Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pro Rudy, prosím o ko logu, Lubův pc

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Pro Rudy, prosím o ko logu, Lubův pc

#1 Příspěvek od jaruneczka »

Logfile of random's system information tool 1.16 (written by random/random)
Run by Lubomír at 2017-11-23 15:07:14
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 664 GB (87%) free of 763 GB
Total RAM: 4087 MB (54% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:07:20, on 23.11.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18838)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files\trend micro\Lubomír_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: JMB36X - Unknown owner - C:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7891 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\XSrvSetup.exe
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe "1529308335647009634-6679005294259671361313361528942793206329136207694692379
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3638560227-2113916793-404310677-10003_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3638560227-2113916793-404310677-10003 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Lubomír\Desktop\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleaner Update - C:\Program Files\CCleaner\CCUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\Driver Booster Scheduler - C:\Program Files (x86)\IObit\Driver Booster\5.0.3\Scheduler.exe /scheduler
C:\Windows\system32\tasks\Driver Booster SkipUAC (Lubomír) - C:\Program Files (x86)\IObit\Driver Booster\5.0.3\DriverBooster.exe /skipuac
C:\Windows\system32\tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
C:\Windows\system32\tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe"
C:\Windows\system32\tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
C:\Windows\system32\tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
C:\Windows\system32\tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe --logon
C:\Windows\system32\tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\{011C0EF4-048E-45BA-BAC5-625FE23D9A3F} - C:\Windows\system32\pcalua.exe -a "C:\Users\Lubomír\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OBVHIZPQ\kis15.0.1.415abcs_7101[1].exe" -d C:\Users\Lubomír\Desktop
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-3638560227-2113916793-404310677-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\SmartRecovery\SRCreate - %windir%\system32\rundll32.exe CommCmd.dll,RunScript "%ProgramFiles%\GIGABYTE\Smart6\Recovery\SrCmdCLR.exe" -c 1
C:\Windows\system32\tasks\Microsoft\Windows\SmartRecovery\SRFilter - %windir%\system32\rundll32.exe CommCmd.dll,RunScript "%ProgramFiles%\GIGABYTE\Smart6\Recovery\SRFilter.exe" /GBSMART6 -kdl
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate - C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe -task

=========Mozilla firefox=========

ProfilePath - C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.187 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.187 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll


C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\searchplugins\
bing.xml

C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\addons.json
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Skype - extension - {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\extensions.json
IBM Security Rapport - webextension - rapportext@trusteer.com -
Adblock Plus - webextension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} -
Application Update Service Helper - extension - aushelper@mozilla.org -
Multi-process staged rollout - extension - e10srollout@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Firefox Screenshots - extension - screenshots@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Activity Stream - extension - activity-stream@mozilla.org -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Skype - extension - {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -

C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.187 - C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22 857792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22 755392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Security\ecmds.exe [2017-11-02 323328]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-11-08 10024624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27 1171480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-11-08 10024624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2005-02-17 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe -NoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC7302_Monitor]
C:\Windows\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Windows.old\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-09-02 18381792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
C:\Windows\system32\nvspcap64.dll [2017-10-11 1796216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Lubomír^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoSimpleNetIDList"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

====== File associations ======

.bat - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.cmd - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.inf - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.inf - install - %SystemRoot%\SysWow64\InfDefaultInstall.exe "%1"
.ini - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.reg - edit - %SystemRoot%\SysWow64\notepad.exe "%1"
.txt - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

====== List of files/folders created in the last 1 month ======

2017-11-23 15:07:14 ----D---- C:\rsit
2017-11-23 12:12:43 ----D---- C:\ZÁLOHY
2017-11-23 12:03:10 ----D---- C:\ProgramData\ESET
2017-11-23 12:03:10 ----D---- C:\Program Files\ESET
2017-11-23 11:59:21 ----D---- C:\Users\Lubomír\AppData\Roaming\Wise Euask
2017-11-23 08:44:41 ----D---- C:\Windows\CheckSur
2017-11-23 07:06:32 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-11-23 06:39:31 ----D---- C:\Program Files (x86)\IObit
2017-11-22 15:07:59 ----D---- C:\Program Files\CCleaner
2017-11-22 14:50:54 ----D---- C:\ProgramData\MB2Migration
2017-11-22 08:20:21 ----D---- C:\ProgramData\Malwarebytes
2017-11-15 20:17:06 ----D---- C:\ProgramData\GlarySoft
2017-11-15 20:10:41 ----D---- C:\Users\Lubomír\AppData\Roaming\DiskDefrag
2017-11-15 19:16:07 ----A---- C:\Windows\system32\mshtml.dll
2017-11-15 19:16:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-11-15 19:16:06 ----A---- C:\Windows\system32\ieframe.dll
2017-11-15 19:16:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-11-15 19:16:05 ----A---- C:\Windows\system32\jscript9.dll
2017-11-15 19:16:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-11-15 19:16:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-11-15 19:16:04 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-11-15 19:16:04 ----A---- C:\Windows\system32\wininet.dll
2017-11-15 19:16:04 ----A---- C:\Windows\system32\win32k.sys
2017-11-15 19:16:04 ----A---- C:\Windows\system32\iertutil.dll
2017-11-15 19:16:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\wmp.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\urlmon.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\jscript.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-11-15 19:16:02 ----A---- C:\Windows\system32\tquery.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\vbscript.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\t2embed.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\Query.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\msfeeds.dll
2017-11-15 19:16:00 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-11-15 19:16:00 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-11-15 19:16:00 ----A---- C:\Windows\system32\webcheck.dll
2017-11-15 19:16:00 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 19:16:00 ----A---- C:\Windows\system32\iedkcs32.dll
2017-11-15 19:16:00 ----A---- C:\Windows\system32\drivers\luafv.sys
2017-11-15 19:16:00 ----A---- C:\Windows\system32\atmfd.dll
2017-11-15 19:15:59 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-11-15 19:15:59 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\mssrch.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\ieui.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\ie4uinit.exe
2017-11-15 19:15:58 ----A---- C:\Windows\system32\mssvp.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\mssph.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\mshtmled.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\ieapfltr.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\dxtrans.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\dxtmsft.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\drivers\usbport.sys
2017-11-15 19:15:57 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-11-15 19:15:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-11-15 19:15:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-11-15 19:15:57 ----A---- C:\Windows\system32\msrating.dll
2017-11-15 19:15:57 ----A---- C:\Windows\system32\jsproxy.dll
2017-11-15 19:15:57 ----A---- C:\Windows\system32\jscript9diag.dll
2017-11-15 19:15:56 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-11-15 19:15:56 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-11-15 19:15:56 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-11-15 19:15:56 ----A---- C:\Windows\system32\occache.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\mssprxy.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\mssphtb.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\mssitlb.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\inseng.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\ieUnatt.exe
2017-11-15 19:15:55 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-11-15 19:15:54 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-11-15 19:15:54 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-11-15 19:15:54 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\lpk.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\iesetup.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\drivers\usbhub.sys
2017-11-15 19:15:53 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-11-15 19:15:53 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-11-15 19:15:53 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-11-15 19:15:53 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 19:15:53 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\spwmp.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-11-15 19:15:52 ----A---- C:\Windows\system32\msshooks.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\msscntrs.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\iernonce.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-11-15 19:15:52 ----A---- C:\Windows\system32\fontsub.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\dciman32.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\lpk.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2017-11-15 19:15:51 ----A---- C:\Windows\system32\dxmasf.dll
2017-11-15 19:15:51 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-11-15 19:15:50 ----A---- C:\Windows\system32\wmploc.DLL
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbohci.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbehci.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbd.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\atmlib.dll
2017-11-15 19:15:49 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 19:00:51 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2017-11-15 19:00:12 ----A---- C:\Windows\system32\WdfCoInstaller01011.dll
2017-11-15 19:00:12 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2017-11-15 18:57:25 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-11-15 18:57:25 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-11-08 17:51:32 ----A---- C:\Windows\system32\appraiser.dll
2017-11-08 17:51:32 ----A---- C:\Windows\system32\aitstatic.exe
2017-11-08 17:51:32 ----A---- C:\Windows\system32\acmigration.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\invagent.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\generaltel.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\devinv.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-11-08 17:51:31 ----A---- C:\Windows\system32\centel.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\aepic.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\aeinv.dll
2017-11-02 09:02:26 ----A---- C:\Windows\system32\drivers\eamonm.sys

====== List of files/folders modified in the last 1 month ======

2017-11-23 15:07:18 ----D---- C:\Program Files\trend micro
2017-11-23 15:06:08 ----D---- C:\Windows\Temp
2017-11-23 13:00:35 ----SHD---- C:\System Volume Information
2017-11-23 12:46:37 ----D---- C:\Windows\system32\config
2017-11-23 12:46:16 ----D---- C:\Users\Lubomír\AppData\Roaming\Wise Disk Cleaner
2017-11-23 12:45:10 ----D---- C:\Windows\system32\catroot2
2017-11-23 12:45:10 ----D---- C:\Windows\System32
2017-11-23 12:45:10 ----D---- C:\Windows\inf
2017-11-23 12:45:10 ----D---- C:\Windows
2017-11-23 12:42:40 ----SHD---- C:\Windows\Installer
2017-11-23 12:42:39 ----SHD---- C:\Config.Msi
2017-11-23 12:42:26 ----D---- C:\Windows\system32\Tasks
2017-11-23 12:41:02 ----D---- C:\Program Files (x86)\Internet Explorer
2017-11-23 12:38:48 ----D---- C:\Windows\SysWOW64
2017-11-23 12:32:23 ----RD---- C:\Program Files (x86)
2017-11-23 12:27:09 ----D---- C:\Program Files (x86)\OpenOffice 4
2017-11-23 12:27:07 ----RSD---- C:\Windows\assembly
2017-11-23 12:25:56 ----RSD---- C:\Windows\Fonts
2017-11-23 12:25:26 ----D---- C:\ProgramData\NVIDIA
2017-11-23 12:20:23 ----D---- C:\Users\Lubomír\AppData\Roaming\Skype
2017-11-23 12:17:21 ----D---- C:\Users\Lubomír\AppData\Roaming\IrfanView
2017-11-23 12:17:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-23 12:11:04 ----D---- C:\Windows\SoftwareDistribution
2017-11-23 12:09:51 ----D---- C:\Windows\debug
2017-11-23 12:04:06 ----D---- C:\Windows\system32\drivers
2017-11-23 12:03:10 ----RD---- C:\Program Files
2017-11-23 12:03:10 ----HD---- C:\ProgramData
2017-11-23 10:17:37 ----D---- C:\Windows\winsxs
2017-11-23 10:07:36 ----D---- C:\AdwCleaner
2017-11-23 09:49:22 ----D---- C:\Users\Lubomír\AppData\Roaming\IObit
2017-11-23 09:44:45 ----D---- C:\Windows\Tasks
2017-11-23 09:25:42 ----D---- C:\ProgramData\Package Cache
2017-11-23 09:25:41 ----D---- C:\Program Files\Intel
2017-11-23 07:55:18 ----D---- C:\Windows\Prefetch
2017-11-23 07:07:24 ----D---- C:\ProgramData\Intel
2017-11-23 06:42:59 ----D---- C:\Windows\system32\DriverStore
2017-11-23 06:40:02 ----D---- C:\ProgramData\ProductData
2017-11-22 14:27:20 ----D---- C:\Windows\system32\drivers\UMDF
2017-11-16 17:04:58 ----SD---- C:\ProgramData\Microsoft
2017-11-16 16:51:49 ----D---- C:\ProgramData\NVIDIA Corporation
2017-11-16 16:51:47 ----D---- C:\Program Files\NVIDIA Corporation
2017-11-16 16:51:47 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-11-16 16:43:54 ----RD---- C:\Users
2017-11-16 16:41:11 ----D---- C:\Users\Lubomír\AppData\Roaming\WiseUpdate
2017-11-16 15:57:15 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-11-15 23:20:45 ----D---- C:\Windows\rescache
2017-11-15 19:18:28 ----D---- C:\Windows\system32\catroot
2017-11-15 19:18:11 ----D---- C:\Windows\SYSWOW64\migration
2017-11-15 19:18:11 ----D---- C:\Windows\SYSWOW64\en-US
2017-11-15 19:18:11 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-11-15 19:18:11 ----D---- C:\Program Files\Windows Media Player
2017-11-15 19:18:11 ----D---- C:\Program Files\Internet Explorer
2017-11-15 19:18:11 ----D---- C:\Program Files (x86)\Windows Media Player
2017-11-15 19:18:10 ----D---- C:\Windows\system32\migration
2017-11-15 19:18:10 ----D---- C:\Windows\system32\en-US
2017-11-15 19:18:10 ----D---- C:\Windows\system32\drivers\cs-CZ
2017-11-15 19:18:10 ----D---- C:\Windows\system32\cs-CZ
2017-11-15 19:11:19 ----D---- C:\Users\Lubomír\AppData\Roaming\Mozilla
2017-11-15 19:11:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-15 19:10:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-11-15 19:10:16 ----D---- C:\Windows\system32\Macromed
2017-11-15 19:10:12 ----D---- C:\Windows\SYSWOW64\Macromed
2017-11-15 19:04:54 ----D---- C:\Windows\Minidump
2017-11-15 18:57:25 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-11-15 18:06:49 ----D---- C:\Windows\system32\MRT
2017-11-15 18:03:12 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-11-15 18:02:44 ----AC---- C:\Windows\system32\MRT.exe
2017-11-08 17:52:11 ----D---- C:\Windows\system32\appraiser
2017-11-08 17:52:11 ----D---- C:\Windows\AppPatch

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-09-19 107336]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-10-02 537112]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-11-21 632168]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-11-21 28008]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2015-02-15 123704]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2017-09-28 253912]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2017-09-28 507960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-11-02 133856]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-10-09 180088]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-09-19 81888]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-09-19 61040]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-09-19 106312]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-03-16 27552]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2017-09-28 384312]
R1 RapportCerberus_1804077;RapportCerberus_1804077; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804077.sys [2017-10-02 1271448]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2017-09-28 585432]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2017-09-28 610616]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-09-19 50744]
R2 PDFsFilter;PDFsFilter; C:\Windows\system32\DRIVERS\PDFsFilter.sys [2015-12-09 83224]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2017-11-23 25640]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-09-02 5826560]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2017-11-15 50808]
R3 nvvhci;NVVHCI Enumerator Service; C:\Windows\system32\DRIVERS\nvvhci.sys [2017-07-26 57792]
R3 PAC7302;eMessenger 310; C:\Windows\system32\DRIVERS\PAC7302.SYS [2009-04-28 532480]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2017-11-15 1077216]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2017-11-15 51808]
S3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-08 32840]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2015-01-21 30528]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-06-10 57344]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-10-11 30328]
S3 RapportIaso;RapportIaso; C:\Windows\system32\drivers\RapportIaso.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; %windir%\system32\svchost.exe -k apphost;"ServiceDll" = %windir%\system32\inetsrv\apphostsvc.dll
R2 DES2 Service;DES2 Service for Energy Saving.; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2009-06-17 68136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-11-02 1932336]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-21 15720]
R2 JMB36X;JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [2010-09-07 72280]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518264]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-10-11 460920]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2017-09-28 2350064]
R2 Smart TimeLock;Smart TimeLock Service; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-11-14 426040]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-05-23 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-15 272384]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-10-14 116224]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-11-15 194000]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518264]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; %windir%\system32\svchost.exe -k iissvcs;"ServiceDll" = %windir%\system32\inetsrv\iisw3adm.dll
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-01-21 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118192
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy, prosím o ko logu, Lubův pc

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118192
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy, prosím o ko logu, Lubův pc

#3 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\searchplugins\bing.xml

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]/64

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy, prosím o ko logu, Lubův pc

#4 Příspěvek od jaruneczka »

Logfile of random's system information tool 1.16 (written by random/random)
Run by Lubomír at 2017-11-23 21:36:04
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 664 GB (87%) free of 763 GB
Total RAM: 4087 MB (55% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:36:34, on 23.11.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18838)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\IObit\Driver Booster\5.0.3\Scheduler.exe
C:\Program Files\trend micro\Lubomír_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: JMB36X - Unknown owner - C:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7956 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\SysWOW64\XSrvSetup.exe
C:\Windows\system32\msiexec.exe /V
C:\Windows\system32\taskeng.exe
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe "-480853110729784872-20504337781355120571433361740-481325444-1163512102-1691775135
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k swprv
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
C:\Windows\system32\taskeng.exe
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files (x86)\IObit\Driver Booster\5.0.3\Scheduler.exe" /scheduler
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\Lubomír\Desktop\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleaner Update - C:\Program Files\CCleaner\CCUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\Driver Booster Scheduler - C:\Program Files (x86)\IObit\Driver Booster\5.0.3\Scheduler.exe /scheduler
C:\Windows\system32\tasks\Driver Booster SkipUAC (Lubomír) - C:\Program Files (x86)\IObit\Driver Booster\5.0.3\DriverBooster.exe /skipuac
C:\Windows\system32\tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
C:\Windows\system32\tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe"
C:\Windows\system32\tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
C:\Windows\system32\tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
C:\Windows\system32\tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe --logon
C:\Windows\system32\tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\{011C0EF4-048E-45BA-BAC5-625FE23D9A3F} - C:\Windows\system32\pcalua.exe -a "C:\Users\Lubomír\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OBVHIZPQ\kis15.0.1.415abcs_7101[1].exe" -d C:\Users\Lubomír\Desktop
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-3638560227-2113916793-404310677-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\SmartRecovery\SRCreate - %windir%\system32\rundll32.exe CommCmd.dll,RunScript "%ProgramFiles%\GIGABYTE\Smart6\Recovery\SrCmdCLR.exe" -c 1
C:\Windows\system32\tasks\Microsoft\Windows\SmartRecovery\SRFilter - %windir%\system32\rundll32.exe CommCmd.dll,RunScript "%ProgramFiles%\GIGABYTE\Smart6\Recovery\SRFilter.exe" /GBSMART6 -kdl
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate - C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe -task

=========Mozilla firefox=========

ProfilePath - C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.187 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 27.0.0.187 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll


C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\addons.json
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Skype - extension - {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\extensions.json
IBM Security Rapport - webextension - rapportext@trusteer.com -
Adblock Plus - webextension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} -
Application Update Service Helper - extension - aushelper@mozilla.org -
Multi-process staged rollout - extension - e10srollout@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Firefox Screenshots - extension - screenshots@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Activity Stream - extension - activity-stream@mozilla.org -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Skype - extension - {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -

C:\Users\Lubomír\AppData\Roaming\Mozilla\Firefox\Profiles\goqsilu7.default-1426238077694\pluginreg.dat
Plugin - Shockwave Flash - 27.0.0.187 - C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll

======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22 857792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22 755392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Security\ecmds.exe [2017-11-02 323328]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-11-08 10024624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27 1171480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-11-08 10024624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2005-02-17 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe -NoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC7302_Monitor]
C:\Windows\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Windows.old\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-09-02 18381792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
C:\Windows\system32\nvspcap64.dll [2017-10-11 1796216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Lubomír^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoSimpleNetIDList"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

====== File associations ======

.bat - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.cmd - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.inf - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.inf - install - %SystemRoot%\SysWow64\InfDefaultInstall.exe "%1"
.ini - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.js - edit - C:\Windows\SysWow64\Notepad.exe %1
.js - open - C:\Windows\SysWow64\WScript.exe "%1" %*
.reg - edit - %SystemRoot%\SysWow64\notepad.exe "%1"
.txt - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

====== List of files/folders created in the last 1 month ======

2017-11-23 21:32:06 ----D---- C:\_OTM
2017-11-23 21:20:25 ----D---- C:\Program Files (x86)\CrystalDiskInfo
2017-11-23 17:30:42 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-11-23 15:07:14 ----D---- C:\rsit
2017-11-23 12:12:43 ----D---- C:\ZÁLOHY
2017-11-23 12:03:10 ----D---- C:\ProgramData\ESET
2017-11-23 12:03:10 ----D---- C:\Program Files\ESET
2017-11-23 11:59:21 ----D---- C:\Users\Lubomír\AppData\Roaming\Wise Euask
2017-11-23 08:44:41 ----D---- C:\Windows\CheckSur
2017-11-23 07:06:32 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-11-23 06:39:31 ----D---- C:\Program Files (x86)\IObit
2017-11-22 15:07:59 ----D---- C:\Program Files\CCleaner
2017-11-22 14:50:54 ----D---- C:\ProgramData\MB2Migration
2017-11-22 08:20:21 ----D---- C:\ProgramData\Malwarebytes
2017-11-15 20:17:06 ----D---- C:\ProgramData\GlarySoft
2017-11-15 20:10:41 ----D---- C:\Users\Lubomír\AppData\Roaming\DiskDefrag
2017-11-15 19:16:07 ----A---- C:\Windows\system32\mshtml.dll
2017-11-15 19:16:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-11-15 19:16:06 ----A---- C:\Windows\system32\ieframe.dll
2017-11-15 19:16:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-11-15 19:16:05 ----A---- C:\Windows\system32\jscript9.dll
2017-11-15 19:16:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-11-15 19:16:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-11-15 19:16:04 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-11-15 19:16:04 ----A---- C:\Windows\system32\wininet.dll
2017-11-15 19:16:04 ----A---- C:\Windows\system32\win32k.sys
2017-11-15 19:16:04 ----A---- C:\Windows\system32\iertutil.dll
2017-11-15 19:16:03 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\wmp.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\urlmon.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\jscript.dll
2017-11-15 19:16:03 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-11-15 19:16:02 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-11-15 19:16:02 ----A---- C:\Windows\system32\tquery.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-11-15 19:16:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\vbscript.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\t2embed.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\Query.dll
2017-11-15 19:16:01 ----A---- C:\Windows\system32\msfeeds.dll
2017-11-15 19:16:00 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-11-15 19:16:00 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-11-15 19:16:00 ----A---- C:\Windows\system32\webcheck.dll
2017-11-15 19:16:00 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 19:16:00 ----A---- C:\Windows\system32\iedkcs32.dll
2017-11-15 19:16:00 ----A---- C:\Windows\system32\drivers\luafv.sys
2017-11-15 19:16:00 ----A---- C:\Windows\system32\atmfd.dll
2017-11-15 19:15:59 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-11-15 19:15:59 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\mssrch.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\ieui.dll
2017-11-15 19:15:59 ----A---- C:\Windows\system32\ie4uinit.exe
2017-11-15 19:15:58 ----A---- C:\Windows\system32\mssvp.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\mssph.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\mshtmled.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\ieapfltr.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\dxtrans.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\dxtmsft.dll
2017-11-15 19:15:58 ----A---- C:\Windows\system32\drivers\usbport.sys
2017-11-15 19:15:57 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-11-15 19:15:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-11-15 19:15:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-11-15 19:15:57 ----A---- C:\Windows\system32\msrating.dll
2017-11-15 19:15:57 ----A---- C:\Windows\system32\jsproxy.dll
2017-11-15 19:15:57 ----A---- C:\Windows\system32\jscript9diag.dll
2017-11-15 19:15:56 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-11-15 19:15:56 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-11-15 19:15:56 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-11-15 19:15:56 ----A---- C:\Windows\system32\occache.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-11-15 19:15:55 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\mssprxy.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\mssphtb.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\mssitlb.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\inseng.dll
2017-11-15 19:15:55 ----A---- C:\Windows\system32\ieUnatt.exe
2017-11-15 19:15:55 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-11-15 19:15:54 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-11-15 19:15:54 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-11-15 19:15:54 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\lpk.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\iesetup.dll
2017-11-15 19:15:54 ----A---- C:\Windows\system32\drivers\usbhub.sys
2017-11-15 19:15:53 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-11-15 19:15:53 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-11-15 19:15:53 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-11-15 19:15:53 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 19:15:53 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-11-15 19:15:52 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\spwmp.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-11-15 19:15:52 ----A---- C:\Windows\system32\msshooks.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\msscntrs.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\iernonce.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-11-15 19:15:52 ----A---- C:\Windows\system32\fontsub.dll
2017-11-15 19:15:52 ----A---- C:\Windows\system32\dciman32.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\lpk.dll
2017-11-15 19:15:51 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2017-11-15 19:15:51 ----A---- C:\Windows\system32\dxmasf.dll
2017-11-15 19:15:51 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2017-11-15 19:15:50 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-11-15 19:15:50 ----A---- C:\Windows\system32\wmploc.DLL
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbohci.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbehci.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\drivers\usbd.sys
2017-11-15 19:15:50 ----A---- C:\Windows\system32\atmlib.dll
2017-11-15 19:15:49 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 19:00:51 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2017-11-15 19:00:12 ----A---- C:\Windows\system32\WdfCoInstaller01011.dll
2017-11-15 19:00:12 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2017-11-15 18:57:25 ----A---- C:\Windows\system32\RtNicProp64.dll
2017-11-15 18:57:25 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2017-11-08 17:51:32 ----A---- C:\Windows\system32\appraiser.dll
2017-11-08 17:51:32 ----A---- C:\Windows\system32\aitstatic.exe
2017-11-08 17:51:32 ----A---- C:\Windows\system32\acmigration.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\invagent.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\generaltel.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\devinv.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-11-08 17:51:31 ----A---- C:\Windows\system32\centel.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\aepic.dll
2017-11-08 17:51:31 ----A---- C:\Windows\system32\aeinv.dll
2017-11-02 09:02:26 ----A---- C:\Windows\system32\drivers\eamonm.sys

====== List of files/folders modified in the last 1 month ======

2017-11-23 21:36:31 ----D---- C:\Program Files\trend micro
2017-11-23 21:34:53 ----D---- C:\Windows\Temp
2017-11-23 21:34:31 ----D---- C:\ProgramData\NVIDIA
2017-11-23 21:32:33 ----D---- C:\Windows\system32\config
2017-11-23 21:21:49 ----SHD---- C:\System Volume Information
2017-11-23 21:20:25 ----RD---- C:\Program Files (x86)
2017-11-23 20:58:37 ----D---- C:\Windows\System32
2017-11-23 20:58:37 ----D---- C:\Windows\inf
2017-11-23 20:58:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-23 20:56:45 ----D---- C:\Windows\system32\Tasks
2017-11-23 20:51:20 ----D---- C:\Windows
2017-11-23 12:46:16 ----D---- C:\Users\Lubomír\AppData\Roaming\Wise Disk Cleaner
2017-11-23 12:45:10 ----D---- C:\Windows\system32\catroot2
2017-11-23 12:42:40 ----SHD---- C:\Windows\Installer
2017-11-23 12:42:39 ----SHD---- C:\Config.Msi
2017-11-23 12:41:02 ----D---- C:\Program Files (x86)\Internet Explorer
2017-11-23 12:38:48 ----D---- C:\Windows\SysWOW64
2017-11-23 12:27:09 ----D---- C:\Program Files (x86)\OpenOffice 4
2017-11-23 12:27:07 ----RSD---- C:\Windows\assembly
2017-11-23 12:25:56 ----RSD---- C:\Windows\Fonts
2017-11-23 12:20:23 ----D---- C:\Users\Lubomír\AppData\Roaming\Skype
2017-11-23 12:17:21 ----D---- C:\Users\Lubomír\AppData\Roaming\IrfanView
2017-11-23 12:11:04 ----D---- C:\Windows\SoftwareDistribution
2017-11-23 12:09:51 ----D---- C:\Windows\debug
2017-11-23 12:04:06 ----D---- C:\Windows\system32\drivers
2017-11-23 12:03:10 ----RD---- C:\Program Files
2017-11-23 12:03:10 ----HD---- C:\ProgramData
2017-11-23 10:17:37 ----D---- C:\Windows\winsxs
2017-11-23 10:07:36 ----D---- C:\AdwCleaner
2017-11-23 09:49:22 ----D---- C:\Users\Lubomír\AppData\Roaming\IObit
2017-11-23 09:44:45 ----D---- C:\Windows\Tasks
2017-11-23 09:25:42 ----D---- C:\ProgramData\Package Cache
2017-11-23 09:25:41 ----D---- C:\Program Files\Intel
2017-11-23 07:55:18 ----D---- C:\Windows\Prefetch
2017-11-23 07:07:24 ----D---- C:\ProgramData\Intel
2017-11-23 06:42:59 ----D---- C:\Windows\system32\DriverStore
2017-11-23 06:40:02 ----D---- C:\ProgramData\ProductData
2017-11-22 14:27:20 ----D---- C:\Windows\system32\drivers\UMDF
2017-11-16 17:04:58 ----SD---- C:\ProgramData\Microsoft
2017-11-16 16:51:49 ----D---- C:\ProgramData\NVIDIA Corporation
2017-11-16 16:51:47 ----D---- C:\Program Files\NVIDIA Corporation
2017-11-16 16:51:47 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-11-16 16:43:54 ----RD---- C:\Users
2017-11-16 16:41:11 ----D---- C:\Users\Lubomír\AppData\Roaming\WiseUpdate
2017-11-16 15:57:15 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-11-15 23:20:45 ----D---- C:\Windows\rescache
2017-11-15 19:18:28 ----D---- C:\Windows\system32\catroot
2017-11-15 19:18:11 ----D---- C:\Windows\SYSWOW64\migration
2017-11-15 19:18:11 ----D---- C:\Windows\SYSWOW64\en-US
2017-11-15 19:18:11 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-11-15 19:18:11 ----D---- C:\Program Files\Windows Media Player
2017-11-15 19:18:11 ----D---- C:\Program Files\Internet Explorer
2017-11-15 19:18:11 ----D---- C:\Program Files (x86)\Windows Media Player
2017-11-15 19:18:10 ----D---- C:\Windows\system32\migration
2017-11-15 19:18:10 ----D---- C:\Windows\system32\en-US
2017-11-15 19:18:10 ----D---- C:\Windows\system32\drivers\cs-CZ
2017-11-15 19:18:10 ----D---- C:\Windows\system32\cs-CZ
2017-11-15 19:11:19 ----D---- C:\Users\Lubomír\AppData\Roaming\Mozilla
2017-11-15 19:11:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-15 19:10:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-11-15 19:10:16 ----D---- C:\Windows\system32\Macromed
2017-11-15 19:10:12 ----D---- C:\Windows\SYSWOW64\Macromed
2017-11-15 19:04:54 ----D---- C:\Windows\Minidump
2017-11-15 18:57:25 ----A---- C:\Windows\system32\RTNUninst64.dll
2017-11-15 18:06:49 ----D---- C:\Windows\system32\MRT
2017-11-15 18:03:12 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-11-15 18:02:44 ----AC---- C:\Windows\system32\MRT.exe
2017-11-08 17:52:11 ----D---- C:\Windows\system32\appraiser
2017-11-08 17:52:11 ----D---- C:\Windows\AppPatch

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-09-19 107336]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-10-02 537112]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-11-21 632168]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-11-21 28008]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2015-02-15 123704]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2017-09-28 253912]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2017-09-28 507960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-11-02 133856]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-10-09 180088]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-09-19 81888]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-09-19 61040]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-09-19 106312]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-03-16 27552]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2017-09-28 384312]
R1 RapportCerberus_1804077;RapportCerberus_1804077; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804077.sys [2017-10-02 1271448]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2017-09-28 585432]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2017-09-28 610616]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-09-19 50744]
R2 PDFsFilter;PDFsFilter; C:\Windows\system32\DRIVERS\PDFsFilter.sys [2015-12-09 83224]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2017-11-23 25640]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-09-02 5826560]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2017-11-15 50808]
R3 nvvhci;NVVHCI Enumerator Service; C:\Windows\system32\DRIVERS\nvvhci.sys [2017-07-26 57792]
R3 PAC7302;eMessenger 310; C:\Windows\system32\DRIVERS\PAC7302.SYS [2009-04-28 532480]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2017-11-15 1077216]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2017-11-15 51808]
S3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-08 32840]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2015-01-21 30528]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-06-10 57344]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-10-11 30328]
S3 RapportIaso;RapportIaso; C:\Windows\system32\drivers\RapportIaso.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; %windir%\system32\svchost.exe -k apphost;"ServiceDll" = %windir%\system32\inetsrv\apphostsvc.dll
R2 DES2 Service;DES2 Service for Energy Saving.; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2009-06-17 68136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-11-02 1932336]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-21 15720]
R2 JMB36X;JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [2010-09-07 72280]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518264]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-10-11 460920]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2017-09-28 2350064]
R2 Smart TimeLock;Smart TimeLock Service; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-11-14 426040]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-05-23 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-15 272384]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-10-14 116224]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-11-15 194000]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518264]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; %windir%\system32\svchost.exe -k iissvcs;"ServiceDll" = %windir%\system32\inetsrv\iisw3adm.dll
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-01-21 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118192
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy, prosím o ko logu, Lubův pc

#5 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\Lubomír_RSITx64.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
jaruneczka
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 417
Registrován: 09 čer 2008 11:45
Bydliště: Ostrava

Re: Pro Rudy, prosím o ko logu, Lubův pc

#6 Příspěvek od jaruneczka »

hotovo, děkuji :wub:

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118192
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Pro Rudy, prosím o ko logu, Lubův pc

#7 Příspěvek od Rudy »

Není zač, log by již měl být čistý. :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět