Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o pomoc, samovolné vypínání počítače

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
ondrapol
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 20 čer 2013 19:23

Prosím o pomoc, samovolné vypínání počítače

#1 Příspěvek od ondrapol »

Dobrý den,
mám poměrně krátce nový notebook a už mě zlobí. Vylil jsem na něj sice trochu čaje ale podařilo se mi ho zachránit a jede dál. Stává se mi, že mi najednou vypne z ničeho nic natvrdo (z ničeho nic černá obrazovka), tak jsem si říkal jestli to nemůže být něčím v softwaru. Taky se poměrně dost zasekává. Prosím o pomoc, posílám log mého notebooku:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondřej at 2016-02-27 22:24:07
Microsoft Windows 10 Home
System drive C: has 709 GB (76%) free of 936 GB
Total RAM: 3987 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:24:15, on 27. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ondřej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 778F65672E
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Catered to You - {b90183ad-1cf4-4d7b-9461-b89083957547} - C:\Program Files (x86)\Catered to You\Extensions\b90183ad-1cf4-4d7b-9461-b89083957547.dll (file missing)
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem10.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.292\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12948 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
"dwm.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fd7aa6e0-cbb1-4d8e-93d9-8ec56422cb75 -SystemEventPortName:HostProcess-c04a6885-921e-40bc-8a53-0f178306feb6 -IoCancelEventPortName:HostProcess-63cbe772-0fc3-4434-ae48-653532af72ec -NonStateChangingEventPortName:HostProcess-5012fa63-54fb-4fc8-b0d6-69dea0b7483c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:039d7521-fb56-45c5-891d-5e4fac68a4c9 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\system32\WLANExt.exe 1484665859872
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
dashost.exe {802a6c66-171d-4cf0-abf24d4f1fdb2a4f}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
igfxEM.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
igfxHK.exe
igfxTray.exe
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\WINDOWS\system32\igfxext.exe" -Embedding
"C:\Program Files\iTunes\iTunesHelper.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe" task
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\Ondřej\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-508344559-3349700843-2002687948-1001 -c 568 -s 565 -g "C:\ProgramData\acer\CCD"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="8000.0.1619701238\1115128774" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,24,52 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4248 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A6_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Disabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="8000.2.1275278580\1307478121" --font-cache-shared-handle=2516 /prefetch:673131151
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A6_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Disabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="8000.4.775415824\657946715" --font-cache-shared-handle=4820 /prefetch:673131151
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 636 640 648 8192 644

"C:\Users\Ondřej\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\2dhcb05o.default

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=C:\Program Files\mcafee\msc\npMcSnFFPl64.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-02-23 228552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-15 885152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-23 2348336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-02-23 163016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-15 664184]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b90183ad-1cf4-4d7b-9461-b89083957547}]
Catered to You - C:\Program Files (x86)\Catered to You\Extensions\b90183ad-1cf4-4d7b-9461-b89083957547.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-23 1741104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10 13671640]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-02 2199840]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-09-15 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-02-11 551112]
"Spotify Web Helper"=C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [2015-01-29 1168896]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-01-11 50603136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-12-23 7021880]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-27 22:24:07 ----D---- C:\rsit
2016-02-27 22:24:07 ----D---- C:\Program Files\trend micro
2016-02-12 10:31:01 ----D---- C:\Users\Ondřej\AppData\Roaming\dvdcss
2016-02-10 11:10:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-10 11:10:16 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-02-10 11:10:15 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-10 11:10:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-10 11:10:10 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-02-10 11:10:09 ----A---- C:\WINDOWS\system32\twinui.dll
2016-02-10 11:10:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-10 11:10:06 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-02-10 11:10:05 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-02-10 11:10:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-10 11:10:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-02-10 11:10:01 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-10 11:10:01 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-10 11:10:00 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-02-10 11:09:59 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-02-10 11:09:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-02-10 11:09:58 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-10 11:09:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-10 11:09:57 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-10 11:09:57 ----A---- C:\WINDOWS\explorer.exe
2016-02-10 11:09:56 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-10 11:09:56 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-02-10 11:09:56 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-10 11:09:55 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-10 11:09:55 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-10 11:09:55 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-10 11:09:52 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-10 11:09:52 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-02-10 11:09:50 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-02-10 11:09:50 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-02-10 11:09:49 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-10 11:09:49 ----A---- C:\WINDOWS\system32\OpenWith.exe
2016-02-10 11:09:49 ----A---- C:\WINDOWS\system32\iassam.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\SYSWOW64\OpenWith.exe
2016-02-10 11:09:48 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\ztrace_maps.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-10 11:09:47 ----A---- C:\WINDOWS\SYSWOW64\ztrace_maps.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-02-10 11:09:46 ----A---- C:\WINDOWS\SYSWOW64\iassam.dll
2016-02-10 11:09:46 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-01-28 15:04:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-01-28 15:04:33 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-01-28 15:04:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-01-28 15:04:21 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-28 15:04:10 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-01-28 15:04:09 ----A---- C:\WINDOWS\system32\mos.dll
2016-01-28 15:04:09 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-01-28 15:04:05 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-01-28 15:04:04 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-01-28 15:04:04 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-01-28 15:04:04 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-01-28 15:04:03 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-01-28 15:04:03 ----A---- C:\WINDOWS\system32\InputService.dll
2016-01-28 15:04:02 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-01-28 15:04:01 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-01-28 15:04:00 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-01-28 15:04:00 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-01-28 15:04:00 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-28 15:03:59 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-01-28 15:03:59 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-01-28 15:03:58 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-01-28 15:03:58 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-01-28 15:03:58 ----A---- C:\WINDOWS\system32\msctf.dll
2016-01-28 15:03:58 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-01-28 15:03:57 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-01-28 15:03:57 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-01-28 15:03:57 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-01-28 15:03:57 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-01-28 15:03:57 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-01-28 15:03:56 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-28 15:03:56 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-01-28 15:03:56 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-01-28 15:03:55 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-01-28 15:03:55 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-01-28 15:03:55 ----A---- C:\WINDOWS\system32\quartz.dll
2016-01-28 15:03:55 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-01-28 15:03:54 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2016-01-28 15:03:54 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-01-28 15:03:54 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-01-28 15:03:54 ----A---- C:\WINDOWS\system32\MTFServer.dll
2016-01-28 15:03:54 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-01-28 15:03:53 ----A---- C:\WINDOWS\SYSWOW64\MTF.dll
2016-01-28 15:03:53 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-01-28 15:03:53 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2016-01-28 15:03:53 ----A---- C:\WINDOWS\system32\MTF.dll
2016-01-28 15:03:53 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-01-28 15:03:52 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-01-28 15:03:52 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-01-28 15:03:52 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-01-28 15:03:52 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-01-28 15:03:51 ----A---- C:\WINDOWS\system32\srcore.dll
2016-01-28 15:03:50 ----A---- C:\WINDOWS\SYSWOW64\SimCfg.dll
2016-01-28 15:03:50 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2016-01-28 15:03:50 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-01-28 15:03:50 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-01-28 15:03:49 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2016-01-28 15:03:49 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-01-28 15:03:49 ----A---- C:\WINDOWS\system32\SimCfg.dll
2016-01-28 15:03:48 ----A---- C:\WINDOWS\SYSWOW64\SimAuth.dll
2016-01-28 15:03:48 ----A---- C:\WINDOWS\system32\SimAuth.dll
2016-01-28 15:03:48 ----A---- C:\WINDOWS\system32\services.exe
2016-01-28 15:03:48 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-01-28 15:03:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-01-28 15:03:48 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-01-28 15:03:47 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-01-28 15:03:47 ----A---- C:\WINDOWS\system32\wscapi.dll
2016-01-28 15:03:47 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-01-28 15:03:47 ----A---- C:\WINDOWS\system32\rasdlg.dll
2016-01-28 15:03:47 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-01-28 15:03:47 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-28 15:03:46 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2016-01-28 15:03:46 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-01-28 15:03:46 ----A---- C:\WINDOWS\system32\DDDS.dll
2016-01-28 15:03:46 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-28 15:03:45 ----A---- C:\WINDOWS\system32\wlidcli.dll
2016-01-28 15:03:45 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-01-28 15:03:45 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-28 15:03:45 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-01-28 15:03:44 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-01-28 15:03:43 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2016-01-28 15:03:42 ----A---- C:\WINDOWS\system32\rastls.dll
2016-01-28 15:03:42 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-01-28 15:03:42 ----A---- C:\WINDOWS\system32\invagent.dll
2016-01-28 15:03:42 ----A---- C:\WINDOWS\system32\evr.dll
2016-01-28 15:03:41 ----A---- C:\WINDOWS\SYSWOW64\pcaui.exe
2016-01-28 15:03:41 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-01-28 15:03:41 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2016-01-28 15:03:41 ----A---- C:\WINDOWS\system32\FilterDS.dll
2016-01-28 15:03:41 ----A---- C:\WINDOWS\system32\devinv.dll
2016-01-28 15:03:40 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-28 15:03:40 ----A---- C:\WINDOWS\system32\pcaui.exe
2016-01-28 15:03:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-01-28 15:03:39 ----A---- C:\WINDOWS\SYSWOW64\rasautou.exe
2016-01-28 15:03:39 ----A---- C:\WINDOWS\system32\rasautou.exe
2016-01-28 15:03:39 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2016-01-28 15:03:38 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2016-01-28 15:03:38 ----A---- C:\WINDOWS\SYSWOW64\winhttpcom.dll
2016-01-28 15:03:38 ----A---- C:\WINDOWS\system32\winhttpcom.dll
2016-01-28 15:03:38 ----A---- C:\WINDOWS\system32\winbio.dll
2016-01-28 15:03:38 ----A---- C:\WINDOWS\system32\sscoreext.dll
2016-01-28 15:03:38 ----A---- C:\WINDOWS\system32\rasauto.dll
2016-01-28 15:03:38 ----A---- C:\WINDOWS\system32\rasadhlp.dll
2016-01-28 15:03:37 ----A---- C:\WINDOWS\SYSWOW64\winbio.dll
2016-01-28 15:03:37 ----A---- C:\WINDOWS\system32\rastlsext.dll
2016-01-28 15:03:36 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2016-01-28 15:03:36 ----A---- C:\WINDOWS\SYSWOW64\rasadhlp.dll

======List of files/folders modified in the last 1 month======

2016-02-27 22:24:07 ----RD---- C:\Program Files
2016-02-27 22:18:06 ----D---- C:\Users\Ondřej\AppData\Roaming\Skype
2016-02-27 22:17:25 ----D---- C:\WINDOWS\System32
2016-02-27 22:17:25 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-02-27 22:17:15 ----D---- C:\WINDOWS\Temp
2016-02-27 22:15:52 ----D---- C:\WINDOWS\system32\sru
2016-02-27 22:15:43 ----D---- C:\WINDOWS\Prefetch
2016-02-27 22:13:27 ----D---- C:\AdwCleaner
2016-02-27 18:57:24 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-27 18:57:14 ----D---- C:\WINDOWS\system32\config
2016-02-27 18:21:54 ----SHD---- C:\System Volume Information
2016-02-27 18:19:22 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-27 12:50:45 ----D---- C:\WINDOWS\AppReadiness
2016-02-27 12:50:44 ----HD---- C:\Program Files\WindowsApps
2016-02-25 18:43:29 ----AD---- C:\KMPlayer
2016-02-25 16:13:06 ----RD---- C:\WINDOWS\assembly
2016-02-24 16:22:00 ----HD---- C:\ProgramData
2016-02-23 16:03:41 ----SHD---- C:\WINDOWS\Installer
2016-02-23 16:03:41 ----SHD---- C:\Config.Msi
2016-02-23 16:02:26 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2016-02-23 16:00:15 ----AD---- C:\Program Files\Microsoft Office 15
2016-02-22 15:24:04 ----D---- C:\WINDOWS\system32\NDF
2016-02-21 17:29:19 ----D---- C:\WINDOWS\INF
2016-02-21 17:29:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-21 13:37:20 ----D---- C:\Program Files\McAfee Security Scan
2016-02-21 13:37:17 ----D---- C:\WINDOWS\system32\drivers\etc
2016-02-19 12:27:17 ----D---- C:\WINDOWS\system32\catroot2
2016-02-18 20:43:21 ----D---- C:\WINDOWS\SysWOW64
2016-02-12 16:53:18 ----D---- C:\Users\Ondřej\AppData\Roaming\vlc
2016-02-11 22:27:38 ----D---- C:\WINDOWS\rescache
2016-02-10 16:08:46 ----D---- C:\WINDOWS\WinSxS
2016-02-10 15:06:22 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-10 15:06:22 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-10 15:06:22 ----D---- C:\WINDOWS\system32\en-US
2016-02-10 15:06:22 ----D---- C:\WINDOWS\system32\drivers
2016-02-10 15:06:22 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-10 15:06:22 ----D---- C:\Windows
2016-02-10 15:06:22 ----D---- C:\Program Files\Windows Journal
2016-02-10 11:36:59 ----D---- C:\WINDOWS\system32\MRT
2016-02-10 11:32:40 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-10 11:32:34 ----D---- C:\WINDOWS\CbsTemp
2016-02-08 17:18:13 ----D---- C:\Users\Ondřej\AppData\Roaming\BitTorrent
2016-02-08 14:30:53 ----RD---- C:\Program Files (x86)
2016-02-04 18:58:10 ----D---- C:\WINDOWS\system32\Tasks
2016-02-04 18:58:01 ----D---- C:\Program Files (x86)\Acer
2016-02-04 18:57:56 ----HD---- C:\OEM
2016-02-03 20:01:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-02-01 22:25:12 ----D---- C:\WINDOWS\Tasks
2016-01-29 03:46:00 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-01-29 03:45:57 ----SD---- C:\WINDOWS\system32\F12
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\oobe
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\migration
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\appraiser
2016-01-29 03:45:55 ----RD---- C:\WINDOWS\PurchaseDialog
2016-01-29 03:45:55 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-01-29 03:45:55 ----D---- C:\WINDOWS\bcastdvr
2016-01-29 03:45:55 ----D---- C:\WINDOWS\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-12-23 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-12-23 273784]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-12-23 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-01-20 1065208]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-01-20 464256]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-12-23 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-12-23 97648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-12-23 155304]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R3 bcbtums;@oem10.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCM43XX;@oem19.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-02-25 7549616]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2015-10-30 84992]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-14 6278392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-04-28 3949656]
R3 iwdbus;@oem1.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-03-01 27032]
R3 LMDriver;@oem29.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-12-10 100312]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-13 11139216]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-01-05 953856]
S3 btwampfl;@oem10.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-19 117248]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-10-10 108800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-03-01 38296]
S3 IntcDAud;@oem2.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-03-07 450520]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-09-02 77104]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-12-23 226440]
R2 BcmBtRSupport;@oem10.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2016-01-14 2860760]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-01-20 2809072]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2015-08-13 349728]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-14 370064]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-10 169432]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-06-10 466664]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-02 1617352]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-13 937616]
R2 OneSyncSvc_46f5a;Hostitel synchronizace_46f5a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-06-12 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-09-15 644880]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_100a99;Hostitel synchronizace_100a99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_10b2f73;Hostitel synchronizace_10b2f73; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2e364;Hostitel synchronizace_2e364; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2fc7e;Hostitel synchronizace_2fc7e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_30902a;Hostitel synchronizace_30902a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_339e8;Hostitel synchronizace_339e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_33ae76;Hostitel synchronizace_33ae76; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_367e6;Hostitel synchronizace_367e6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36950;Hostitel synchronizace_36950; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38182;Hostitel synchronizace_38182; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_390d7;Hostitel synchronizace_390d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a58c;Hostitel synchronizace_3a58c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a5a6;Hostitel synchronizace_3a5a6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a7bc;Hostitel synchronizace_3a7bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b3ac;Hostitel synchronizace_3b3ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b56a;Hostitel synchronizace_3b56a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ca2c;Hostitel synchronizace_3ca2c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cac0;Hostitel synchronizace_3cac0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cc56;Hostitel synchronizace_3cc56; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d0ac;Hostitel synchronizace_3d0ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d184;Hostitel synchronizace_3d184; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d203;Hostitel synchronizace_3d203; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d2ad;Hostitel synchronizace_3d2ad; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3dd79;Hostitel synchronizace_3dd79; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e57e;Hostitel synchronizace_3e57e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ec75;Hostitel synchronizace_3ec75; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3f9a8;Hostitel synchronizace_3f9a8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3fa84;Hostitel synchronizace_3fa84; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3fc39;Hostitel synchronizace_3fc39; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_40c13;Hostitel synchronizace_40c13; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_41b9a;Hostitel synchronizace_41b9a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_42f3b;Hostitel synchronizace_42f3b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_430c5;Hostitel synchronizace_430c5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43591;Hostitel synchronizace_43591; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43eaf;Hostitel synchronizace_43eaf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43edf;Hostitel synchronizace_43edf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4432e;Hostitel synchronizace_4432e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_44445;Hostitel synchronizace_44445; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_447d4;Hostitel synchronizace_447d4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4488c;Hostitel synchronizace_4488c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_449de;Hostitel synchronizace_449de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_44a10;Hostitel synchronizace_44a10; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_451db;Hostitel synchronizace_451db; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_456e9;Hostitel synchronizace_456e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_45db8;Hostitel synchronizace_45db8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_45e27;Hostitel synchronizace_45e27; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_46357;Hostitel synchronizace_46357; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_466c3;Hostitel synchronizace_466c3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_46b16;Hostitel synchronizace_46b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_47852;Hostitel synchronizace_47852; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_47e21;Hostitel synchronizace_47e21; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_48230;Hostitel synchronizace_48230; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_489dd;Hostitel synchronizace_489dd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_48a69;Hostitel synchronizace_48a69; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_492ba;Hostitel synchronizace_492ba; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4940f;Hostitel synchronizace_4940f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_49949;Hostitel synchronizace_49949; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a14b;Hostitel synchronizace_4a14b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a3e8;Hostitel synchronizace_4a3e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a78a;Hostitel synchronizace_4a78a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4aec5;Hostitel synchronizace_4aec5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4b9f1;Hostitel synchronizace_4b9f1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4bbbf;Hostitel synchronizace_4bbbf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4bda3;Hostitel synchronizace_4bda3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4c787;Hostitel synchronizace_4c787; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_51231;Hostitel synchronizace_51231; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_51a9e;Hostitel synchronizace_51a9e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_524b0;Hostitel synchronizace_524b0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_543e9;Hostitel synchronizace_543e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5c474;Hostitel synchronizace_5c474; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5d484;Hostitel synchronizace_5d484; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_61464;Hostitel synchronizace_61464; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_63ce9;Hostitel synchronizace_63ce9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_64223;Hostitel synchronizace_64223; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_643de;Hostitel synchronizace_643de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_65194;Hostitel synchronizace_65194; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_84854;Hostitel synchronizace_84854; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_88f8e9;Hostitel synchronizace_88f8e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d908e;Hostitel synchronizace_d908e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_f2de9;Hostitel synchronizace_f2de9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-14 301976]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2015-08-13 209952]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.292\McCHSvc.exe [2016-02-05 293128]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_100a99;Služba zasílání zpráv_100a99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_10b2f73;Služba zasílání zpráv_10b2f73; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2e364;Služba zasílání zpráv_2e364; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2fc7e;Služba zasílání zpráv_2fc7e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_30902a;Služba zasílání zpráv_30902a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_339e8;Služba zasílání zpráv_339e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_33ae76;Služba zasílání zpráv_33ae76; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_367e6;Služba zasílání zpráv_367e6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36950;Služba zasílání zpráv_36950; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_38182;Služba zasílání zpráv_38182; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_390d7;Služba zasílání zpráv_390d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a58c;Služba zasílání zpráv_3a58c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a5a6;Služba zasílání zpráv_3a5a6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a7bc;Služba zasílání zpráv_3a7bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b3ac;Služba zasílání zpráv_3b3ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b56a;Služba zasílání zpráv_3b56a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ca2c;Služba zasílání zpráv_3ca2c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cac0;Služba zasílání zpráv_3cac0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cc56;Služba zasílání zpráv_3cc56; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d0ac;Služba zasílání zpráv_3d0ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d184;Služba zasílání zpráv_3d184; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d203;Služba zasílání zpráv_3d203; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d2ad;Služba zasílání zpráv_3d2ad; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3dd79;Služba zasílání zpráv_3dd79; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e57e;Služba zasílání zpráv_3e57e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ec75;Služba zasílání zpráv_3ec75; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f9a8;Služba zasílání zpráv_3f9a8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3fa84;Služba zasílání zpráv_3fa84; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3fc39;Služba zasílání zpráv_3fc39; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_40c13;Služba zasílání zpráv_40c13; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_41b9a;Služba zasílání zpráv_41b9a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_42f3b;Služba zasílání zpráv_42f3b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_430c5;Služba zasílání zpráv_430c5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43591;Služba zasílání zpráv_43591; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43eaf;Služba zasílání zpráv_43eaf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43edf;Služba zasílání zpráv_43edf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4432e;Služba zasílání zpráv_4432e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_44445;Služba zasílání zpráv_44445; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_447d4;Služba zasílání zpráv_447d4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4488c;Služba zasílání zpráv_4488c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_449de;Služba zasílání zpráv_449de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_44a10;Služba zasílání zpráv_44a10; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_451db;Služba zasílání zpráv_451db; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_456e9;Služba zasílání zpráv_456e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_45db8;Služba zasílání zpráv_45db8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_45e27;Služba zasílání zpráv_45e27; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46357;Služba zasílání zpráv_46357; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_466c3;Služba zasílání zpráv_466c3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46b16;Služba zasílání zpráv_46b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46f5a;Služba zasílání zpráv_46f5a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47852;Služba zasílání zpráv_47852; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47e21;Služba zasílání zpráv_47e21; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_48230;Služba zasílání zpráv_48230; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_489dd;Služba zasílání zpráv_489dd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_48a69;Služba zasílání zpráv_48a69; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_492ba;Služba zasílání zpráv_492ba; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4940f;Služba zasílání zpráv_4940f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49949;Služba zasílání zpráv_49949; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a14b;Služba zasílání zpráv_4a14b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a3e8;Služba zasílání zpráv_4a3e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a78a;Služba zasílání zpráv_4a78a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4aec5;Služba zasílání zpráv_4aec5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4b9f1;Služba zasílání zpráv_4b9f1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4bbbf;Služba zasílání zpráv_4bbbf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4bda3;Služba zasílání zpráv_4bda3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4c787;Služba zasílání zpráv_4c787; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_51231;Služba zasílání zpráv_51231; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_51a9e;Služba zasílání zpráv_51a9e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_524b0;Služba zasílání zpráv_524b0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_543e9;Služba zasílání zpráv_543e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_5c474;Služba zasílání zpráv_5c474; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_5d484;Služba zasílání zpráv_5d484; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_61464;Služba zasílání zpráv_61464; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_63ce9;Služba zasílání zpráv_63ce9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_64223;Služba zasílání zpráv_64223; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_643de;Služba zasílání zpráv_643de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_65194;Služba zasílání zpráv_65194; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_84854;Služba zasílání zpráv_84854; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_88f8e9;Služba zasílání zpráv_88f8e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d908e;Služba zasílání zpráv_d908e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_f2de9;Služba zasílání zpráv_f2de9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-30 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc, samovolné vypínání počítače

#2 Příspěvek od Rudy »

Zdravím!
Jen jestli to není tím politím. Nikdy neví kam až to zateče. :) Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ondrapol
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 20 čer 2013 19:23

Re: Prosím o pomoc, samovolné vypínání počítače

#3 Příspěvek od ondrapol »

snad to bude něčím jiným :) dneska už jsem to prohnal adw cleanerem tak snad to nevadí tady je ten druhy log, ktery jsem teď dostal:

# AdwCleaner v5.036 - Logfile created 27/02/2016 at 22:41:46
# Updated 22/02/2016 by Xplode
# Database : 2016-02-27.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Ondřej - ONDRA
# Running from : C:\Users\Ondřej\Desktop\adwcleaner_5.036 (1).exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2968 bytes] - [18/11/2015 15:16:24]
C:\AdwCleaner\AdwCleaner[C2].txt - [768 bytes] - [27/02/2016 22:41:46]
C:\AdwCleaner\AdwCleaner[S1].txt - [2682 bytes] - [18/11/2015 15:14:42]
C:\AdwCleaner\AdwCleaner[S2].txt - [899 bytes] - [27/02/2016 22:40:22]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [985 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc, samovolné vypínání počítače

#4 Příspěvek od Rudy »

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\McAfee Security Scan
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

:services
McComponentHostService
Bonjour Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ondrapol
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 20 čer 2013 19:23

Re: Prosím o pomoc, samovolné vypínání počítače

#5 Příspěvek od ondrapol »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondřej at 2016-02-28 12:02:13
Microsoft Windows 10 Home
System drive C: has 708 GB (76%) free of 936 GB
Total RAM: 3987 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:02:20, on 28. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files\trend micro\Ondřej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 778F65672E
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Catered to You - {b90183ad-1cf4-4d7b-9461-b89083957547} - C:\Program Files (x86)\Catered to You\Extensions\b90183ad-1cf4-4d7b-9461-b89083957547.dll (file missing)
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem10.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12642 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
winlogon.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c76c24c2-7737-4e37-a9ad-436e6dc07e3f -SystemEventPortName:HostProcess-a5e15f7f-5a68-4383-9356-e0c9aae50fd1 -IoCancelEventPortName:HostProcess-8ba9fa69-656e-430d-a16e-be3ebf055041 -NonStateChangingEventPortName:HostProcess-7514b788-2bc4-46a2-a219-fca0251d2e0b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1d810e97-de9e-488d-bead-70cb789a3b59 -DeviceGroupId:WudfDefaultDevicePool
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\WLANExt.exe 2901364395552
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {3b81e589-7652-4b59-aa21de50710f8602}
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
taskeng.exe {3D0087A0-E8BD-4882-854D-5063A3AECBC0}
sihost.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe" scan upload
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="328.0.501590166\436430322" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,24,52 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4248 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A6_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledCWNDBootstrap/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Disabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="328.2.1139880120\671214305" --font-cache-shared-handle=2548 /prefetch:673131151
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\WINDOWS\system32\igfxext.exe" -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"fontdrvhost.exe"

C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-508344559-3349700843-2002687948-10012_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-508344559-3349700843-2002687948-10012 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A6_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledCWNDBootstrap/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Disabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="328.4.1769462649\1752862921" --font-cache-shared-handle=5004 /prefetch:673131151
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe" task
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe" -r "C:\Users\Ondřej\AppData\Local\AOP SDK\Acer Infra\acer\SyncAgent" -u S-1-5-21-508344559-3349700843-2002687948-1001 -c 524 -s 565 -g "C:\ProgramData\acer\CCD"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wermgr.exe -upload
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 628 632 640 8192 636
"C:\Users\Ondřej\Downloads\RSITx64.exe"
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe -Embedding
"C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\2dhcb05o.default

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=C:\Program Files\mcafee\msc\npMcSnFFPl64.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-02-23 228552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-15 885152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-23 2348336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-02-23 163016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-15 664184]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b90183ad-1cf4-4d7b-9461-b89083957547}]
Catered to You - C:\Program Files (x86)\Catered to You\Extensions\b90183ad-1cf4-4d7b-9461-b89083957547.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-02-23 1741104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10 13671640]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-02 2199840]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-09-15 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-02-11 551112]
"Spotify Web Helper"=C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [2015-01-29 1168896]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-01-11 50603136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Ondřej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-12-23 7021880]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-28 11:53:37 ----D---- C:\_OTM
2016-02-27 22:24:07 ----D---- C:\rsit
2016-02-27 22:24:07 ----D---- C:\Program Files\trend micro
2016-02-12 10:31:01 ----D---- C:\Users\Ondřej\AppData\Roaming\dvdcss
2016-02-10 11:10:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-10 11:10:16 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-02-10 11:10:15 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-10 11:10:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-10 11:10:10 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-02-10 11:10:09 ----A---- C:\WINDOWS\system32\twinui.dll
2016-02-10 11:10:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-10 11:10:06 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-02-10 11:10:05 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-02-10 11:10:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-10 11:10:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-02-10 11:10:01 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-10 11:10:01 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-10 11:10:00 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-02-10 11:09:59 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-02-10 11:09:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-02-10 11:09:58 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-10 11:09:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-10 11:09:57 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-10 11:09:57 ----A---- C:\WINDOWS\explorer.exe
2016-02-10 11:09:56 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-10 11:09:56 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-02-10 11:09:56 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-10 11:09:55 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-10 11:09:55 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-10 11:09:55 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-10 11:09:54 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-10 11:09:53 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-10 11:09:52 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-10 11:09:52 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-10 11:09:51 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-02-10 11:09:50 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-02-10 11:09:50 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-02-10 11:09:49 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-10 11:09:49 ----A---- C:\WINDOWS\system32\OpenWith.exe
2016-02-10 11:09:49 ----A---- C:\WINDOWS\system32\iassam.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\SYSWOW64\OpenWith.exe
2016-02-10 11:09:48 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\ztrace_maps.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-10 11:09:48 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-10 11:09:47 ----A---- C:\WINDOWS\SYSWOW64\ztrace_maps.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-10 11:09:47 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-02-10 11:09:46 ----A---- C:\WINDOWS\SYSWOW64\iassam.dll
2016-02-10 11:09:46 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-02-10 11:09:45 ----A---- C:\WINDOWS\system32\Chakradiag.dll

======List of files/folders modified in the last 1 month======

2016-02-28 12:00:00 ----D---- C:\Users\Ondřej\AppData\Roaming\Skype
2016-02-28 11:59:36 ----D---- C:\WINDOWS\Prefetch
2016-02-28 11:59:30 ----D---- C:\WINDOWS\Temp
2016-02-28 11:59:17 ----D---- C:\WINDOWS\System32
2016-02-28 11:59:17 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-02-28 11:59:14 ----RD---- C:\Program Files
2016-02-28 11:57:59 ----D---- C:\WINDOWS\system32\sru
2016-02-28 11:53:40 ----D---- C:\WINDOWS\Tasks
2016-02-28 11:53:11 ----HD---- C:\Program Files\WindowsApps
2016-02-28 11:53:11 ----D---- C:\WINDOWS\AppReadiness
2016-02-28 03:02:33 ----D---- C:\WINDOWS\system32\config
2016-02-28 02:57:57 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-27 22:41:46 ----D---- C:\AdwCleaner
2016-02-27 18:57:24 ----D---- C:\WINDOWS\system32\DriverStore
2016-02-27 18:21:54 ----SHD---- C:\System Volume Information
2016-02-25 18:43:29 ----AD---- C:\KMPlayer
2016-02-25 16:13:06 ----RD---- C:\WINDOWS\assembly
2016-02-24 16:22:00 ----HD---- C:\ProgramData
2016-02-23 16:03:41 ----SHD---- C:\WINDOWS\Installer
2016-02-23 16:03:41 ----SHD---- C:\Config.Msi
2016-02-23 16:02:26 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2016-02-23 16:00:15 ----AD---- C:\Program Files\Microsoft Office 15
2016-02-22 15:24:04 ----D---- C:\WINDOWS\system32\NDF
2016-02-21 17:29:19 ----D---- C:\WINDOWS\INF
2016-02-21 17:29:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-21 13:37:17 ----D---- C:\WINDOWS\system32\drivers\etc
2016-02-19 12:27:17 ----D---- C:\WINDOWS\system32\catroot2
2016-02-18 20:43:21 ----D---- C:\WINDOWS\SysWOW64
2016-02-12 16:53:18 ----D---- C:\Users\Ondřej\AppData\Roaming\vlc
2016-02-11 22:27:38 ----D---- C:\WINDOWS\rescache
2016-02-10 16:08:46 ----D---- C:\WINDOWS\WinSxS
2016-02-10 15:06:22 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-10 15:06:22 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-10 15:06:22 ----D---- C:\WINDOWS\system32\en-US
2016-02-10 15:06:22 ----D---- C:\WINDOWS\system32\drivers
2016-02-10 15:06:22 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-10 15:06:22 ----D---- C:\Windows
2016-02-10 15:06:22 ----D---- C:\Program Files\Windows Journal
2016-02-10 11:36:59 ----D---- C:\WINDOWS\system32\MRT
2016-02-10 11:32:40 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-10 11:32:34 ----D---- C:\WINDOWS\CbsTemp
2016-02-08 17:18:13 ----D---- C:\Users\Ondřej\AppData\Roaming\BitTorrent
2016-02-08 14:30:53 ----RD---- C:\Program Files (x86)
2016-02-04 18:58:10 ----D---- C:\WINDOWS\system32\Tasks
2016-02-04 18:58:01 ----D---- C:\Program Files (x86)\Acer
2016-02-04 18:57:56 ----HD---- C:\OEM
2016-02-03 20:01:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-01-29 03:46:00 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-01-29 03:45:57 ----SD---- C:\WINDOWS\system32\F12
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\oobe
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\migration
2016-01-29 03:45:57 ----D---- C:\WINDOWS\system32\appraiser
2016-01-29 03:45:55 ----RD---- C:\WINDOWS\PurchaseDialog
2016-01-29 03:45:55 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-01-29 03:45:55 ----D---- C:\WINDOWS\bcastdvr
2016-01-29 03:45:55 ----D---- C:\WINDOWS\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-12-23 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-12-23 273784]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-12-23 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-01-20 1065208]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-01-20 464256]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-12-23 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-12-23 97648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-12-23 155304]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R3 bcbtums;@oem10.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCM43XX;@oem19.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-02-25 7549616]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2015-10-30 84992]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-14 6278392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-04-28 3949656]
R3 iwdbus;@oem1.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-03-01 27032]
R3 LMDriver;@oem29.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 MEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-12-10 100312]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-13 11139216]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-01-05 953856]
S3 btwampfl;@oem10.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-19 117248]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-10-10 108800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-03-01 38296]
S3 IntcDAud;@oem2.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-03-07 450520]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-09-02 77104]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-12-23 226440]
R2 BcmBtRSupport;@oem10.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2016-01-14 2860760]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-01-20 2809072]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-14 370064]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-06-10 466664]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-02 1617352]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-13 937616]
R2 OneSyncSvc_34343;Hostitel synchronizace_34343; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-06-12 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-09-15 644880]
S2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2015-08-13 349728]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-10 169432]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_100a99;Hostitel synchronizace_100a99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_10b2f73;Hostitel synchronizace_10b2f73; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2e364;Hostitel synchronizace_2e364; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2fc7e;Hostitel synchronizace_2fc7e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_30902a;Hostitel synchronizace_30902a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_339e8;Hostitel synchronizace_339e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_33ae76;Hostitel synchronizace_33ae76; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_367e6;Hostitel synchronizace_367e6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36950;Hostitel synchronizace_36950; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38182;Hostitel synchronizace_38182; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_390d7;Hostitel synchronizace_390d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a58c;Hostitel synchronizace_3a58c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a5a6;Hostitel synchronizace_3a5a6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a7bc;Hostitel synchronizace_3a7bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b3ac;Hostitel synchronizace_3b3ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b56a;Hostitel synchronizace_3b56a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ca2c;Hostitel synchronizace_3ca2c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cac0;Hostitel synchronizace_3cac0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cc56;Hostitel synchronizace_3cc56; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d0ac;Hostitel synchronizace_3d0ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d184;Hostitel synchronizace_3d184; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d203;Hostitel synchronizace_3d203; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3d2ad;Hostitel synchronizace_3d2ad; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3dd79;Hostitel synchronizace_3dd79; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3e57e;Hostitel synchronizace_3e57e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ec75;Hostitel synchronizace_3ec75; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3f9a8;Hostitel synchronizace_3f9a8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3fa84;Hostitel synchronizace_3fa84; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3fc39;Hostitel synchronizace_3fc39; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_40c13;Hostitel synchronizace_40c13; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_41b9a;Hostitel synchronizace_41b9a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_42f3b;Hostitel synchronizace_42f3b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_430c5;Hostitel synchronizace_430c5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43165;Hostitel synchronizace_43165; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43591;Hostitel synchronizace_43591; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43eaf;Hostitel synchronizace_43eaf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43edf;Hostitel synchronizace_43edf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4432e;Hostitel synchronizace_4432e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_44445;Hostitel synchronizace_44445; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_447d4;Hostitel synchronizace_447d4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4488c;Hostitel synchronizace_4488c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_449de;Hostitel synchronizace_449de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_44a10;Hostitel synchronizace_44a10; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_451db;Hostitel synchronizace_451db; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_456e9;Hostitel synchronizace_456e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_45db8;Hostitel synchronizace_45db8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_45e27;Hostitel synchronizace_45e27; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_46357;Hostitel synchronizace_46357; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_466c3;Hostitel synchronizace_466c3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_46b16;Hostitel synchronizace_46b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_47852;Hostitel synchronizace_47852; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_47e21;Hostitel synchronizace_47e21; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_48230;Hostitel synchronizace_48230; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_489dd;Hostitel synchronizace_489dd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_48a69;Hostitel synchronizace_48a69; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_492ba;Hostitel synchronizace_492ba; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4940f;Hostitel synchronizace_4940f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_49949;Hostitel synchronizace_49949; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a14b;Hostitel synchronizace_4a14b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a3e8;Hostitel synchronizace_4a3e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4a78a;Hostitel synchronizace_4a78a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4aec5;Hostitel synchronizace_4aec5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4b9f1;Hostitel synchronizace_4b9f1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4bbbf;Hostitel synchronizace_4bbbf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4bda3;Hostitel synchronizace_4bda3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4c787;Hostitel synchronizace_4c787; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_51231;Hostitel synchronizace_51231; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_51a9e;Hostitel synchronizace_51a9e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_524b0;Hostitel synchronizace_524b0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_543e9;Hostitel synchronizace_543e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5c474;Hostitel synchronizace_5c474; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_5d484;Hostitel synchronizace_5d484; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_61464;Hostitel synchronizace_61464; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_63ce9;Hostitel synchronizace_63ce9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_64223;Hostitel synchronizace_64223; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_643de;Hostitel synchronizace_643de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_65194;Hostitel synchronizace_65194; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_84854;Hostitel synchronizace_84854; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_88f8e9;Hostitel synchronizace_88f8e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d908e;Hostitel synchronizace_d908e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_f2de9;Hostitel synchronizace_f2de9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-14 301976]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2015-08-13 209952]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_100a99;Služba zasílání zpráv_100a99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_10b2f73;Služba zasílání zpráv_10b2f73; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2e364;Služba zasílání zpráv_2e364; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2fc7e;Služba zasílání zpráv_2fc7e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_30902a;Služba zasílání zpráv_30902a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_339e8;Služba zasílání zpráv_339e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_33ae76;Služba zasílání zpráv_33ae76; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_34343;Služba zasílání zpráv_34343; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_367e6;Služba zasílání zpráv_367e6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36950;Služba zasílání zpráv_36950; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_38182;Služba zasílání zpráv_38182; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_390d7;Služba zasílání zpráv_390d7; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a58c;Služba zasílání zpráv_3a58c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a5a6;Služba zasílání zpráv_3a5a6; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a7bc;Služba zasílání zpráv_3a7bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b3ac;Služba zasílání zpráv_3b3ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b56a;Služba zasílání zpráv_3b56a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ca2c;Služba zasílání zpráv_3ca2c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cac0;Služba zasílání zpráv_3cac0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cc56;Služba zasílání zpráv_3cc56; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d0ac;Služba zasílání zpráv_3d0ac; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d184;Služba zasílání zpráv_3d184; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d203;Služba zasílání zpráv_3d203; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3d2ad;Služba zasílání zpráv_3d2ad; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3dd79;Služba zasílání zpráv_3dd79; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e57e;Služba zasílání zpráv_3e57e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ec75;Služba zasílání zpráv_3ec75; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f9a8;Služba zasílání zpráv_3f9a8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3fa84;Služba zasílání zpráv_3fa84; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3fc39;Služba zasílání zpráv_3fc39; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_40c13;Služba zasílání zpráv_40c13; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_41b9a;Služba zasílání zpráv_41b9a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_42f3b;Služba zasílání zpráv_42f3b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_430c5;Služba zasílání zpráv_430c5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43165;Služba zasílání zpráv_43165; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43591;Služba zasílání zpráv_43591; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43eaf;Služba zasílání zpráv_43eaf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43edf;Služba zasílání zpráv_43edf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4432e;Služba zasílání zpráv_4432e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_44445;Služba zasílání zpráv_44445; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_447d4;Služba zasílání zpráv_447d4; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4488c;Služba zasílání zpráv_4488c; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_449de;Služba zasílání zpráv_449de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_44a10;Služba zasílání zpráv_44a10; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_451db;Služba zasílání zpráv_451db; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_456e9;Služba zasílání zpráv_456e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_45db8;Služba zasílání zpráv_45db8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_45e27;Služba zasílání zpráv_45e27; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46357;Služba zasílání zpráv_46357; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_466c3;Služba zasílání zpráv_466c3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_46b16;Služba zasílání zpráv_46b16; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47852;Služba zasílání zpráv_47852; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_47e21;Služba zasílání zpráv_47e21; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_48230;Služba zasílání zpráv_48230; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_489dd;Služba zasílání zpráv_489dd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_48a69;Služba zasílání zpráv_48a69; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_492ba;Služba zasílání zpráv_492ba; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4940f;Služba zasílání zpráv_4940f; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_49949;Služba zasílání zpráv_49949; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a14b;Služba zasílání zpráv_4a14b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a3e8;Služba zasílání zpráv_4a3e8; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a78a;Služba zasílání zpráv_4a78a; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4aec5;Služba zasílání zpráv_4aec5; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4b9f1;Služba zasílání zpráv_4b9f1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4bbbf;Služba zasílání zpráv_4bbbf; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4bda3;Služba zasílání zpráv_4bda3; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4c787;Služba zasílání zpráv_4c787; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_51231;Služba zasílání zpráv_51231; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_51a9e;Služba zasílání zpráv_51a9e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_524b0;Služba zasílání zpráv_524b0; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_543e9;Služba zasílání zpráv_543e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_5c474;Služba zasílání zpráv_5c474; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_5d484;Služba zasílání zpráv_5d484; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_61464;Služba zasílání zpráv_61464; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_63ce9;Služba zasílání zpráv_63ce9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_64223;Služba zasílání zpráv_64223; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_643de;Služba zasílání zpráv_643de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_65194;Služba zasílání zpráv_65194; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_84854;Služba zasílání zpráv_84854; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_88f8e9;Služba zasílání zpráv_88f8e9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d908e;Služba zasílání zpráv_d908e; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_f2de9;Služba zasílání zpráv_f2de9; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-30 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc, samovolné vypínání počítače

#6 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\Ondřej.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
O2 - BHO: Catered to You - {b90183ad-1cf4-4d7b-9461-b89083957547} - C:\Program Files (x86)\Catered to You\Extensions\b90183ad-1cf4-4d7b-9461-b89083957547.dll (file missing)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ondrapol
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 20 čer 2013 19:23

Re: Prosím o pomoc, samovolné vypínání počítače

#7 Příspěvek od ondrapol »

píše to tohle
Přílohy
píše to tohle
píše to tohle
Bez názvu.jpg (103.64 KiB) Zobrazeno 1973 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc, samovolné vypínání počítače

#8 Příspěvek od Rudy »

Všechno nelze fixnout. Nevadí, je to jen nefunkční záznam v registry, který ničemu neškodí, jen zabírá pár bajtů místa. To ale neřeší náš problém. Zkuste se podívat do c:\windows\minidump. Pokud tam najdete nějaké soubory, zabalte je do raru a přiložte k vašemu příštímu postu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ondrapol
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 20 čer 2013 19:23

Re: Prosím o pomoc, samovolné vypínání počítače

#9 Příspěvek od ondrapol »

Nic takového jsem ve složce windows nenašel :/
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc, samovolné vypínání počítače

#10 Příspěvek od Rudy »

ondrapol píše:Nic takového jsem ve složce windows nenašel :/
Ve složce windows\minidump, nikoli windows.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“