Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Velmi pomalý PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Velmi pomalý PC

#1 Příspěvek od r0ach »

Ahoj,
chtěl bych poprosit o kontrolu PC. Je velice zasekaný s pomalou odezvou.
Přikládám výpis z RSIT.
Děkuju.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Věra at 2017-01-06 20:07:17
Microsoft Windows 8.1 s aplikací Bing
System drive C: has 115 GB (25%) free of 458 GB
Total RAM: 3982 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:07:24, on 6. 1. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\Věra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Razor Web - {2e22e1c9-9ddb-40da-85c7-0753217fff76} - C:\Program Files (x86)\Razor Web\Extensions\2e22e1c9-9ddb-40da-85c7-0753217fff76.dll (file missing)
O2 - BHO: (no name) - {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} - (no file)
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
O4 - HKCU\..\Run: [MK LOL] "C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe" -auto
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9571 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 362271757376
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {0b8a3b5c-604a-47f7-a482dab59491f8a6}
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"

C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\wmiprvse.exe
taskhostex.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --profile-directory="Profile 1"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Věra\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=54.0.2840.99 --handshake-handle=0x120
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-features=MetricsReporting<MetricsAndCrashSampling --force-fieldtrials=MetricsAndCrashSampling/OutOfReportingSample/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,15,16,17,20,34,51,60 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3408 --gpu-driver-date=1-20-2014 --mojo-application-channel-token=94D7946F5024DAB1176C2154FD1B1D5A --mojo-platform-channel-handle=1128 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --disable-features=MetricsReporting<MetricsAndCrashSampling --force-fieldtrials=MetricsAndCrashSampling/OutOfReportingSample/ --primordial-pipe-token=9D054487A870FAEBC5B2F25584EFF359 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=9D054487A870FAEBC5B2F25584EFF359 --channel="3288.4.331399113\150492797" --mojo-platform-channel-handle=4580 /prefetch:1
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9a5fe7bc-9359-4450-b3e9-d92f75e8503d -SystemEventPortName:HostProcess-51ad0c06-104e-43eb-aeb1-b757c3df2122 -IoCancelEventPortName:HostProcess-91b8f374-def8-4ab2-99c9-b775d6750ad5 -NonStateChangingEventPortName:HostProcess-28897a99-b907-4668-9fa7-7e6494126dec -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:296e5356-5eb4-4444-954c-24129a680a8b -DeviceGroupId:WudfDefaultDevicePool
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --disable-features=MetricsReporting<MetricsAndCrashSampling --force-fieldtrials=MetricsAndCrashSampling/OutOfReportingSample/ --primordial-pipe-token=E577378E587D449467F9FC262EB7CF9D --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=E577378E587D449467F9FC262EB7CF9D --channel="3288.5.1294119162\42619776" --mojo-platform-channel-handle=2872 /prefetch:1
"C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe" /d speedup
wmiadap.exe /F /T /R
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 1FE208C1-F727-FDBB-0F10-278A9479B13D -Reinvoke

"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe" /taskrestart
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

"C:\Users\Věra\Downloads\RSITx64.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
"C:\Program Files\Java\jre1.8.0_40\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_40" -vma 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 -ma LVNTVkJhc2VsaW5lVXBkYXRlAC1ub3RXZWJKYXZh

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForVěra.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForVěra (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-10-11 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-05 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-27 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-05 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21 440712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2e22e1c9-9ddb-40da-85c7-0753217fff76}]
Razor Web - C:\Program Files (x86)\Razor Web\Extensions\2e22e1c9-9ddb-40da-85c7-0753217fff76.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21 416320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-02-18 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-02-18 771568]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-02-18 770544]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-01-14 7510896]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-12-13 2803440]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5595336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MK LOL"=C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe [2015-04-01 1092296]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-05-08 8322328]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2011-10-30 571392]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-03-07 335232]
"HPMessageService"=C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [2015-06-29 653576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2014-02-18 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2017-01-06 20:05:55 ----D---- C:\rsit
2017-01-06 20:05:55 ----D---- C:\Program Files\trend micro
2017-01-02 19:31:00 ----D---- C:\Program Files (x86)\GUME232.tmp
2017-01-02 19:31:00 ----A---- C:\Program Files (x86)\GUTE243.tmp
2016-11-13 13:19:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-11-09 19:30:50 ----A---- C:\Windows\system32\mshtml.dll
2016-11-09 19:30:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-11-09 19:30:48 ----A---- C:\Windows\system32\ieframe.dll
2016-11-09 19:30:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-11-09 19:30:46 ----A---- C:\Windows\system32\jscript9.dll
2016-11-09 19:30:45 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-11-09 19:30:45 ----A---- C:\Windows\system32\win32k.sys
2016-11-09 19:30:44 ----A---- C:\Windows\system32\diagtrack.dll
2016-11-09 19:30:42 ----A---- C:\Windows\system32\wininet.dll
2016-11-09 19:30:42 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-11-09 19:30:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-11-09 19:30:41 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2016-11-09 19:30:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-11-09 19:30:40 ----A---- C:\Windows\system32\urlmon.dll
2016-11-09 19:30:40 ----A---- C:\Windows\system32\iertutil.dll
2016-11-09 19:30:39 ----A---- C:\Windows\system32\ole32.dll
2016-11-09 19:30:39 ----A---- C:\Windows\system32\lsasrv.dll
2016-11-09 19:30:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-11-09 19:30:37 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-11-09 19:30:36 ----A---- C:\Windows\system32\drivers\refs.sys
2016-11-09 19:30:35 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2016-11-09 19:30:35 ----A---- C:\Windows\SYSWOW64\msdtcprx.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\win32spl.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\SessEnv.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2016-11-09 19:30:34 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2016-11-09 19:30:34 ----A---- C:\Windows\system32\vmrdvcore.dll
2016-11-09 19:30:34 ----A---- C:\Windows\system32\msdtcprx.dll
2016-11-09 19:30:34 ----A---- C:\Windows\system32\drivers\clfs.sys
2016-11-09 19:30:33 ----A---- C:\Windows\system32\msctf.dll
2016-11-09 19:30:33 ----A---- C:\Windows\system32\mfsvr.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\pdh.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\msv1_0.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2016-11-09 19:30:31 ----A---- C:\Windows\SYSWOW64\msctf.dll
2016-11-09 19:30:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-11-09 19:30:31 ----A---- C:\Windows\system32\atmfd.dll
2016-11-09 19:30:30 ----A---- C:\Windows\SYSWOW64\pdh.dll
2016-11-09 19:30:30 ----A---- C:\Windows\system32\drivers\bowser.sys
2016-11-09 19:30:30 ----A---- C:\Windows\system32\DafPrintProvider.dll
2016-11-09 19:30:29 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2016-11-09 19:30:29 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2016-11-09 19:30:29 ----A---- C:\Windows\system32\msfeeds.dll
2016-11-09 19:30:29 ----A---- C:\Windows\system32\ie4uinit.exe
2016-11-09 19:30:28 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-11-09 19:30:28 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\UIAnimation.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\localspl.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\iscsiexe.dll
2016-11-09 19:30:26 ----A---- C:\Windows\SYSWOW64\iscsiwmi.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\iscsiwmi.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\inetcomm.dll
2016-11-09 19:30:25 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-11-09 19:30:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-11-09 19:30:25 ----A---- C:\Windows\system32\asycfilt.dll
2016-11-09 19:30:23 ----A---- C:\Windows\SYSWOW64\iscsidsc.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\xolehlp.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\iscsidsc.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\dab.dll
2016-11-09 19:30:21 ----A---- C:\Windows\SYSWOW64\input.dll
2016-11-09 19:30:20 ----A---- C:\Windows\system32\input.dll
2016-11-09 19:30:17 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-11-09 19:30:17 ----A---- C:\Windows\system32\iedkcs32.dll
2016-11-09 19:30:16 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-11-09 19:30:15 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-11-09 19:30:14 ----A---- C:\Windows\SYSWOW64\xolehlp.dll
2016-11-09 19:30:14 ----A---- C:\Windows\system32\webcheck.dll
2016-11-09 19:30:12 ----A---- C:\Windows\system32\dxtrans.dll
2016-11-09 19:30:08 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-11-09 19:30:08 ----A---- C:\Windows\system32\netlogon.dll
2016-11-09 19:30:08 ----A---- C:\Windows\system32\certcli.dll
2016-11-09 19:30:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-11-09 19:30:05 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-11-09 19:30:05 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-11-09 19:30:05 ----A---- C:\Windows\system32\mshtmled.dll
2016-11-09 19:30:04 ----A---- C:\Windows\system32\iepeers.dll
2016-11-09 19:30:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-11-09 19:30:03 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-11-09 19:30:03 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2016-11-09 19:30:03 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-11-09 19:30:03 ----A---- C:\Windows\system32\vbscript.dll
2016-11-09 19:30:03 ----A---- C:\Windows\system32\jscript.dll
2016-11-09 19:30:03 ----A---- C:\Windows\system32\ieapfltr.dll
2016-11-09 19:30:03 ----A---- C:\Windows\system32\atmlib.dll
2016-11-09 19:30:02 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-10-16 16:41:31 ----A---- C:\Windows\system32\appraiser.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\aeinv.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\acmigration.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\generaltel.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\devinv.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\aepic.dll
2016-10-16 16:41:29 ----A---- C:\Windows\system32\invagent.dll
2016-10-16 16:41:29 ----A---- C:\Windows\system32\centel.dll
2016-10-16 16:41:24 ----A---- C:\Windows\system32\shell32.dll
2016-10-16 16:41:22 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-10-16 16:41:20 ----A---- C:\Windows\system32\twinui.dll
2016-10-16 16:41:19 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-10-16 16:41:18 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-10-16 16:41:18 ----A---- C:\Windows\explorer.exe
2016-10-16 16:41:17 ----A---- C:\Windows\SYSWOW64\RestoreOptIn.exe
2016-10-16 16:41:17 ----A---- C:\Windows\system32\RestoreOptIn.exe
2016-10-12 17:42:46 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2016-10-12 17:42:46 ----A---- C:\Windows\system32\actxprxy.dll
2016-10-12 17:42:45 ----A---- C:\Windows\system32\wmp.dll
2016-10-12 17:42:44 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-10-12 17:42:39 ----A---- C:\Windows\system32\esent.dll
2016-10-12 17:42:38 ----A---- C:\Windows\SYSWOW64\esent.dll
2016-10-12 17:42:36 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-10-12 17:42:36 ----A---- C:\Windows\system32\authui.dll
2016-10-12 17:42:35 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2016-10-12 17:42:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-12 17:42:35 ----A---- C:\Windows\system32\d3d11.dll
2016-10-12 17:42:34 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2016-10-12 17:42:34 ----A---- C:\Windows\system32\DWrite.dll
2016-10-12 17:42:32 ----A---- C:\Windows\SYSWOW64\Windows.Media.Streaming.dll
2016-10-12 17:42:31 ----A---- C:\Windows\system32\FntCache.dll
2016-10-12 17:42:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2016-10-12 17:42:28 ----A---- C:\Windows\system32\ntshrui.dll
2016-10-12 17:42:27 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2016-10-12 17:42:27 ----A---- C:\Windows\system32\wbengine.exe
2016-10-12 17:42:27 ----A---- C:\Windows\system32\GdiPlus.dll
2016-10-12 17:42:27 ----A---- C:\Windows\system32\drivers\spaceport.sys
2016-10-12 17:42:27 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-12 17:42:26 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2016-10-12 17:42:26 ----A---- C:\Windows\system32\winload.exe
2016-10-12 17:42:25 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-10-12 17:42:25 ----A---- C:\Windows\system32\wmploc.DLL
2016-10-12 17:42:25 ----A---- C:\Windows\system32\drivers\parport.sys
2016-10-12 17:42:23 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2016-10-12 17:42:23 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2016-10-12 17:42:23 ----A---- C:\Windows\system32\PlayToDevice.dll
2016-10-12 17:42:21 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2016-10-12 17:42:21 ----A---- C:\Windows\system32\drivers\tm.sys
2016-10-12 17:42:20 ----A---- C:\Windows\system32\winresume.exe
2016-10-12 17:42:20 ----A---- C:\Windows\system32\rastapi.dll
2016-10-12 17:42:19 ----A---- C:\Windows\SYSWOW64\adsmsext.dll
2016-10-12 17:42:19 ----A---- C:\Windows\system32\twinui.appcore.dll
2016-10-12 17:42:19 ----A---- C:\Windows\system32\drivers\vwifimp.sys
2016-10-12 17:42:19 ----A---- C:\Windows\system32\drivers\serial.sys
2016-10-12 17:42:19 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-12 17:42:18 ----A---- C:\Windows\SYSWOW64\offreg.dll
2016-10-12 17:42:18 ----A---- C:\Windows\system32\offreg.dll
2016-10-12 17:42:18 ----A---- C:\Windows\system32\drivers\vwifibus.sys
2016-10-12 17:42:18 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-12 17:42:17 ----A---- C:\Windows\system32\drivers\serenum.sys
2016-10-12 17:42:11 ----A---- C:\Windows\system32\drivers\vwififlt.sys

======List of files/folders modified in the last 3 months======

2017-01-06 20:07:19 ----D---- C:\Windows\Prefetch
2017-01-06 20:06:01 ----D---- C:\Windows\Temp
2017-01-06 20:05:55 ----RD---- C:\Program Files
2017-01-06 19:59:28 ----D---- C:\Windows\AppReadiness
2017-01-06 19:59:25 ----HD---- C:\Program Files\WindowsApps
2017-01-06 19:58:11 ----D---- C:\Windows\system32\sru
2017-01-02 22:01:44 ----D---- C:\Windows\system32\Tasks
2017-01-02 22:01:43 ----D---- C:\Windows\Tasks
2017-01-02 20:33:53 ----D---- C:\Windows\system32\config
2017-01-02 19:47:02 ----D---- C:\Users\Věra\AppData\Roaming\vlc
2017-01-02 19:32:46 ----D---- C:\Program Files (x86)\Opera
2017-01-02 19:31:00 ----RD---- C:\Program Files (x86)
2017-01-02 16:33:50 ----RD---- C:\Windows\System32
2017-01-02 16:33:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-11-20 12:01:48 ----D---- C:\Windows\Microsoft.NET
2016-11-17 13:40:24 ----D---- C:\Windows\Inf
2016-11-16 19:49:01 ----SHD---- C:\System Volume Information
2016-11-15 20:17:52 ----SHD---- C:\Windows\Installer
2016-11-15 20:17:18 ----RSD---- C:\Windows\assembly
2016-11-15 20:17:13 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2016-11-15 20:15:26 ----D---- C:\Program Files\Microsoft Office 15
2016-11-13 14:41:53 ----D---- C:\Windows\system32\MRT
2016-11-13 14:35:38 ----AC---- C:\Windows\system32\MRT.exe
2016-11-13 13:19:53 ----D---- C:\Windows\WinSxS
2016-11-13 13:19:49 ----D---- C:\Windows\SysWOW64
2016-11-09 23:52:25 ----RD---- C:\Windows\ToastData
2016-11-09 23:52:13 ----D---- C:\Program Files\Internet Explorer
2016-11-09 23:52:13 ----D---- C:\Program Files (x86)\Internet Explorer
2016-11-09 23:52:12 ----D---- C:\Windows\SYSWOW64\migration
2016-11-09 23:52:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-11-09 23:52:11 ----D---- C:\Windows\system32\migration
2016-11-09 23:52:11 ----D---- C:\Windows\system32\cs-CZ
2016-11-09 23:52:01 ----D---- C:\Windows\system32\drivers
2016-11-09 23:51:56 ----D---- C:\Windows\system32\DriverStore
2016-11-09 20:18:08 ----D---- C:\Windows\CbsTemp
2016-11-09 19:22:42 ----D---- C:\Windows\system32\catroot2
2016-11-03 17:51:01 ----D---- C:\Windows\rescache
2016-10-28 02:22:26 ----N---- C:\Windows\system32\MpSigStub.exe
2016-10-17 15:54:19 ----SD---- C:\Windows\system32\CompatTel
2016-10-17 15:54:19 ----D---- C:\Windows\system32\appraiser
2016-10-17 15:54:14 ----D---- C:\Windows
2016-10-16 17:33:53 ----D---- C:\Windows\Logs
2016-10-12 22:27:04 ----D---- C:\Windows\system32\Boot
2016-10-12 22:27:00 ----D---- C:\Windows\apppatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 MBI;@oem12.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\Windows\System32\drivers\MBI.sys [2014-01-23 29464]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 vrvd5;vrvd5; C:\Windows\system32\DRIVERS\vrvd5.sys [2015-12-25 13344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2016-08-13 71680]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2014-10-10 158968]
R3 clwvd;@oem21.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 dtlitescsibus;@oem67.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-07-08 30264]
R3 GPIO;@oem14.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\Windows\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-02-18 4222976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-01-15 3837144]
R3 IntcDAud;@oem7.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-02-18 450520]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 RSP2STOR;@oem16.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
R3 RTL8168;@oem15.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-01-28 839896]
R3 RTWlanE;@oem6.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2014-03-22 3379416]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-12-13 31472]
R3 SynTP;@oem18.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-12-13 542448]
R3 TXEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\Windows\System32\drivers\TXEIx64.sys [2014-01-15 88592]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2016-08-13 38912]
S0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 dg_ssudbus;@oem79.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-07-22 130688]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 nmwcd;@oem68.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;@oem72.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 rssasnt;rssasnt; \??\C:\Users\Public\Documents\RSupport\rcc50\rssas64.sys []
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 ssudmdm;@oem81.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-07-22 164992]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2009-11-18 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-10-04 3040496]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2014-10-01 1349576]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2016-08-15 29728]
R2 HPWMISVC;HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [2015-06-29 602888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-01 733696]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2014-01-08 290520]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-16 50864]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-02-18 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-01 822232]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2014-10-29 38792]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Re: Velmi pomalý PC

#3 Příspěvek od r0ach »

# AdwCleaner v6.042 - Log vytvořen 06/01/2017 v 21:34:46
# Aktualizováno dne 06/01/2017 z Malwarebytes
# Databáze : 2017-01-06.1 [Server]
# Operační systém : Windows 8.1 Connected (X64)
# Uživatelské jméno : Věra - RUNKA
# Spuštěno z : C:\Users\Věra\Desktop\adwcleaner_6.042.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\Věra\AppData\Roaming\RHEng
[-] Složka smazána: C:\ProgramData\apn
[#] Složka smazána po restartu: C:\ProgramData\Application Data\apn


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{2E22E1C9-9DDB-40DA-85C7-0753217FFF76}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E22E1C9-9DDB-40DA-85C7-0753217FFF76}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2E22E1C9-9DDB-40DA-85C7-0753217FFF76}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2E22E1C9-9DDB-40DA-85C7-0753217FFF76}
[-] Klíč smazán: HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[#] Klíč smazán po restartu: [x64] HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd


***** [ Prohlížeče ] *****

[-] [C:\Users\Věra\AppData\Local\Google\Chrome\User Data\Profile 1] [extension] Smazáno: fcfenmboojpjinhpgggodefccipikbpd


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1845 Bajty] - [06/01/2017 21:34:46]
C:\AdwCleaner\AdwCleaner[S0].txt - [2210 Bajty] - [06/01/2017 21:33:14]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1991 Bajty] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Re: Velmi pomalý PC

#5 Příspěvek od r0ach »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Věra at 2017-01-06 22:31:07
Microsoft Windows 8.1 s aplikací Bing
System drive C: has 115 GB (25%) free of 458 GB
Total RAM: 3982 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:31:14, on 6. 1. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\Věra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} - (no file)
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
O4 - HKCU\..\Run: [MK LOL] "C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe" -auto
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9335 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
"dwm.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 907993751776
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {9ac9bf1b-0e34-4596-a203d327f9c39848}
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"

C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\Explorer.EXE
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --profile-directory="Profile 1"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Věra\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=54.0.2840.99 --handshake-handle=0x11c
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/ClientSideDetectionModel/Model0/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/MaterialDesignUserManager/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Default/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,15,16,17,20,34,51,60 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3408 --gpu-driver-date=1-20-2014 --mojo-application-channel-token=C689D4CA7D2D8514FE4957E3703309AB --mojo-platform-channel-handle=1108 --ignored=" --type=renderer " /prefetch:2
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/MaterialDesignUserManager/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Default/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=CD61E85C819257BA59BC5B9B3E18218B --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=CD61E85C819257BA59BC5B9B3E18218B --channel="2988.2.381352998\515719995" --mojo-platform-channel-handle=2424 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/MaterialDesignUserManager/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Default/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=DD1C13BC7961C59BCE4596C6766EB01D --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=DD1C13BC7961C59BCE4596C6766EB01D --channel="2988.3.693628505\1969394099" --mojo-platform-channel-handle=4108 /prefetch:1
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
taskhost.exe $(Arg0)
taskhostex.exe Idle
taskhost.exe IdleSyncMaintenance
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\svchost.exe -k defragsvc

"C:\Users\Věra\Downloads\RSITx64.exe"

taskeng.exe {5E5C0589-F6B3-4511-BEB8-A35703AA1340}
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForVěra.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForVěra (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-10-11 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-05 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-11-01 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-05 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21 440712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21 416320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-02-18 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-02-18 771568]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-02-18 770544]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-01-14 7510896]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-12-13 2803440]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5595336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MK LOL"=C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe [2015-04-01 1092296]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-05-08 8322328]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2011-10-30 571392]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-03-07 335232]
"HPMessageService"=C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [2015-06-29 653576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2014-02-18 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2017-01-06 21:30:14 ----D---- C:\AdwCleaner
2017-01-06 21:15:52 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll
2017-01-06 21:15:51 ----A---- C:\Windows\system32\aspnet_counters.dll
2017-01-06 21:15:35 ----A---- C:\Windows\SYSWOW64\msvcp120_clr0400.dll
2017-01-06 21:15:35 ----A---- C:\Windows\system32\msvcp120_clr0400.dll
2017-01-06 21:15:28 ----A---- C:\Windows\SYSWOW64\msvcr120_clr0400.dll
2017-01-06 21:15:28 ----A---- C:\Windows\system32\msvcr120_clr0400.dll
2017-01-06 20:27:40 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2017-01-06 20:27:40 ----A---- C:\Windows\SYSWOW64\GlobCollationHost.dll
2017-01-06 20:27:40 ----A---- C:\Windows\system32\Windows.Globalization.dll
2017-01-06 20:27:40 ----A---- C:\Windows\system32\mshtml.dll
2017-01-06 20:27:40 ----A---- C:\Windows\system32\GlobCollationHost.dll
2017-01-06 20:27:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-01-06 20:27:37 ----A---- C:\Windows\system32\ieframe.dll
2017-01-06 20:27:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-01-06 20:27:34 ----A---- C:\Windows\system32\jscript9.dll
2017-01-06 20:27:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-01-06 20:27:32 ----A---- C:\Windows\system32\win32k.sys
2017-01-06 20:27:31 ----A---- C:\Windows\system32\rdpcorets.dll
2017-01-06 20:27:29 ----A---- C:\Windows\SYSWOW64\msi.dll
2017-01-06 20:27:28 ----A---- C:\Windows\system32\wininet.dll
2017-01-06 20:27:28 ----A---- C:\Windows\system32\msi.dll
2017-01-06 20:27:28 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-01-06 20:27:27 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-01-06 20:27:27 ----A---- C:\Windows\system32\authui.dll
2017-01-06 20:27:26 ----A---- C:\Windows\SYSWOW64\authui.dll
2017-01-06 20:27:26 ----A---- C:\Windows\system32\crypt32.dll
2017-01-06 20:27:25 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2017-01-06 20:27:25 ----A---- C:\Windows\system32\drivers\http.sys
2017-01-06 20:27:25 ----A---- C:\Windows\system32\drivers\cmimcext.sys
2017-01-06 20:27:24 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2017-01-06 20:27:24 ----A---- C:\Windows\system32\gdi32.dll
2017-01-06 20:27:24 ----A---- C:\Windows\system32\drivers\refs.sys
2017-01-06 20:27:24 ----A---- C:\Windows\system32\drivers\cng.sys
2017-01-06 20:27:23 ----A---- C:\Windows\system32\wintrust.dll
2017-01-06 20:27:23 ----A---- C:\Windows\system32\drivers\spaceport.sys
2017-01-06 20:27:23 ----A---- C:\Windows\system32\drivers\clfs.sys
2017-01-06 20:27:23 ----A---- C:\Windows\system32\dnsapi.dll
2017-01-06 20:27:22 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2017-01-06 20:27:22 ----A---- C:\Windows\system32\user32.dll
2017-01-06 20:27:22 ----A---- C:\Windows\system32\drivers\storport.sys
2017-01-06 20:27:22 ----A---- C:\Windows\system32\bcrypt.dll
2017-01-06 20:27:21 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\TpmTasks.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\shsetup.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\d3d10level9.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\ActionQueue.dll
2017-01-06 20:27:20 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-01-06 20:27:20 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2017-01-06 20:27:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-01-06 20:27:19 ----A---- C:\Windows\system32\apisetschema.dll
2017-01-06 20:27:18 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-01-06 20:27:17 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-01-06 20:27:17 ----A---- C:\Windows\system32\urlmon.dll
2017-01-06 20:27:16 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-01-06 20:27:16 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-01-06 20:27:16 ----A---- C:\Windows\system32\certcli.dll
2017-01-06 20:27:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\vbscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\msfeeds.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\jscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\inetcomm.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\ieapfltr.dll
2017-01-06 20:27:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-01-06 20:27:13 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-01-06 20:05:55 ----D---- C:\rsit
2017-01-06 20:05:55 ----D---- C:\Program Files\trend micro
2017-01-02 19:31:00 ----D---- C:\Program Files (x86)\GUME232.tmp
2017-01-02 19:31:00 ----A---- C:\Program Files (x86)\GUTE243.tmp
2016-11-13 13:19:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-11-09 19:30:44 ----A---- C:\Windows\system32\diagtrack.dll
2016-11-09 19:30:42 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-11-09 19:30:41 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2016-11-09 19:30:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-11-09 19:30:40 ----A---- C:\Windows\system32\iertutil.dll
2016-11-09 19:30:39 ----A---- C:\Windows\system32\ole32.dll
2016-11-09 19:30:39 ----A---- C:\Windows\system32\lsasrv.dll
2016-11-09 19:30:37 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-11-09 19:30:35 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2016-11-09 19:30:35 ----A---- C:\Windows\SYSWOW64\msdtcprx.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\win32spl.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\SessEnv.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2016-11-09 19:30:34 ----A---- C:\Windows\system32\vmrdvcore.dll
2016-11-09 19:30:34 ----A---- C:\Windows\system32\msdtcprx.dll
2016-11-09 19:30:33 ----A---- C:\Windows\system32\msctf.dll
2016-11-09 19:30:33 ----A---- C:\Windows\system32\mfsvr.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\pdh.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\msv1_0.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2016-11-09 19:30:31 ----A---- C:\Windows\SYSWOW64\msctf.dll
2016-11-09 19:30:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-11-09 19:30:31 ----A---- C:\Windows\system32\atmfd.dll
2016-11-09 19:30:30 ----A---- C:\Windows\SYSWOW64\pdh.dll
2016-11-09 19:30:30 ----A---- C:\Windows\system32\drivers\bowser.sys
2016-11-09 19:30:30 ----A---- C:\Windows\system32\DafPrintProvider.dll
2016-11-09 19:30:29 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2016-11-09 19:30:29 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2016-11-09 19:30:29 ----A---- C:\Windows\system32\ie4uinit.exe
2016-11-09 19:30:28 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-11-09 19:30:28 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\UIAnimation.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\localspl.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\iscsiexe.dll
2016-11-09 19:30:26 ----A---- C:\Windows\SYSWOW64\iscsiwmi.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\iscsiwmi.dll
2016-11-09 19:30:25 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-11-09 19:30:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-11-09 19:30:25 ----A---- C:\Windows\system32\asycfilt.dll
2016-11-09 19:30:23 ----A---- C:\Windows\SYSWOW64\iscsidsc.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\xolehlp.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\iscsidsc.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\dab.dll
2016-11-09 19:30:21 ----A---- C:\Windows\SYSWOW64\input.dll
2016-11-09 19:30:20 ----A---- C:\Windows\system32\input.dll
2016-11-09 19:30:17 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-11-09 19:30:17 ----A---- C:\Windows\system32\iedkcs32.dll
2016-11-09 19:30:15 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-11-09 19:30:14 ----A---- C:\Windows\SYSWOW64\xolehlp.dll
2016-11-09 19:30:14 ----A---- C:\Windows\system32\webcheck.dll
2016-11-09 19:30:12 ----A---- C:\Windows\system32\dxtrans.dll
2016-11-09 19:30:08 ----A---- C:\Windows\system32\netlogon.dll
2016-11-09 19:30:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-11-09 19:30:05 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-11-09 19:30:05 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-11-09 19:30:05 ----A---- C:\Windows\system32\mshtmled.dll
2016-11-09 19:30:04 ----A---- C:\Windows\system32\iepeers.dll
2016-11-09 19:30:03 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2016-11-09 19:30:03 ----A---- C:\Windows\system32\atmlib.dll
2016-11-09 19:30:02 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-10-16 16:41:31 ----A---- C:\Windows\system32\appraiser.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\aeinv.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\acmigration.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\generaltel.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\devinv.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\aepic.dll
2016-10-16 16:41:29 ----A---- C:\Windows\system32\invagent.dll
2016-10-16 16:41:29 ----A---- C:\Windows\system32\centel.dll
2016-10-16 16:41:24 ----A---- C:\Windows\system32\shell32.dll
2016-10-16 16:41:22 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-10-16 16:41:20 ----A---- C:\Windows\system32\twinui.dll
2016-10-16 16:41:19 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-10-16 16:41:18 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-10-16 16:41:18 ----A---- C:\Windows\explorer.exe
2016-10-16 16:41:17 ----A---- C:\Windows\SYSWOW64\RestoreOptIn.exe
2016-10-16 16:41:17 ----A---- C:\Windows\system32\RestoreOptIn.exe
2016-10-12 17:42:46 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2016-10-12 17:42:46 ----A---- C:\Windows\system32\actxprxy.dll
2016-10-12 17:42:45 ----A---- C:\Windows\system32\wmp.dll
2016-10-12 17:42:44 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-10-12 17:42:39 ----A---- C:\Windows\system32\esent.dll
2016-10-12 17:42:38 ----A---- C:\Windows\SYSWOW64\esent.dll
2016-10-12 17:42:35 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2016-10-12 17:42:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-12 17:42:35 ----A---- C:\Windows\system32\d3d11.dll
2016-10-12 17:42:34 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2016-10-12 17:42:34 ----A---- C:\Windows\system32\DWrite.dll
2016-10-12 17:42:32 ----A---- C:\Windows\SYSWOW64\Windows.Media.Streaming.dll
2016-10-12 17:42:31 ----A---- C:\Windows\system32\FntCache.dll
2016-10-12 17:42:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2016-10-12 17:42:28 ----A---- C:\Windows\system32\ntshrui.dll
2016-10-12 17:42:27 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2016-10-12 17:42:27 ----A---- C:\Windows\system32\wbengine.exe
2016-10-12 17:42:27 ----A---- C:\Windows\system32\GdiPlus.dll
2016-10-12 17:42:27 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-12 17:42:26 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2016-10-12 17:42:26 ----A---- C:\Windows\system32\winload.exe
2016-10-12 17:42:25 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-10-12 17:42:25 ----A---- C:\Windows\system32\wmploc.DLL
2016-10-12 17:42:25 ----A---- C:\Windows\system32\drivers\parport.sys
2016-10-12 17:42:23 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2016-10-12 17:42:23 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2016-10-12 17:42:23 ----A---- C:\Windows\system32\PlayToDevice.dll
2016-10-12 17:42:21 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2016-10-12 17:42:21 ----A---- C:\Windows\system32\drivers\tm.sys
2016-10-12 17:42:20 ----A---- C:\Windows\system32\winresume.exe
2016-10-12 17:42:20 ----A---- C:\Windows\system32\rastapi.dll
2016-10-12 17:42:19 ----A---- C:\Windows\SYSWOW64\adsmsext.dll
2016-10-12 17:42:19 ----A---- C:\Windows\system32\twinui.appcore.dll
2016-10-12 17:42:19 ----A---- C:\Windows\system32\drivers\vwifimp.sys
2016-10-12 17:42:19 ----A---- C:\Windows\system32\drivers\serial.sys
2016-10-12 17:42:19 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-12 17:42:18 ----A---- C:\Windows\SYSWOW64\offreg.dll
2016-10-12 17:42:18 ----A---- C:\Windows\system32\offreg.dll
2016-10-12 17:42:18 ----A---- C:\Windows\system32\drivers\vwifibus.sys
2016-10-12 17:42:18 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-12 17:42:17 ----A---- C:\Windows\system32\drivers\serenum.sys
2016-10-12 17:42:11 ----A---- C:\Windows\system32\drivers\vwififlt.sys

======List of files/folders modified in the last 3 months======

2017-01-06 22:31:14 ----D---- C:\Windows\Prefetch
2017-01-06 22:31:05 ----D---- C:\Windows\Temp
2017-01-06 22:23:16 ----D---- C:\Windows\Microsoft.NET
2017-01-06 22:13:17 ----D---- C:\Windows\rescache
2017-01-06 22:12:18 ----RSD---- C:\Windows\assembly
2017-01-06 22:09:03 ----SHD---- C:\System Volume Information
2017-01-06 22:08:40 ----D---- C:\Windows\system32\sru
2017-01-06 21:56:50 ----D---- C:\Windows\system32\config
2017-01-06 21:50:04 ----RD---- C:\Windows\System32
2017-01-06 21:50:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-01-06 21:44:54 ----D---- C:\Windows\WinSxS
2017-01-06 21:44:51 ----D---- C:\Windows\SysWOW64
2017-01-06 21:44:21 ----D---- C:\Windows\system32\DriverStore
2017-01-06 21:44:04 ----D---- C:\Windows\Inf
2017-01-06 21:37:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-01-06 21:37:05 ----D---- C:\Windows\system32\wbem
2017-01-06 21:37:05 ----D---- C:\Windows\system32\oobe
2017-01-06 21:37:05 ----D---- C:\Windows\system32\drivers
2017-01-06 21:37:05 ----D---- C:\Windows\system32\cs-CZ
2017-01-06 21:34:35 ----HD---- C:\ProgramData
2017-01-06 21:29:16 ----D---- C:\Windows\AppReadiness
2017-01-06 21:29:15 ----HD---- C:\Program Files\WindowsApps
2017-01-06 21:23:33 ----D---- C:\Windows\CbsTemp
2017-01-06 21:18:16 ----D---- C:\Windows\system32\MRT
2017-01-06 21:18:09 ----AC---- C:\Windows\system32\MRT.exe
2017-01-06 20:29:18 ----D---- C:\Windows\system32\Tasks
2017-01-06 20:20:15 ----SHD---- C:\Windows\Installer
2017-01-06 20:19:46 ----D---- C:\Windows\system32\catroot2
2017-01-06 20:19:25 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-01-06 20:16:49 ----D---- C:\Program Files\Microsoft Office 15
2017-01-06 20:05:55 ----RD---- C:\Program Files
2017-01-02 22:01:43 ----D---- C:\Windows\Tasks
2017-01-02 19:47:02 ----D---- C:\Users\Věra\AppData\Roaming\vlc
2017-01-02 19:32:46 ----D---- C:\Program Files (x86)\Opera
2017-01-02 19:31:00 ----RD---- C:\Program Files (x86)
2016-11-09 23:52:25 ----RD---- C:\Windows\ToastData
2016-11-09 23:52:13 ----D---- C:\Program Files\Internet Explorer
2016-11-09 23:52:13 ----D---- C:\Program Files (x86)\Internet Explorer
2016-11-09 23:52:12 ----D---- C:\Windows\SYSWOW64\migration
2016-11-09 23:52:11 ----D---- C:\Windows\system32\migration
2016-10-28 02:22:26 ----N---- C:\Windows\system32\MpSigStub.exe
2016-10-17 15:54:19 ----SD---- C:\Windows\system32\CompatTel
2016-10-17 15:54:19 ----D---- C:\Windows\system32\appraiser
2016-10-17 15:54:14 ----D---- C:\Windows
2016-10-16 17:33:53 ----D---- C:\Windows\Logs
2016-10-12 22:27:04 ----D---- C:\Windows\system32\Boot
2016-10-12 22:27:00 ----D---- C:\Windows\apppatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 MBI;@oem12.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\Windows\System32\drivers\MBI.sys [2014-01-23 29464]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 vrvd5;vrvd5; C:\Windows\system32\DRIVERS\vrvd5.sys [2015-12-25 13344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2016-08-13 71680]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2014-10-10 158968]
R3 clwvd;@oem21.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 dtlitescsibus;@oem67.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-07-08 30264]
R3 GPIO;@oem14.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\Windows\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-02-18 4222976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-01-15 3837144]
R3 IntcDAud;@oem7.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-02-18 450520]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 RSP2STOR;@oem16.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
R3 RTL8168;@oem15.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-01-28 839896]
R3 RTWlanE;@oem6.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2014-03-22 3379416]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-12-13 31472]
R3 SynTP;@oem18.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-12-13 542448]
R3 TXEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\Windows\System32\drivers\TXEIx64.sys [2014-01-15 88592]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2016-08-13 38912]
S0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 dg_ssudbus;@oem79.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-07-22 130688]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 nmwcd;@oem68.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;@oem72.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 rssasnt;rssasnt; \??\C:\Users\Public\Documents\RSupport\rcc50\rssas64.sys []
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 ssudmdm;@oem81.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-07-22 164992]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2009-11-18 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-11-01 3042032]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2014-10-01 1349576]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2016-12-07 31776]
R2 HPWMISVC;HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [2015-06-29 602888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-01 733696]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2014-01-08 290520]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-10-20 50864]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-02-18 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-01 822232]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2014-10-29 38792]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}]/64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptatemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Re: Velmi pomalý PC

#7 Příspěvek od r0ach »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Věra at 2017-01-08 23:14:58
Microsoft Windows 8.1 s aplikací Bing
System drive C: has 115 GB (25%) free of 458 GB
Total RAM: 3982 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:15:05, on 8. 1. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Věra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
O4 - HKCU\..\Run: [MK LOL] "C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe" -auto
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9123 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 957633540896
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {c6aa1cfb-a79b-41c8-ae1209db31ce1dc6}
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"

C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskhostex.exe
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --profile-directory="Profile 1"
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Věra\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=54.0.2840.99 --handshake-handle=0x120
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 568 572 580 65536 576
"C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/ClientSideDetectionModel/Model0/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/MaterialDesignUserManager/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Default/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,15,16,17,20,34,51,60 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3408 --gpu-driver-date=1-20-2014 --mojo-application-channel-token=D08F8E3E9433729A39FED7133C223111 --mojo-platform-channel-handle=1124 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"

"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/MaterialDesignUserManager/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Default/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=A4F128E7E86F82AC75876E1262CEAC23 --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=A4F128E7E86F82AC75876E1262CEAC23 --channel="3892.0.791330368\269771957" --mojo-platform-channel-handle=2024 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,NonValidatingReloadOnNormalReload<NonValidatingReloadOnNormalReload,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/MaterialDesignUserManager/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/NonValidatingReloadOnNormalReload/Enabled2/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Default/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_67/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=91850B9E26D50A23445D912ECDE4A7D9 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553 --mojo-application-channel-token=91850B9E26D50A23445D912ECDE4A7D9 --channel="3892.2.78254179\897797131" --mojo-platform-channel-handle=2536 /prefetch:1
"C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe"

"C:\Users\Věra\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\HPCeeScheduleForVěra.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForVěra (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-10-11 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-05 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-11-01 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-05 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21 440712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21 416320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-02-18 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-02-18 771568]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-02-18 770544]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-01-14 7510896]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-12-13 2803440]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5595336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MK LOL"=C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe [2015-04-01 1092296]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-05-08 8322328]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2011-10-30 571392]
"HPMessageService"=C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [2015-06-29 653576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2014-02-18 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2017-01-08 23:10:54 ----D---- C:\_OTM
2017-01-06 21:30:14 ----D---- C:\AdwCleaner
2017-01-06 21:15:52 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll
2017-01-06 21:15:51 ----A---- C:\Windows\system32\aspnet_counters.dll
2017-01-06 21:15:35 ----A---- C:\Windows\SYSWOW64\msvcp120_clr0400.dll
2017-01-06 21:15:35 ----A---- C:\Windows\system32\msvcp120_clr0400.dll
2017-01-06 21:15:28 ----A---- C:\Windows\SYSWOW64\msvcr120_clr0400.dll
2017-01-06 21:15:28 ----A---- C:\Windows\system32\msvcr120_clr0400.dll
2017-01-06 20:27:40 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2017-01-06 20:27:40 ----A---- C:\Windows\SYSWOW64\GlobCollationHost.dll
2017-01-06 20:27:40 ----A---- C:\Windows\system32\Windows.Globalization.dll
2017-01-06 20:27:40 ----A---- C:\Windows\system32\mshtml.dll
2017-01-06 20:27:40 ----A---- C:\Windows\system32\GlobCollationHost.dll
2017-01-06 20:27:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-01-06 20:27:37 ----A---- C:\Windows\system32\ieframe.dll
2017-01-06 20:27:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-01-06 20:27:34 ----A---- C:\Windows\system32\jscript9.dll
2017-01-06 20:27:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-01-06 20:27:32 ----A---- C:\Windows\system32\win32k.sys
2017-01-06 20:27:31 ----A---- C:\Windows\system32\rdpcorets.dll
2017-01-06 20:27:29 ----A---- C:\Windows\SYSWOW64\msi.dll
2017-01-06 20:27:28 ----A---- C:\Windows\system32\wininet.dll
2017-01-06 20:27:28 ----A---- C:\Windows\system32\msi.dll
2017-01-06 20:27:28 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-01-06 20:27:27 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-01-06 20:27:27 ----A---- C:\Windows\system32\authui.dll
2017-01-06 20:27:26 ----A---- C:\Windows\SYSWOW64\authui.dll
2017-01-06 20:27:26 ----A---- C:\Windows\system32\crypt32.dll
2017-01-06 20:27:25 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2017-01-06 20:27:25 ----A---- C:\Windows\system32\drivers\http.sys
2017-01-06 20:27:25 ----A---- C:\Windows\system32\drivers\cmimcext.sys
2017-01-06 20:27:24 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2017-01-06 20:27:24 ----A---- C:\Windows\system32\gdi32.dll
2017-01-06 20:27:24 ----A---- C:\Windows\system32\drivers\refs.sys
2017-01-06 20:27:24 ----A---- C:\Windows\system32\drivers\cng.sys
2017-01-06 20:27:23 ----A---- C:\Windows\system32\wintrust.dll
2017-01-06 20:27:23 ----A---- C:\Windows\system32\drivers\spaceport.sys
2017-01-06 20:27:23 ----A---- C:\Windows\system32\drivers\clfs.sys
2017-01-06 20:27:23 ----A---- C:\Windows\system32\dnsapi.dll
2017-01-06 20:27:22 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2017-01-06 20:27:22 ----A---- C:\Windows\system32\user32.dll
2017-01-06 20:27:22 ----A---- C:\Windows\system32\drivers\storport.sys
2017-01-06 20:27:22 ----A---- C:\Windows\system32\bcrypt.dll
2017-01-06 20:27:21 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\TpmTasks.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\shsetup.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\d3d10level9.dll
2017-01-06 20:27:21 ----A---- C:\Windows\system32\ActionQueue.dll
2017-01-06 20:27:20 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2017-01-06 20:27:20 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2017-01-06 20:27:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-01-06 20:27:19 ----A---- C:\Windows\system32\apisetschema.dll
2017-01-06 20:27:18 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-01-06 20:27:17 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2017-01-06 20:27:17 ----A---- C:\Windows\system32\urlmon.dll
2017-01-06 20:27:16 ----A---- C:\Windows\SYSWOW64\certcli.dll
2017-01-06 20:27:16 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-01-06 20:27:16 ----A---- C:\Windows\system32\certcli.dll
2017-01-06 20:27:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\vbscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\msfeeds.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\jscript.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\inetcomm.dll
2017-01-06 20:27:14 ----A---- C:\Windows\system32\ieapfltr.dll
2017-01-06 20:27:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-01-06 20:27:13 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-01-06 20:05:55 ----D---- C:\rsit
2017-01-06 20:05:55 ----D---- C:\Program Files\trend micro
2017-01-02 19:31:00 ----D---- C:\Program Files (x86)\GUME232.tmp
2017-01-02 19:31:00 ----A---- C:\Program Files (x86)\GUTE243.tmp
2016-11-13 13:19:49 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-11-09 19:30:44 ----A---- C:\Windows\system32\diagtrack.dll
2016-11-09 19:30:42 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-11-09 19:30:41 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2016-11-09 19:30:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-11-09 19:30:40 ----A---- C:\Windows\system32\iertutil.dll
2016-11-09 19:30:39 ----A---- C:\Windows\system32\ole32.dll
2016-11-09 19:30:39 ----A---- C:\Windows\system32\lsasrv.dll
2016-11-09 19:30:37 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-11-09 19:30:35 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2016-11-09 19:30:35 ----A---- C:\Windows\SYSWOW64\msdtcprx.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\win32spl.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\SessEnv.dll
2016-11-09 19:30:35 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2016-11-09 19:30:34 ----A---- C:\Windows\system32\vmrdvcore.dll
2016-11-09 19:30:34 ----A---- C:\Windows\system32\msdtcprx.dll
2016-11-09 19:30:33 ----A---- C:\Windows\system32\msctf.dll
2016-11-09 19:30:33 ----A---- C:\Windows\system32\mfsvr.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\pdh.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\msv1_0.dll
2016-11-09 19:30:32 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2016-11-09 19:30:31 ----A---- C:\Windows\SYSWOW64\msctf.dll
2016-11-09 19:30:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-11-09 19:30:31 ----A---- C:\Windows\system32\atmfd.dll
2016-11-09 19:30:30 ----A---- C:\Windows\SYSWOW64\pdh.dll
2016-11-09 19:30:30 ----A---- C:\Windows\system32\drivers\bowser.sys
2016-11-09 19:30:30 ----A---- C:\Windows\system32\DafPrintProvider.dll
2016-11-09 19:30:29 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2016-11-09 19:30:29 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2016-11-09 19:30:29 ----A---- C:\Windows\system32\ie4uinit.exe
2016-11-09 19:30:28 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-11-09 19:30:28 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\UIAnimation.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\localspl.dll
2016-11-09 19:30:27 ----A---- C:\Windows\system32\iscsiexe.dll
2016-11-09 19:30:26 ----A---- C:\Windows\SYSWOW64\iscsiwmi.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-11-09 19:30:26 ----A---- C:\Windows\system32\iscsiwmi.dll
2016-11-09 19:30:25 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-11-09 19:30:25 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-11-09 19:30:25 ----A---- C:\Windows\system32\asycfilt.dll
2016-11-09 19:30:23 ----A---- C:\Windows\SYSWOW64\iscsidsc.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\xolehlp.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\iscsidsc.dll
2016-11-09 19:30:23 ----A---- C:\Windows\system32\dab.dll
2016-11-09 19:30:21 ----A---- C:\Windows\SYSWOW64\input.dll
2016-11-09 19:30:20 ----A---- C:\Windows\system32\input.dll
2016-11-09 19:30:17 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-11-09 19:30:17 ----A---- C:\Windows\system32\iedkcs32.dll
2016-11-09 19:30:15 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-11-09 19:30:14 ----A---- C:\Windows\SYSWOW64\xolehlp.dll
2016-11-09 19:30:14 ----A---- C:\Windows\system32\webcheck.dll
2016-11-09 19:30:12 ----A---- C:\Windows\system32\dxtrans.dll
2016-11-09 19:30:08 ----A---- C:\Windows\system32\netlogon.dll
2016-11-09 19:30:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-11-09 19:30:05 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-11-09 19:30:05 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-11-09 19:30:05 ----A---- C:\Windows\system32\mshtmled.dll
2016-11-09 19:30:04 ----A---- C:\Windows\system32\iepeers.dll
2016-11-09 19:30:03 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2016-11-09 19:30:03 ----A---- C:\Windows\system32\atmlib.dll
2016-11-09 19:30:02 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-10-16 16:41:31 ----A---- C:\Windows\system32\appraiser.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\aeinv.dll
2016-10-16 16:41:31 ----A---- C:\Windows\system32\acmigration.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\generaltel.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\devinv.dll
2016-10-16 16:41:30 ----A---- C:\Windows\system32\aepic.dll
2016-10-16 16:41:29 ----A---- C:\Windows\system32\invagent.dll
2016-10-16 16:41:29 ----A---- C:\Windows\system32\centel.dll
2016-10-16 16:41:24 ----A---- C:\Windows\system32\shell32.dll
2016-10-16 16:41:22 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-10-16 16:41:20 ----A---- C:\Windows\system32\twinui.dll
2016-10-16 16:41:19 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-10-16 16:41:18 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-10-16 16:41:18 ----A---- C:\Windows\explorer.exe
2016-10-16 16:41:17 ----A---- C:\Windows\SYSWOW64\RestoreOptIn.exe
2016-10-16 16:41:17 ----A---- C:\Windows\system32\RestoreOptIn.exe
2016-10-12 17:42:46 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2016-10-12 17:42:46 ----A---- C:\Windows\system32\actxprxy.dll
2016-10-12 17:42:45 ----A---- C:\Windows\system32\wmp.dll
2016-10-12 17:42:44 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-10-12 17:42:39 ----A---- C:\Windows\system32\esent.dll
2016-10-12 17:42:38 ----A---- C:\Windows\SYSWOW64\esent.dll
2016-10-12 17:42:35 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2016-10-12 17:42:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-12 17:42:35 ----A---- C:\Windows\system32\d3d11.dll
2016-10-12 17:42:34 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2016-10-12 17:42:34 ----A---- C:\Windows\system32\DWrite.dll
2016-10-12 17:42:32 ----A---- C:\Windows\SYSWOW64\Windows.Media.Streaming.dll
2016-10-12 17:42:31 ----A---- C:\Windows\system32\FntCache.dll
2016-10-12 17:42:29 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2016-10-12 17:42:28 ----A---- C:\Windows\system32\ntshrui.dll
2016-10-12 17:42:27 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2016-10-12 17:42:27 ----A---- C:\Windows\system32\wbengine.exe
2016-10-12 17:42:27 ----A---- C:\Windows\system32\GdiPlus.dll
2016-10-12 17:42:27 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-12 17:42:26 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2016-10-12 17:42:26 ----A---- C:\Windows\system32\winload.exe
2016-10-12 17:42:25 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-10-12 17:42:25 ----A---- C:\Windows\system32\wmploc.DLL
2016-10-12 17:42:25 ----A---- C:\Windows\system32\drivers\parport.sys
2016-10-12 17:42:23 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2016-10-12 17:42:23 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2016-10-12 17:42:23 ----A---- C:\Windows\system32\PlayToDevice.dll
2016-10-12 17:42:21 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2016-10-12 17:42:21 ----A---- C:\Windows\system32\drivers\tm.sys
2016-10-12 17:42:20 ----A---- C:\Windows\system32\winresume.exe
2016-10-12 17:42:20 ----A---- C:\Windows\system32\rastapi.dll
2016-10-12 17:42:19 ----A---- C:\Windows\SYSWOW64\adsmsext.dll
2016-10-12 17:42:19 ----A---- C:\Windows\system32\twinui.appcore.dll
2016-10-12 17:42:19 ----A---- C:\Windows\system32\drivers\vwifimp.sys
2016-10-12 17:42:19 ----A---- C:\Windows\system32\drivers\serial.sys
2016-10-12 17:42:19 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-12 17:42:18 ----A---- C:\Windows\SYSWOW64\offreg.dll
2016-10-12 17:42:18 ----A---- C:\Windows\system32\offreg.dll
2016-10-12 17:42:18 ----A---- C:\Windows\system32\drivers\vwifibus.sys
2016-10-12 17:42:18 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-12 17:42:17 ----A---- C:\Windows\system32\drivers\serenum.sys
2016-10-12 17:42:11 ----A---- C:\Windows\system32\drivers\vwififlt.sys

======List of files/folders modified in the last 3 months======

2017-01-08 23:15:05 ----D---- C:\Windows\Temp
2017-01-08 23:15:04 ----D---- C:\Windows\Prefetch
2017-01-08 23:10:54 ----D---- C:\Windows\Tasks
2017-01-08 23:06:14 ----D---- C:\Windows\system32\sru
2017-01-06 22:23:16 ----D---- C:\Windows\Microsoft.NET
2017-01-06 22:13:17 ----D---- C:\Windows\rescache
2017-01-06 22:12:18 ----RSD---- C:\Windows\assembly
2017-01-06 22:09:03 ----SHD---- C:\System Volume Information
2017-01-06 21:56:50 ----D---- C:\Windows\system32\config
2017-01-06 21:50:04 ----RD---- C:\Windows\System32
2017-01-06 21:50:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-01-06 21:44:54 ----D---- C:\Windows\WinSxS
2017-01-06 21:44:51 ----D---- C:\Windows\SysWOW64
2017-01-06 21:44:21 ----D---- C:\Windows\system32\DriverStore
2017-01-06 21:44:04 ----D---- C:\Windows\Inf
2017-01-06 21:37:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-01-06 21:37:05 ----D---- C:\Windows\system32\wbem
2017-01-06 21:37:05 ----D---- C:\Windows\system32\oobe
2017-01-06 21:37:05 ----D---- C:\Windows\system32\drivers
2017-01-06 21:37:05 ----D---- C:\Windows\system32\cs-CZ
2017-01-06 21:34:35 ----HD---- C:\ProgramData
2017-01-06 21:29:16 ----D---- C:\Windows\AppReadiness
2017-01-06 21:29:15 ----HD---- C:\Program Files\WindowsApps
2017-01-06 21:23:33 ----D---- C:\Windows\CbsTemp
2017-01-06 21:23:32 ----D---- C:\Windows\system32\MRT
2017-01-06 21:18:09 ----AC---- C:\Windows\system32\MRT.exe
2017-01-06 20:29:18 ----D---- C:\Windows\system32\Tasks
2017-01-06 20:20:15 ----SHD---- C:\Windows\Installer
2017-01-06 20:19:46 ----D---- C:\Windows\system32\catroot2
2017-01-06 20:19:25 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-01-06 20:16:49 ----D---- C:\Program Files\Microsoft Office 15
2017-01-06 20:05:55 ----RD---- C:\Program Files
2017-01-02 19:47:02 ----D---- C:\Users\Věra\AppData\Roaming\vlc
2017-01-02 19:32:46 ----D---- C:\Program Files (x86)\Opera
2017-01-02 19:31:00 ----RD---- C:\Program Files (x86)
2016-11-09 23:52:25 ----RD---- C:\Windows\ToastData
2016-11-09 23:52:13 ----D---- C:\Program Files\Internet Explorer
2016-11-09 23:52:13 ----D---- C:\Program Files (x86)\Internet Explorer
2016-11-09 23:52:12 ----D---- C:\Windows\SYSWOW64\migration
2016-11-09 23:52:11 ----D---- C:\Windows\system32\migration
2016-10-28 02:22:26 ----N---- C:\Windows\system32\MpSigStub.exe
2016-10-17 15:54:19 ----SD---- C:\Windows\system32\CompatTel
2016-10-17 15:54:19 ----D---- C:\Windows\system32\appraiser
2016-10-17 15:54:14 ----D---- C:\Windows
2016-10-16 17:33:53 ----D---- C:\Windows\Logs
2016-10-12 22:27:04 ----D---- C:\Windows\system32\Boot
2016-10-12 22:27:00 ----D---- C:\Windows\apppatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 MBI;@oem12.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\Windows\System32\drivers\MBI.sys [2014-01-23 29464]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 vrvd5;vrvd5; C:\Windows\system32\DRIVERS\vrvd5.sys [2015-12-25 13344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2016-08-13 71680]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2014-10-10 158968]
R3 clwvd;@oem21.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 dtlitescsibus;@oem67.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-07-08 30264]
R3 GPIO;@oem14.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\Windows\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-02-18 4222976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-01-15 3837144]
R3 IntcDAud;@oem7.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2014-02-18 450520]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 RSP2STOR;@oem16.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
R3 RTL8168;@oem15.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-01-28 839896]
R3 RTWlanE;@oem6.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2014-03-22 3379416]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-12-13 31472]
R3 SynTP;@oem18.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-12-13 542448]
R3 TXEIx64;@oem11.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\Windows\System32\drivers\TXEIx64.sys [2014-01-15 88592]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2016-08-13 38912]
S0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 dg_ssudbus;@oem79.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-07-22 130688]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 nmwcd;@oem68.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;@oem72.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 rssasnt;rssasnt; \??\C:\Users\Public\Documents\RSupport\rcc50\rssas64.sys []
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 ssudmdm;@oem81.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-07-22 164992]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2009-11-18 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-11-01 3042032]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2014-10-01 1349576]
R2 HPWMISVC;HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [2015-06-29 602888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-01 733696]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2014-01-08 290520]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2016-12-07 31776]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-10-20 50864]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-02-18 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-01 822232]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2014-10-29 38792]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Re: Velmi pomalý PC

#9 Příspěvek od r0ach »

Pořád to není žádný rychlík, ale o něco to lepší je.
Ten noťas patří mamce, tak pořádně nedovedu posoudit, jak výrazná to je změna.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#10 Příspěvek od Rudy »

Ještě proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Re: Velmi pomalý PC

#11 Příspěvek od r0ach »

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 09.01.17
Čas skenování: 20:53
Logovací soubor: mb.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.5.1299
Verze komponentů: 1.0.43
Aktualizovat verzi balíku komponent: 1.0.962
Licence: Zkušební

-Systémová informace-
OS: Windows 8.1
CPU: x64
Systém souborů: NTFS
Uživatel: RUNKA\V\u00c4\u009bra

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 353519
Uplynulý čas: 13 min, 35 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 2
PUP.Optional.Carambis, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Driver Updater, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, HKU\S-1-5-21-3609973133-1476983453-1870249020-1001\SOFTWARE\CARAMBIS\Driver Updater, Žádná uživatelská akce, [2330], [351310],1.0.962

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 14
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\crashereports, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\drivers, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\License, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\temp, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\USERS\V\u00c4\u009bRA\APPDATA\ROAMING\Carambis\Driver Updater, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\imageformats, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\Win32, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\x64, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\PROGRAM FILES (X86)\CARAMBIS\DRIVER UPDATER, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CARAMBIS\DRIVER UPDATER, Žádná uživatelská akce, [2330], [351670],1.0.962
PUP.Optional.RazorWeb, C:\Users\V\u00c4\u009bra\AppData\Roaming\Opera Software\Opera Stable\Extensions\moegpkkihomibfjeklojmdllpodpicmg\1.0.5664.30385_0, Žádná uživatelská akce, [8810], [301967],1.0.962
PUP.Optional.RazorWeb, C:\USERS\V\u00c4\u009bRA\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\EXTENSIONS\MOEGPKKIHOMIBFJEKLOJMDLLPODPICMG, Žádná uživatelská akce, [8810], [301967],1.0.962

Soubor: 36
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_DE.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_EN.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_ES.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_FR.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_IT.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_JP.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\data\lang\crashrpt_lang_RU.ini, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\log.txt, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\Users\V\u00c4\u009bra\AppData\Roaming\Carambis\Driver Updater\settings.dat, Žádná uživatelská akce, [2330], [351300],1.0.962
PUP.Optional.Carambis, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\DRIVER UPDATER.LNK, Žádná uživatelská akce, [2330], [351672],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\imageformats\qico4.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\Win32\Installer.exe, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\x64\Installer.exe, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\CrashRpt.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\CrashSender.exe, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\dbghelp.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\dupdater.exe, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\htmlayout.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\libcurl.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\QtCore4.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\QtGui4.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\QtNetwork4.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\QtXml4.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\sqlite3.dll, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\Program Files (x86)\Carambis\Driver Updater\uninstall.exe, Žádná uživatelská akce, [2330], [351295],1.0.962
PUP.Optional.Carambis, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carambis\Driver Updater\Driver Updater.lnk, Žádná uživatelská akce, [2330], [351670],1.0.962
PUP.Optional.Carambis, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carambis\Driver Updater\Uninstall.lnk, Žádná uživatelská akce, [2330], [351670],1.0.962
PUP.Optional.APNToolBar, C:\USERS\V\u00c4\u009bRA\DESKTOP\DRIVERINSTALL.EXE, Žádná uživatelská akce, [8362], [76243],1.0.962
PUP.Optional.Carambis, C:\USERS\PUBLIC\DESKTOP\DRIVER UPDATER.LNK, Žádná uživatelská akce, [2330], [351666],1.0.962
PUP.Optional.RazorWeb, C:\USERS\V\u00c4\u009bRA\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\EXTENSIONS\MOEGPKKIHOMIBFJEKLOJMDLLPODPICMG\1.0.5664.30385_0\MANIFEST.JSON, Žádná uživatelská akce, [8810], [301967],1.0.962
PUP.Optional.RazorWeb, C:\Users\V\u00c4\u009bra\AppData\Roaming\Opera Software\Opera Stable\Extensions\moegpkkihomibfjeklojmdllpodpicmg\1.0.5664.30385_0\background.js, Žádná uživatelská akce, [8810], [301967],1.0.962
PUP.Optional.RazorWeb, C:\Users\V\u00c4\u009bra\AppData\Roaming\Opera Software\Opera Stable\Extensions\moegpkkihomibfjeklojmdllpodpicmg\1.0.5664.30385_0\content.js, Žádná uživatelská akce, [8810], [301967],1.0.962
PUP.Optional.RazorWeb, C:\Users\V\u00c4\u009bra\AppData\Roaming\Opera Software\Opera Stable\Extensions\moegpkkihomibfjeklojmdllpodpicmg\1.0.5664.30385_0\icon.png, Žádná uživatelská akce, [8810], [301967],1.0.962
PUP.Optional.RazorWeb, C:\Users\V\u00c4\u009bra\AppData\Roaming\Opera Software\Opera Stable\Extensions\moegpkkihomibfjeklojmdllpodpicmg\1.0.5664.30385_0\manifest.json, Žádná uživatelská akce, [8810], [301967],1.0.962
PUP.Optional.APNToolBar, C:\USERS\V\u00c4\u009bRA\DOWNLOADS\WWW.X-DRIVERS.RU_QUALCOMM_QPST_2.7.323_(2008-09-19).ZIP, Žádná uživatelská akce, [8362], [76243],1.0.962
PUP.Optional.Carambis, C:\WINDOWS\SYSTEM32\TASKS\CarambisDriverUpdaterUACDisablingTask, Žádná uživatelská akce, [2330], [351307],1.0.962

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#12 Příspěvek od Rudy »

Smažte všechny nálezy MBAM.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
r0ach
Návštěvník
Návštěvník
Příspěvky: 69
Registrován: 19 bře 2013 01:58

Re: Velmi pomalý PC

#13 Příspěvek od r0ach »

Smazano
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Velmi pomalý PC

#14 Příspěvek od Rudy »

Zlepšila se rychlost?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“