-02-21 02:28:18 ----A---- C:\WINDOWS\system32\diskperf.exe
2016-02-21 02:28:15 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-21 02:28:15 ----A---- C:\WINDOWS\system32\winresume.exe
2016-02-21 02:28:15 ----A---- C:\WINDOWS\system32\winload.exe
2016-02-21 02:28:15 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\wow32.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\user.exe
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\setup16.exe
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\instnm.exe
2016-02-21 02:28:14 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\wow64.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\wincorlib.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-21 02:28:14 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-21 02:28:09 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2016-02-21 02:28:09 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2016-02-21 02:28:09 ----A---- C:\WINDOWS\system32\WebClnt.dll
2016-02-21 02:28:09 ----A---- C:\WINDOWS\system32\davclnt.dll
2016-02-21 02:28:08 ----A---- C:\WINDOWS\system32\csrsrv.dll
2016-02-21 02:28:08 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-02-21 02:28:07 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-02-21 02:28:07 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-02-21 02:28:07 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-21 02:28:07 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-02-21 02:28:07 ----A---- C:\WINDOWS\system32\BdeUISrv.exe
2016-02-21 02:28:07 ----A---- C:\WINDOWS\system32\bdesvc.dll
2016-02-21 02:28:06 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2016-02-21 02:28:06 ----A---- C:\WINDOWS\system32\packager.dll
2016-02-21 02:27:28 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2016-02-21 02:27:28 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-02-21 02:27:28 ----A---- C:\WINDOWS\system32\oleaut32.dll
2016-02-21 02:27:28 ----A---- C:\WINDOWS\system32\authui.dll
2016-02-21 02:27:22 ----A---- C:\WINDOWS\SYSWOW64\InkEd.dll
2016-02-21 02:27:22 ----A---- C:\WINDOWS\system32\jnwmon.dll
2016-02-21 02:27:22 ----A---- C:\WINDOWS\system32\InkEd.dll
2016-02-21 02:27:09 ----A---- C:\WINDOWS\system32\workerdd.dll
2016-02-21 02:27:09 ----A---- C:\WINDOWS\system32\lsm.dll
2016-02-21 02:27:04 ----A---- C:\WINDOWS\system32\ubpm.dll
2016-02-21 02:26:57 ----A---- C:\WINDOWS\system32\services.exe
2016-02-21 02:26:55 ----D---- C:\ProgramData\SketchUp
2016-02-21 02:26:55 ----D---- C:\Program Files (x86)\SketchUp
2016-02-21 02:26:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-02-21 02:26:54 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-02-21 02:26:54 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-02-21 02:26:54 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-02-21 02:26:54 ----A---- C:\WINDOWS\system32\shacct.dll
2016-02-21 02:26:54 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-02-21 02:26:49 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-02-21 02:26:49 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-02-21 02:26:47 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2016-02-21 02:26:47 ----A---- C:\WINDOWS\system32\rastls.dll
2016-02-21 02:26:37 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2016-02-21 02:26:37 ----A---- C:\WINDOWS\system32\pku2u.dll
2016-02-21 02:26:34 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-02-21 02:26:34 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2016-02-21 02:26:34 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2016-02-21 02:26:34 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-02-21 02:26:32 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-02-21 02:26:32 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-02-21 02:26:32 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-02-21 02:26:32 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-02-21 02:21:29 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2016-02-21 02:21:29 ----A---- C:\WINDOWS\system32\comctl32.dll
2016-02-21 02:21:28 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2016-02-21 02:21:28 ----A---- C:\WINDOWS\system32\notepad.exe
2016-02-21 02:21:28 ----A---- C:\WINDOWS\notepad.exe
2016-02-21 02:21:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-02-21 02:21:27 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\rsaenh.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\hal.dll
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-02-21 02:21:26 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\SYSWOW64\WinSync.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\system32\WinSync.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\system32\nlasvc.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\system32\nlaapi.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\system32\ncsi.dll
2016-02-21 02:21:15 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-02-21 02:21:14 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2016-02-21 02:21:14 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-02-21 02:21:14 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-02-21 02:21:13 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-02-21 02:21:13 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2016-02-21 02:21:13 ----A---- C:\WINDOWS\system32\occache.dll
2016-02-21 02:21:13 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-02-21 02:21:13 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-02-21 02:21:13 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-02-21 02:21:12 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-21 02:21:12 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-21 02:21:12 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-02-21 02:21:12 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-02-21 02:21:12 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2016-02-21 02:21:11 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-21 02:21:11 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-02-21 02:21:11 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2016-02-21 02:21:11 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-21 02:21:11 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\system32\jscript.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\system32\ieui.dll
2016-02-21 02:21:10 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\wextract.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\url.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\pngfilt.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\msrating.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\mshta.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\licmgr10.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\inseng.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\imgutil.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\iexpress.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\iesysprep.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\iesetup.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\iernonce.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2016-02-21 02:21:09 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-21 02:20:24 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-02-21 02:20:24 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-02-21 02:20:24 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-02-21 02:20:24 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-02-21 02:20:21 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2016-02-21 02:20:21 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2016-02-21 02:20:21 ----A---- C:\WINDOWS\system32\taskeng.exe
2016-02-21 02:20:21 ----A---- C:\WINDOWS\system32\schtasks.exe
2016-02-21 02:20:21 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-02-21 02:20:19 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2016-02-21 02:20:19 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-02-21 02:20:19 ----A---- C:\WINDOWS\system32\appidsvc.dll
2016-02-21 02:20:19 ----A---- C:\WINDOWS\system32\appidpolicyconverter.exe
2016-02-21 02:20:19 ----A---- C:\WINDOWS\system32\appidcertstorecheck.exe
2016-02-21 02:20:19 ----A---- C:\WINDOWS\system32\appidapi.dll
2016-02-21 02:20:18 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2016-02-21 02:20:18 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2016-02-21 02:20:18 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-02-21 02:20:18 ----A---- C:\WINDOWS\system32\tsgqec.dll
2016-02-21 02:20:18 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2016-02-21 02:20:18 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-02-21 02:19:29 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-02-21 02:19:29 ----A---- C:\WINDOWS\system32\ole32.dll
2016-02-21 02:19:28 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2016-02-21 02:19:28 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-02-21 02:19:27 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-02-21 02:19:27 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-02-21 02:19:26 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2016-02-21 02:19:26 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2016-02-21 02:19:26 ----A---- C:\WINDOWS\system32\lpk.dll
2016-02-21 02:19:26 ----A---- C:\WINDOWS\system32\dciman32.dll
2016-02-21 02:19:20 ----A---- C:\WINDOWS\system32\tzsync.exe
2016-02-21 02:19:18 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2016-02-21 02:19:18 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-02-21 02:19:18 ----A---- C:\WINDOWS\system32\clfsw32.dll
2016-02-21 02:19:17 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2016-02-21 02:19:17 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-02-21 02:19:17 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-02-21 02:19:17 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2016-02-21 02:14:57 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2016-02-21 02:14:57 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wuwebv.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wups2.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wups.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wudriver.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wucltux.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wuapp.exe
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wuaext.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2016-02-21 02:14:57 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-02-21 02:14:55 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-02-21 02:14:55 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2016-02-21 02:14:55 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-02-21 02:14:55 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-02-21 02:14:55 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2016-02-21 02:14:55 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2016-02-21 02:14:55 ----A---- C:\WINDOWS\system32\BFE.DLL
2016-02-21 02:14:51 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-02-21 02:14:51 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-02-21 02:14:51 ----A---- C:\WINDOWS\system32\msctf.dll
2016-02-21 02:14:51 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-02-21 02:08:17 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-02-21 02:08:17 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-02-21 02:04:37 ----D---- C:\Users\Ludmila\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2016-02-21 02:01:26 ----D---- C:\Users\Ludmila\AppData\Roaming\PACE Anti-Piracy
2016-02-21 02:01:26 ----D---- C:\ProgramData\PACE Anti-Piracy
2016-02-21 02:01:25 ----D---- C:\Users\Ludmila\AppData\Roaming\NVIDIA
2016-02-21 01:40:08 ----D---- C:\ProgramData\ALM
2016-02-21 01:31:20 ----N---- C:\WINDOWS\system32\drivers\PxHlpa64.sys
2016-02-21 01:31:20 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2016-02-21 01:31:20 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2016-02-21 01:31:16 ----D---- C:\Program Files (x86)\My Company Name
2016-02-21 01:28:09 ----D---- C:\Program Files (x86)\Adobe
2016-02-21 01:27:40 ----D---- C:\Program Files\Adobe
2016-02-21 01:27:24 ----D---- C:\Program Files\Common Files\Adobe
2016-02-21 01:25:16 ----D---- C:\ProgramData\Adobe
2016-02-21 01:23:24 ----D---- C:\Users\Ludmila\AppData\Roaming\acer
2016-02-21 01:21:40 ----D---- C:\Users\Ludmila\AppData\Roaming\WinRAR
2016-02-21 01:13:46 ----D---- C:\Program Files\WinRAR
2016-02-21 01:08:39 ----D---- C:\Users\Ludmila\AppData\Roaming\Mozilla
2016-02-21 01:01:38 ----D---- C:\Users\Ludmila\AppData\Roaming\CareCenter
2016-02-21 00:44:14 ----D---- C:\Users\Ludmila\AppData\Roaming\Macromedia
2016-02-21 00:42:58 ----D---- C:\WINDOWS\oem
2016-02-21 00:42:57 ----D---- C:\Users\Ludmila\AppData\Roaming\Adobe
2016-02-21 00:42:54 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-02-21 00:42:26 ----SHD---- C:\ProgramData\Šablony
2016-02-21 00:42:26 ----SHD---- C:\ProgramData\Plocha
2016-02-21 00:42:26 ----SHD---- C:\ProgramData\Nabídka Start
2016-02-21 00:42:26 ----SHD---- C:\ProgramData\Dokumenty
2016-02-21 00:42:26 ----SHD---- C:\ProgramData\Data aplikací
2016-02-21 00:41:55 ----SD---- C:\Users\Ludmila\AppData\Roaming\Microsoft
2016-02-19 19:03:22 ----DC---- C:\AdwCleaner
2016-02-19 19:00:23 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2016-02-21 11:52:56 ----D---- C:\WINDOWS\Prefetch
2016-02-21 11:52:51 ----D---- C:\WINDOWS\Temp
2016-02-21 11:52:50 ----RD---- C:\Program Files
2016-02-21 11:45:01 ----RD---- C:\WINDOWS\System32
2016-02-21 11:45:01 ----D---- C:\WINDOWS\Inf
2016-02-21 11:45:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-21 11:43:13 ----D---- C:\WINDOWS\system32\sru
2016-02-21 11:38:11 ----D---- C:\Windows
2016-02-21 11:31:35 ----SHD---- C:\WINDOWS\Installer
2016-02-21 11:31:20 ----D---- C:\WINDOWS\SysWOW64
2016-02-21 11:30:31 ----D---- C:\WINDOWS\system32\Tasks
2016-02-21 09:37:07 ----D---- C:\WINDOWS\Logs
2016-02-21 09:36:54 ----SD---- C:\WINDOWS\system32\Microsoft
2016-02-21 04:36:30 ----RD---- C:\Program Files (x86)
2016-02-21 04:35:50 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-21 04:35:39 ----RSD---- C:\WINDOWS\assembly
2016-02-21 04:35:38 ----D---- C:\WINDOWS\system32\config
2016-02-21 04:35:13 ----RSD---- C:\WINDOWS\Fonts
2016-02-21 04:35:10 ----D---- C:\Program Files\Common Files
2016-02-21 04:35:06 ----D---- C:\Program Files\Common Files\microsoft shared
2016-02-21 04:35:04 ----SD---- C:\ProgramData\Microsoft
2016-02-21 04:35:04 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-02-21 04:32:29 ----D---- C:\WINDOWS\ShellNew
2016-02-21 04:32:19 ----D---- C:\Program Files (x86)\Microsoft Office
2016-02-21 04:32:18 ----HD---- C:\ProgramData
2016-02-21 04:32:13 ----SHD---- C:\System Volume Information
2016-02-21 03:47:50 ----D---- C:\WINDOWS\WinSxS
2016-02-21 03:41:25 ----D---- C:\ProgramData\Acer
2016-02-21 03:40:34 ----D---- C:\WINDOWS\AppReadiness
2016-02-21 03:30:44 ----HD---- C:\Program Files\WindowsApps
2016-02-21 03:22:36 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2016-02-21 03:22:36 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-02-21 03:22:36 ----D---- C:\WINDOWS\system32\drivers
2016-02-21 03:22:36 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-02-21 03:22:35 ----RD---- C:\WINDOWS\ToastData
2016-02-21 03:22:35 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2016-02-21 03:22:34 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-21 03:22:34 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-21 03:22:34 ----D---- C:\WINDOWS\system32\en-US
2016-02-21 03:22:34 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-02-21 03:22:34 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-02-21 03:22:34 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-21 03:22:33 ----D---- C:\WINDOWS\system32\Boot
2016-02-21 03:22:33 ----D---- C:\Program Files\Windows Journal
2016-02-21 03:22:32 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-02-21 03:22:32 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-02-21 03:22:32 ----D---- C:\WINDOWS\system32\wbem
2016-02-21 03:22:32 ----D---- C:\WINDOWS\system32\sk-SK
2016-02-21 03:22:32 ----D---- C:\WINDOWS\system32\migration
2016-02-21 03:22:32 ----D---- C:\WINDOWS\PolicyDefinitions
2016-02-21 03:22:32 ----D---- C:\WINDOWS\apppatch
2016-02-21 03:22:32 ----D---- C:\Program Files\Internet Explorer
2016-02-21 03:22:32 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-21 03:22:29 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-21 03:22:08 ----D---- C:\WINDOWS\CbsTemp
2016-02-21 02:53:49 ----D---- C:\WINDOWS\debug
2016-02-21 02:39:28 ----D---- C:\Program Files (x86)\Common Files
2016-02-21 02:35:38 ----D---- C:\WINDOWS\system32\catroot2
2016-02-21 02:17:23 ----HD---- C:\OEM
2016-02-21 02:17:03 ----D---- C:\Program Files (x86)\Acer
2016-02-21 02:15:37 ----D---- C:\WINDOWS\system32\wdi
2016-02-21 02:06:26 ----D---- C:\WINDOWS\system32\restore
2016-02-21 01:33:09 ----D---- C:\WINDOWS\system32\FxsTmp
2016-02-21 01:32:53 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-02-21 01:31:20 ----D---- C:\WINDOWS\system32\catroot
2016-02-21 01:28:02 ----D---- C:\ProgramData\McAfee
2016-02-21 01:23:39 ----D---- C:\ProgramData\OEM
2016-02-21 01:17:38 ----D---- C:\Program Files (x86)\McAfee
2016-02-21 00:48:00 ----D---- C:\ProgramData\Intel
2016-02-21 00:47:08 ----SHD---- C:\$Recycle.Bin
2016-02-21 00:46:57 ----D---- C:\WINDOWS\SoftwareDistribution
2016-02-21 00:43:00 ----DC---- C:\WINDOWS\Panther
2016-02-21 00:42:26 ----D---- C:\Program Files\Windows NT
2016-02-21 00:42:12 ----D---- C:\WINDOWS\system32\Recovery
2016-02-21 00:41:55 ----RD---- C:\Users
2016-02-02 03:37:41 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2014-04-04 784760]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\WINDOWS\system32\drivers\mfewfpk.sys [2014-04-04 346760]
R0 PxHlpa64;PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-08-26 47720]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 cfwids;McAfee Inc. cfwids; C:\WINDOWS\system32\drivers\cfwids.sys [2014-04-04 70592]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-06-16 3793408]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-06-03 3986392]
R3 iwdbus;@oem4.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-05-06 27032]
R3 LMDriver;@oem14.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2014-02-20 116736]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\WINDOWS\system32\drivers\mfeapfk.sys [2014-04-04 177544]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2014-04-04 311856]
R3 mfefirek;McAfee Inc. mfefirek; C:\WINDOWS\system32\drivers\mfefirek.sys [2014-04-04 522360]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [2014-03-18 441264]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2015-12-02 37960]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-05-14 12701472]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-04-30 18776]
R3 nvvad_WaveExtensible;@oem10.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 Qcamain;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\Qcamainx64.sys [2014-08-26 2220544]
R3 RadioShim;@oem14.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\WINDOWS\System32\drivers\RadioShim.sys [2013-07-18 14680]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-05-08 871640]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\WINDOWS\system32\drivers\mfeelamk.sys [2014-04-04 69352]
S3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-04-11 1200128]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\WINDOWS\system32\drivers\HipShieldK.sys [2013-09-23 197704]
S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-05-06 38296]
S3 IntcDAud;@oem1.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-06-16 450520]
S3 mfencrk;McAfee Inc. mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [2014-03-18 96592]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2014-03-18 167424]
S3 RSUSBVSTOR;@oem12.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2014-03-27 331992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-17 82128]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe [2014-08-22 305664]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2016-01-14 2860760]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904]
R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-06-16 315352]
R2 Intel(R) ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2014-02-20 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-20 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-20 398296]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-06-10 466664]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2015-12-02 157928]
R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2014-01-28 178528]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 McOobeSv2;McAfee OOBE Service2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 mfecore;McAfee Anti-Malware Core; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [2014-03-18 1041192]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2014-04-04 219752]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [2014-04-04 189912]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2013-07-30 328928]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-30 1617696]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-04-30 21007192]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-13 923936]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512]
R2 ssinstall;SInstalátor; C:\WINDOWS\SysWOW64\ssins.exe [2016-02-21 2324216]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-06-12 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-06-26 458984]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-06-26 449768]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-06-24 233216]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-06-16 279000]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-04-24 203344]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-02-01 887232]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-01-17 174368]
S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [2013-07-29 334608]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2013-08-15 602944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-11 146888]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

Odpovědět