Logfile of random's system information tool 1.16 (written by random/random)
Run by Jarka at 2018-03-20 22:06:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 317 GB (66%) free of 477 GB
Total RAM: 3955 MB (58% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:06:59, on 20.3.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18939)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files\trend micro\Jarka_RSITx64.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [EsetPasswordManager] C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 5675463671
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DESlock+ Service (dlpsrv) - DESlock Limited. - C:\Program Files\ESET\ESET SecurityESET Secure Data\dlpsrv.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: ESET Firewall Helper (ekrnEpfw) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HP Touchpoint Analytics (HPTouchpointAnalyticsService) - HP Inc. - C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) SUR QC Software Asset Manager (Intel(R) SUR QC SAM) - Intel Corporation - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
O23 - Service: IObit Uninstaller Service (IObitUnSvr) - IObit - C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Acronis Managed Machine Service Mini (mmsminisrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Služba zařazování tisku (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
O23 - Service: TeamViewer 13 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9881 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Program Files\ESET\ESET SecurityESET Secure Data\dlpsrv.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 36573920
\??\C:\Windows\system32\conhost.exe "-79401593517755762041858276407-21019898382074040521-1560234053-16173102941348665058
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe"
C:\Windows\system32\valWBFPolicyService.exe
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\CCleaner\CCleaner64.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
"C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
C:\Windows\system32\cmd.exe
\??\C:\Windows\system32\conhost.exe "-16566248378791733071634078088464574286-1825717699-1426814101-9945726481726854585
"C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe"
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Jarka\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player NPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_Plugin.exe -check plugin
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleaner Update - C:\Program Files\CCleaner\CCUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\HPCustParticipation HP DeskJet 3700 series - "C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPCustPartic.exe" /UA 17.5
C:\Windows\system32\tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 - "C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe" --automatic
C:\Windows\system32\tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon - "C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe" --automatic
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\USER_ESRV_SVC_QUEENCREEK - "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
C:\Windows\system32\tasks\User_Feed_Synchronization-{75BE8925-8583-480B-9BD7-93CC07C15906} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{276AE620-8B00-4599-8FA0-45D320233FFB} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\SetupOviPlayer.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{8044EBA9-3C63-4963-BDEC-1F48682EE181} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\win64_154519.4678.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{CE96D149-A560-40C7-82A7-C34100778F3F} - C:\Windows\system32\pcalua.exe -a "C:\drivers\Intel Bluetooth Driver\Setup.exe" -d "C:\drivers\Intel Bluetooth Driver"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-582464855-1890364033-424521494-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\TVT\TVSUUpdateTask - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" /CM -search R -action INSTALL -includerebootpackages 1,3,4 -noicon -noreboot -nolicense -defaultupdate -schtask
C:\Windows\system32\tasks\TVT\TVSUUpdateTask_UserLogOn - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" PendingTask
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\fplmonitor - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\fplmonitorConnect - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Solution Center Launcher - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus
C:\Windows\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\Windows\system32\tasks\Lenovo\LSC\LSCHardwareScan - C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-582464855-1890364033-424521494-1000 - "C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /r /m
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\Windows\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\Windows\system32\tasks\CyberLink\Photo Master Gadget startup - C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe backgroundagent

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.113 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.113 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default\addons.json
uBlock Origin - extension - uBlock0@raymondhill.net
ScriptSafe - extension - scriptsafe@protonmail.com
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default\extensions.json
Adblock Plus - webextension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} -
ScriptSafe - webextension - scriptsafe@protonmail.com -
IBM Security Rapport - webextension - rapportext@trusteer.com -
uBlock Origin - webextension - uBlock0@raymondhill.net -
ESET Password Manager Autofill Engine - webextension - {608A3B46-5851-4E98-AF93-1A4A68E87ED9} -
Activity Stream - extension - activity-stream@mozilla.org -
Application Update Service Helper - extension - aushelper@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Firefox Screenshots - extension - screenshots@mozilla.org -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default\pluginreg.dat
Plugin - Shockwave Flash - 29.0.0.113 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll

=========Google Chrome=========

C:\Users\Jarka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 0 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 0 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bbjllphbppobebmjpjcijfbakobcheof 1 IBM Security Rapport 2.1.24
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.13.5
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat 15.1.0.6
Extension fdecnmmdccnkogcidionikojplkjfgie 1 uBlock Adblock Plus 2.15.5
Extension felcaaldnbdncclmgdcncolpebgiejap 0 Tabulky 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 0 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.73
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension naadnjadnmooagmfidjkcedpinpdlldd 1 ESET Password Manager Autofill Engine 1.0.0.136
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.7
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension oiigbmnaadbkfbmpbfijlflahbdbdgdf 0 ScriptSafe 1.0.9.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6518.129.0.1
Homepage: http://www.seznam.cz/
default_search_provider.search_url:
C:\Users\Jarka\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-05-22 2478880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2017-01-03 863320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03 758360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Security\ecmds.exe [2018-03-15 178496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-03-06 17074688]
"EsetPasswordManager"=C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe [2018-02-02 92672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2016-10-14 567088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2016-04-25 421768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 11]
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe /Auto []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2017-10-26 7956648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2018-03-06 17074688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DSATray]
C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [2018-01-17 131360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EsetPasswordManager]
C:\Program Files\ESET\ESET Password Manager\pwm.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Smart Fingerprint]
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-09-25 1761208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LenovoUtility]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2016-10-13 1841496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NETGEARGenie]
C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe -mini -redirect []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PhotoMasterImportAgent]
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [2016-09-22 675608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_Dolby]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_DOLBYDRAGON]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_MICPKEY]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-07 16781824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2017-06-23 7390424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-09-04 296216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jarka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledování výstrah kazety - HP DJ 3700 series.lnk]
C:\Program Files\HP\HP DeskJet 3700 series\bin\HPStatusBL.dll [2016-09-14 8067216]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ituneshelper]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_dolby]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_dolbydragon]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_micpkey]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.162\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2018-03-20 22:06:55 ----D---- C:\rsit
2018-03-20 20:34:24 ----D---- C:\Users\Jarka\AppData\Roaming\ESET
2018-03-20 20:32:17 ----D---- C:\ProgramData\ESET
2018-03-20 20:32:17 ----D---- C:\Program Files\ESET
2018-03-20 01:53:40 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Euask
2018-03-20 01:37:30 ----A---- C:\Windows\system32\TURegOpt.exe
2018-03-20 01:37:29 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2018-03-20 01:37:29 ----A---- C:\Windows\system32\uxtuneup.dll
2018-03-20 01:37:29 ----A---- C:\Windows\system32\authuitu.dll
2018-03-20 01:37:28 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2018-03-20 01:36:19 ----SHD---- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2018-03-15 23:47:54 ----D---- C:\odběry moje
2018-03-13 18:55:11 ----A---- C:\Windows\system32\mshtml.dll
2018-03-13 18:55:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-03-13 18:55:08 ----A---- C:\Windows\system32\ieframe.dll
2018-03-13 18:55:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-03-13 18:55:07 ----A---- C:\Windows\system32\jscript9.dll
2018-03-13 18:55:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-03-13 18:55:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-03-13 18:55:06 ----A---- C:\Windows\system32\wininet.dll
2018-03-13 18:55:06 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-03-13 18:55:05 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-03-13 18:55:05 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-03-13 18:55:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-03-13 18:55:05 ----A---- C:\Windows\system32\win32k.sys
2018-03-13 18:55:05 ----A---- C:\Windows\system32\urlmon.dll
2018-03-13 18:55:05 ----A---- C:\Windows\system32\MSVidCtl.dll
2018-03-13 18:55:05 ----A---- C:\Windows\system32\iertutil.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\vbscript.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-03-13 18:55:04 ----A---- C:\Windows\system32\msi.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\msfeeds.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\jscript.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\zipfldr.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\TSpkg.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\msra.exe
2018-03-13 18:55:03 ----A---- C:\Windows\system32\hal.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\volmgr.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\pci.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\msrpc.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\msisadrv.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\acpi.sys
2018-03-13 18:55:02 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-03-13 18:55:02 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-03-13 18:55:02 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\winload.exe
2018-03-13 18:55:02 ----A---- C:\Windows\system32\streamci.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\ntdll.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\msihnd.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\iedkcs32.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\vdrvroot.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\termdd.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\swenum.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\mssmbios.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\isapnp.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\AGP440.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\consent.exe
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\sdchange.exe
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\racpldlg.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\msra.exe
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\webcheck.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\sdchange.exe
2018-03-13 18:55:01 ----A---- C:\Windows\system32\rpcrt4.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\racpldlg.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\msrating.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\msrahc.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\mshtmled.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\lsasrv.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\dxtrans.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\dxtmsft.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\drivers\wmiacpi.sys
2018-03-13 18:55:01 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-03-13 18:55:01 ----A---- C:\Windows\system32\certcli.dll
2018-03-13 18:55:00 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-03-13 18:55:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-03-13 18:55:00 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\winsrv.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\wdigest.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\schannel.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\rstrui.exe
2018-03-13 18:55:00 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\kernel32.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\kerberos.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\ieui.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\iesetup.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\conhost.exe
2018-03-13 18:55:00 ----A---- C:\Windows\system32\advapi32.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\srcore.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\smss.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\rpchttp.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\occache.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\ncrypt.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\msv1_0.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\KernelBase.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\jscript9diag.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\ie4uinit.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\drivers\errdev.sys
2018-03-13 18:54:59 ----A---- C:\Windows\system32\csrsrv.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\auditpol.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\appidapi.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\wow64win.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\wow64.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\sspisrv.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\sspicli.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\ntvdm64.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\lsass.exe
2018-03-13 18:54:58 ----A---- C:\Windows\system32\jsproxy.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\inseng.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\ieUnatt.exe
2018-03-13 18:54:58 ----A---- C:\Windows\system32\iernonce.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-03-13 18:54:58 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-03-13 18:54:58 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-03-13 18:54:58 ----A---- C:\Windows\system32\cryptbase.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\bcrypt.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\appidsvc.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\wow64cpu.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\srclient.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\secur32.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\msiexec.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\ieapfltr.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\drivers\appid.sys
2018-03-13 18:54:57 ----A---- C:\Windows\system32\credssp.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\authui.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\apisetschema.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-03-13 18:54:56 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-03-13 18:54:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-03-13 18:54:56 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-03-13 18:54:56 ----A---- C:\Windows\system32\appinfo.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\user.exe
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\msobjs.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\msimsg.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\msaudite.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\adtschema.dll
2018-03-06 09:24:46 ----A---- C:\Windows\system32\ibtproppage.dll
2018-03-06 09:24:46 ----A---- C:\Windows\system32\drivers\ibtusb.sys
2018-03-03 06:52:15 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2018-03-03 06:52:15 ----A---- C:\Windows\system32\WinSCard.dll
2018-03-01 06:14:25 ----D---- C:\Users\Jarka\AppData\Roaming\vlc
2018-03-01 06:13:46 ----D---- C:\Program Files\VideoLAN
2018-02-28 07:15:45 ----A---- C:\Windows\system32\appraiser.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\invagent.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\generaltel.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\devinv.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\centel.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\aeinv.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\acmigration.dll
2018-02-28 07:15:43 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-02-28 07:15:43 ----A---- C:\Windows\system32\aitstatic.exe
2018-02-28 07:15:43 ----A---- C:\Windows\system32\aepic.dll
2018-02-27 11:31:04 ----RA---- C:\Windows\system32\drivers\dlmfenc.sys
2018-02-24 00:28:15 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2018-02-24 00:28:15 ----A---- C:\Windows\system32\scesrv.dll
2018-02-24 00:28:09 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-02-24 00:28:09 ----A---- C:\Windows\system32\tzres.dll

====== List of files/folders modified in the last 1 month ======

2018-03-20 22:06:58 ----D---- C:\Program Files\trend micro
2018-03-20 22:04:24 ----D---- C:\AdwCleaner
2018-03-20 22:03:57 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Disk Cleaner
2018-03-20 22:03:43 ----D---- C:\Windows\Temp
2018-03-20 22:03:42 ----D---- C:\Windows\System32
2018-03-20 22:03:38 ----D---- C:\Windows\inf
2018-03-20 22:03:37 ----D---- C:\Windows
2018-03-20 21:03:48 ----D---- C:\Windows\system32\config
2018-03-20 20:44:03 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-03-20 20:33:17 ----SHD---- C:\Windows\Installer
2018-03-20 20:33:12 ----D---- C:\Windows\system32\drivers
2018-03-20 20:32:17 ----HD---- C:\ProgramData
2018-03-20 20:32:17 ----D---- C:\Program Files
2018-03-20 20:26:02 ----D---- C:\Windows\SoftwareDistribution
2018-03-20 20:25:31 ----D---- C:\Windows\debug
2018-03-20 20:16:26 ----D---- C:\Windows\system32\Tasks
2018-03-20 16:35:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-03-20 11:13:31 ----D---- C:\Windows\system32\catroot
2018-03-20 07:28:38 ----D---- C:\Windows\system32\catroot2
2018-03-20 06:28:06 ----D---- C:\Windows\system32\DriverStore
2018-03-20 02:46:43 ----D---- C:\Users\Jarka\AppData\Roaming\IObit
2018-03-20 02:46:04 ----D---- C:\ProgramData\IObit
2018-03-20 02:29:09 ----D---- C:\Program Files (x86)\IObit
2018-03-20 02:18:34 ----RD---- C:\Program Files (x86)
2018-03-20 02:04:25 ----SHD---- C:\System Volume Information
2018-03-20 01:38:14 ----D---- C:\ProgramData\TuneUp Software
2018-03-20 01:37:29 ----D---- C:\Windows\SysWOW64
2018-03-20 01:09:39 ----D---- C:\Program Files (x86)\TeamViewer
2018-03-19 16:28:09 ----D---- C:\Windows\SYSWOW64\config
2018-03-19 16:21:38 ----D---- C:\ProgramData\ProductData
2018-03-19 16:19:35 ----D---- C:\Users\Jarka\AppData\Roaming\WiseUpdate
2018-03-16 18:10:04 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-03-16 18:10:04 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-03-15 12:08:03 ----D---- C:\logs
2018-03-15 01:00:39 ----D---- C:\Windows\system32\NDF
2018-03-13 22:39:16 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-03-13 22:39:11 ----D---- C:\Windows\system32\Macromed
2018-03-13 22:39:07 ----D---- C:\Windows\SYSWOW64\Macromed
2018-03-13 22:05:10 ----D---- C:\Windows\rescache
2018-03-13 19:29:42 ----D---- C:\Windows\winsxs
2018-03-13 19:26:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-03-13 19:26:22 ----D---- C:\Program Files\Internet Explorer
2018-03-13 19:26:22 ----D---- C:\Program Files (x86)\Internet Explorer
2018-03-13 19:26:21 ----D---- C:\Windows\SYSWOW64\en-US
2018-03-13 19:26:18 ----D---- C:\Windows\system32\en-US
2018-03-13 19:26:18 ----D---- C:\Windows\system32\cs-CZ
2018-03-13 19:26:13 ----D---- C:\Windows\system32\CodeIntegrity
2018-03-13 19:26:13 ----D---- C:\Windows\system32\Boot
2018-03-13 19:26:13 ----D---- C:\Windows\AppPatch
2018-03-13 19:07:51 ----D---- C:\Windows\system32\MRT
2018-03-13 19:01:03 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-03-13 19:00:21 ----AC---- C:\Windows\system32\MRT.exe
2018-03-11 00:07:20 ----D---- C:\Windows\Prefetch
2018-03-08 03:12:16 ----D---- C:\ProgramData\Synaptics
2018-03-07 17:09:22 ----D---- C:\Windows\LiveKernelReports
2018-03-06 09:29:26 ----D---- C:\Program Files (x86)\Intel Driver and Support Assistant
2018-03-06 09:24:46 ----A---- C:\Windows\system32\ibtsiva.exe
2018-03-02 12:00:37 ----D---- C:\Windows\Tasks
2018-03-01 21:08:07 ----D---- C:\Users\Jarka\AppData\Roaming\Skype
2018-02-28 07:16:58 ----D---- C:\Windows\system32\appraiser
2018-02-24 07:47:12 ----D---- C:\Windows\Microsoft.NET
2018-02-24 00:32:15 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 DLMFENC;DLMFENC; C:\Windows\system32\DRIVERS\DLMFENC.sys [2018-02-27 174152]
R0 DLPCRYPT;DLPCRYPT; C:\Windows\system32\DRIVERS\dlpcrypt.sys [2017-11-02 121728]
R0 dlpvdisk;dlpvdisk; C:\Windows\system32\DRIVERS\dlpvdisk.sys [2017-11-02 98296]
R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2018-01-08 110432]
R0 file_tracker;Acronis File Tracker Driver; C:\Windows\system32\DRIVERS\file_tracker.sys [2017-06-26 366432]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2016-09-27 163160]
R0 iaStorA;Intel(R) Chipset SATA/PCIe RST Premium Controller; C:\Windows\system32\DRIVERS\iaStorA.sys [2017-12-05 905736]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2017-12-05 41480]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2018-03-11 331240]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2018-03-11 590824]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2017-06-26 340312]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2017-06-26 1267552]
R0 VDLPToken2;VDLPToken2; C:\Windows\system32\DRIVERS\vdlptkn2.sys [2017-11-02 135672]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2018-02-14 137928]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2018-01-08 196112]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2018-01-08 82816]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2018-01-08 61520]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2018-01-08 108320]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2017-12-05 27552]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\Windows\system32\DRIVERS\ndisrd.sys [2014-08-14 43088]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2018-03-11 482600]
R1 RapportCerberus_1908115;RapportCerberus_1908115; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1908115.sys [2018-03-19 1628776]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2018-03-11 695592]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2018-03-11 736488]
R1 RawDisk3;RawDisk3; \??\C:\Windows\system32\drivers\rawdsk3.sys [2016-02-19 41576]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2018-01-08 50136]
R2 NPF;NetGroup Packet Filter Driver; \??\C:\Windows\system32\drivers\npf.sys [2018-02-10 35344]
R2 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2017-06-26 193376]
R2 virtual_file;Acronis Virtual File Driver; C:\Windows\system32\DRIVERS\virtual_file.sys [2016-09-27 279392]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2016-09-21 34552]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2017-11-20 159752]
R3 ibtusb;Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2018-03-06 126912]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-06-20 7940600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-07-07 5545512]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-09-04 394992]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2017-07-07 824848]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-12-21 201296]
R3 NETwNs64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw04.sys [2017-10-29 3472392]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2017-09-11 329184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2018-01-31 980424]
R3 rtsuvc;EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2018-02-13 3127552]
R3 Tpm;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2017-11-20 1569288]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-09-02 181160]
S3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-07 32840]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2017-07-07 480800]
S3 IUFileFilter;IUFileFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [2017-06-06 21928]
S3 IURegProcessFilter;IURegProcessFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [2017-09-28 21872]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2018-01-11 41512]
S3 tnd;Acronis Try&Decide filter; C:\Windows\system32\DRIVERS\tnd.sys [2017-06-26 601432]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2017-10-26 1205992]
R2 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2017-10-26 1861352]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2017-10-26 1193704]
R2 dlpsrv;DESlock+ Service; C:\Program Files\ESET\ESET SecurityESET Secure Data\dlpsrv.exe [2017-11-02 542400]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [2018-01-17 22304]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2018-03-15 2213344]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-11-12 644776]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-11-21 332144]
R2 HPTouchpointAnalyticsService;HP Touchpoint Analytics; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [2017-11-22 332216]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-06-20 356352]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2018-03-11 5243208]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-11-12 159912]
R2 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe [2018-01-11 182544]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\Windows\system32\valWBFPolicyService.exe [2017-02-14 88400]
R3 ekrnEpfw;ESET Firewall Helper; C:\Program Files\ESET\ESET Security\ekrn.exe [2018-03-15 2213344]
R3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2017-12-12 23920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-02-15 24576]
S3 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2016-10-14 1244408]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-03-13 272384]
S3 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-06-26 4463592]
S3 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-06-20 284160]
S3 ESRV_SVC_QUEENCREEK;Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [2018-01-11 886032]
S3 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-19 153168]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-19 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-02-10 116224]
S3 Intel(R) SUR QC SAM;Intel(R) SUR QC Software Asset Manager; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13 18168]
S3 IObitUnSvr;IObit Uninstaller Service; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [2017-06-14 206112]
S3 mmsminisrv;Acronis Managed Machine Service Mini; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [2015-08-11 4884064]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-03-16 174544]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-11-12 268968]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 TeamViewer;TeamViewer 13; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2018-03-09 11294448]
S3 USER_ESRV_SVC_QUEENCREEK;User Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [2018-01-11 886032]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S4 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 UxTuneUp;TuneUp Theme Extension; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\uxtuneup.dll

-----------------EOF-----------------

Zdravím!
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:



a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Odinstalujte AdvancedSystemCare. Tento čínský optimizer vidí problémy i tam, kde nejsou a laik si jím snadno může poškodit systém.

_________________
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte:

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Logfile of random's system information tool 1.16 (written by random/random)
Run by Jarka at 2018-03-20 23:20:58
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 317 GB (66%) free of 477 GB
Total RAM: 3955 MB (51% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:21:01, on 20.3.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18939)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files\trend micro\Jarka_RSITx64.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [EsetPasswordManager] C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 5675463671
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DESlock+ Service (dlpsrv) - DESlock Limited. - C:\Program Files\ESET\ESET SecurityESET Secure Data\dlpsrv.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: ESET Firewall Helper (ekrnEpfw) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HP Touchpoint Analytics (HPTouchpointAnalyticsService) - HP Inc. - C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) SUR QC Software Asset Manager (Intel(R) SUR QC SAM) - Intel Corporation - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
O23 - Service: IObit Uninstaller Service (IObitUnSvr) - IObit - C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Acronis Managed Machine Service Mini (mmsminisrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Služba zařazování tisku (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
O23 - Service: TeamViewer 13 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
O23 - Service: Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9881 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Program Files\ESET\ESET SecurityESET Secure Data\dlpsrv.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 41430128
\??\C:\Windows\system32\conhost.exe "-739973975-246031035-916664446123077148842764039-1297368744-733996515916573024
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe"
C:\Windows\system32\valWBFPolicyService.exe
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
"C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files (x86)\Lenovo\System Update\SUService.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
C:\Windows\system32\cmd.exe
\??\C:\Windows\system32\conhost.exe "-131971354020944250772011425159-193807906810539217872854867619252243211036641404
"C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe"
"C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\taskeng.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-582464855-1890364033-424521494-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-582464855-1890364033-424521494-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Jarka\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player NPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_Plugin.exe -check plugin
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleaner Update - C:\Program Files\CCleaner\CCUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\HPCustParticipation HP DeskJet 3700 series - "C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPCustPartic.exe" /UA 17.5
C:\Windows\system32\tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 - "C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe" --automatic
C:\Windows\system32\tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon - "C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe" --automatic
C:\Windows\system32\tasks\SidebarExecute - C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\tasks\USER_ESRV_SVC_QUEENCREEK - "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
C:\Windows\system32\tasks\User_Feed_Synchronization-{75BE8925-8583-480B-9BD7-93CC07C15906} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{276AE620-8B00-4599-8FA0-45D320233FFB} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\SetupOviPlayer.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{8044EBA9-3C63-4963-BDEC-1F48682EE181} - C:\Windows\system32\pcalua.exe -a C:\Users\Jarka\Desktop\win64_154519.4678.exe -d C:\Users\Jarka\Desktop
C:\Windows\system32\tasks\{CE96D149-A560-40C7-82A7-C34100778F3F} - C:\Windows\system32\pcalua.exe -a "C:\drivers\Intel Bluetooth Driver\Setup.exe" -d "C:\drivers\Intel Bluetooth Driver"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-582464855-1890364033-424521494-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\TVT\TVSUUpdateTask - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" /CM -search R -action INSTALL -includerebootpackages 1,3,4 -noicon -noreboot -nolicense -defaultupdate -schtask
C:\Windows\system32\tasks\TVT\TVSUUpdateTask_UserLogOn - "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe" PendingTask
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\fplmonitor - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\fplmonitorConnect - C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Solution Center Launcher - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus
C:\Windows\system32\tasks\Lenovo\LSC\Lenovo Solution Center Notifications - C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show
C:\Windows\system32\tasks\Lenovo\LSC\LSCHardwareScan - C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-582464855-1890364033-424521494-1000 - "C:\Users\Jarka\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /r /m
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\Windows\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\Windows\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\Windows\system32\tasks\CyberLink\Photo Master Gadget startup - C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe backgroundagent

=========Mozilla firefox=========

ProfilePath - C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.113 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.113 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default\addons.json
uBlock Origin - extension - uBlock0@raymondhill.net
ScriptSafe - extension - scriptsafe@protonmail.com
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default\extensions.json
Adblock Plus - webextension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} -
ScriptSafe - webextension - scriptsafe@protonmail.com -
IBM Security Rapport - webextension - rapportext@trusteer.com -
uBlock Origin - webextension - uBlock0@raymondhill.net -
ESET Password Manager Autofill Engine - webextension - {608A3B46-5851-4E98-AF93-1A4A68E87ED9} -
Activity Stream - extension - activity-stream@mozilla.org -
Application Update Service Helper - extension - aushelper@mozilla.org -
Pocket - extension - firefox@getpocket.com -
Follow-on Search Telemetry - extension - followonsearch@mozilla.com -
Form Autofill - extension - formautofill@mozilla.org -
Photon onboarding - extension - onboarding@mozilla.org -
Firefox Screenshots - extension - screenshots@mozilla.org -
Shield Recipe Client - extension - shield-recipe-client@mozilla.org -
Web Compat - extension - webcompat@mozilla.org -
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} -

C:\Users\Jarka\AppData\Roaming\Mozilla\Firefox\Profiles\gf7m50du.default\pluginreg.dat
Plugin - Shockwave Flash - 29.0.0.113 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll

=========Google Chrome=========

C:\Users\Jarka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 0 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 0 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bbjllphbppobebmjpjcijfbakobcheof 1 IBM Security Rapport 2.1.24
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.13.5
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat 15.1.0.6
Extension fdecnmmdccnkogcidionikojplkjfgie 1 uBlock Adblock Plus 2.15.5
Extension felcaaldnbdncclmgdcncolpebgiejap 0 Tabulky 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 0 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.73
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension naadnjadnmooagmfidjkcedpinpdlldd 1 ESET Password Manager Autofill Engine 1.0.0.136
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.7
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension oiigbmnaadbkfbmpbfijlflahbdbdgdf 0 ScriptSafe 1.0.9.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6518.129.0.1
Homepage: http://www.seznam.cz/
default_search_provider.search_url:
C:\Users\Jarka\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-05-22 2478880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2017-01-03 863320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03 758360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Security\ecmds.exe [2018-03-15 178496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-03-06 17074688]
"EsetPasswordManager"=C:\Program Files\ESET\ESET SecurityESET Password Manager\pwm.exe [2018-02-02 92672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2016-10-14 567088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [2016-04-25 421768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2017-10-26 7956648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2018-03-06 17074688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DSATray]
C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [2018-01-17 131360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EsetPasswordManager]
C:\Program Files\ESET\ESET Password Manager\pwm.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lenovo Smart Fingerprint]
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [2015-09-25 1761208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LenovoUtility]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2016-10-13 1841496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NETGEARGenie]
C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe -mini -redirect []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PhotoMasterImportAgent]
C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [2016-09-22 675608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_Dolby]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_DOLBYDRAGON]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg_LENOVO_MICPKEY]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2017-07-07 1483264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-07-07 16781824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StickyPassword]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2017-06-23 7390424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2015-09-04 296216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jarka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sledování výstrah kazety - HP DJ 3700 series.lnk]
C:\Program Files\HP\HP DeskJet 3700 series\bin\HPStatusBL.dll [2016-09-14 8067216]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ituneshelper]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_dolby]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_dolbydragon]
[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\rthdvbg_lenovo_micpkey]
[]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32083744.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.162\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2018-03-20 23:07:37 ----A---- C:\Windows\system32\FNTCACHE.DAT
2018-03-20 23:06:13 ----D---- C:\_OTM
2018-03-20 22:06:55 ----D---- C:\rsit
2018-03-20 20:34:24 ----D---- C:\Users\Jarka\AppData\Roaming\ESET
2018-03-20 20:32:17 ----D---- C:\ProgramData\ESET
2018-03-20 20:32:17 ----D---- C:\Program Files\ESET
2018-03-20 01:53:40 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Euask
2018-03-20 01:37:30 ----A---- C:\Windows\system32\TURegOpt.exe
2018-03-20 01:37:29 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2018-03-20 01:37:29 ----A---- C:\Windows\system32\uxtuneup.dll
2018-03-20 01:37:29 ----A---- C:\Windows\system32\authuitu.dll
2018-03-20 01:37:28 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2018-03-20 01:36:19 ----SHD---- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2018-03-15 23:47:54 ----D---- C:\odběry moje
2018-03-13 18:55:11 ----A---- C:\Windows\system32\mshtml.dll
2018-03-13 18:55:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2018-03-13 18:55:08 ----A---- C:\Windows\system32\ieframe.dll
2018-03-13 18:55:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2018-03-13 18:55:07 ----A---- C:\Windows\system32\jscript9.dll
2018-03-13 18:55:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2018-03-13 18:55:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2018-03-13 18:55:06 ----A---- C:\Windows\system32\wininet.dll
2018-03-13 18:55:06 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-03-13 18:55:05 ----A---- C:\Windows\SYSWOW64\wininet.dll
2018-03-13 18:55:05 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2018-03-13 18:55:05 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2018-03-13 18:55:05 ----A---- C:\Windows\system32\win32k.sys
2018-03-13 18:55:05 ----A---- C:\Windows\system32\urlmon.dll
2018-03-13 18:55:05 ----A---- C:\Windows\system32\MSVidCtl.dll
2018-03-13 18:55:05 ----A---- C:\Windows\system32\iertutil.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\msi.dll
2018-03-13 18:55:04 ----A---- C:\Windows\SYSWOW64\jscript.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\vbscript.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-03-13 18:55:04 ----A---- C:\Windows\system32\msi.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\msfeeds.dll
2018-03-13 18:55:04 ----A---- C:\Windows\system32\jscript.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2018-03-13 18:55:03 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\zipfldr.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\TSpkg.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\msra.exe
2018-03-13 18:55:03 ----A---- C:\Windows\system32\hal.dll
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\volmgr.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\pci.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\msrpc.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\msisadrv.sys
2018-03-13 18:55:03 ----A---- C:\Windows\system32\drivers\acpi.sys
2018-03-13 18:55:02 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2018-03-13 18:55:02 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2018-03-13 18:55:02 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\winload.exe
2018-03-13 18:55:02 ----A---- C:\Windows\system32\streamci.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\ntdll.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\msihnd.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\iedkcs32.dll
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\vdrvroot.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\termdd.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\swenum.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\mssmbios.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\isapnp.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\drivers\AGP440.sys
2018-03-13 18:55:02 ----A---- C:\Windows\system32\consent.exe
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\sdchange.exe
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\racpldlg.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\msrating.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\msra.exe
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2018-03-13 18:55:01 ----A---- C:\Windows\SYSWOW64\certcli.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\webcheck.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\sdchange.exe
2018-03-13 18:55:01 ----A---- C:\Windows\system32\rpcrt4.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\racpldlg.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\msrating.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\msrahc.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\mshtmled.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\lsasrv.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\dxtrans.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\dxtmsft.dll
2018-03-13 18:55:01 ----A---- C:\Windows\system32\drivers\wmiacpi.sys
2018-03-13 18:55:01 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-03-13 18:55:01 ----A---- C:\Windows\system32\certcli.dll
2018-03-13 18:55:00 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2018-03-13 18:55:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2018-03-13 18:55:00 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\winsrv.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\wdigest.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\schannel.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\rstrui.exe
2018-03-13 18:55:00 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\kernel32.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\kerberos.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\ieui.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\iesetup.dll
2018-03-13 18:55:00 ----A---- C:\Windows\system32\conhost.exe
2018-03-13 18:55:00 ----A---- C:\Windows\system32\advapi32.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\schannel.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\occache.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2018-03-13 18:54:59 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\srcore.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\smss.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\rpchttp.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\occache.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\ncrypt.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\msv1_0.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\KernelBase.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\jscript9diag.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\ie4uinit.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\drivers\errdev.sys
2018-03-13 18:54:59 ----A---- C:\Windows\system32\csrsrv.dll
2018-03-13 18:54:59 ----A---- C:\Windows\system32\auditpol.exe
2018-03-13 18:54:59 ----A---- C:\Windows\system32\appidapi.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\setup16.exe
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\inseng.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2018-03-13 18:54:58 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\wow64win.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\wow64.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\sspisrv.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\sspicli.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\ntvdm64.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\lsass.exe
2018-03-13 18:54:58 ----A---- C:\Windows\system32\jsproxy.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\inseng.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\ieUnatt.exe
2018-03-13 18:54:58 ----A---- C:\Windows\system32\iernonce.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-03-13 18:54:58 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-03-13 18:54:58 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-03-13 18:54:58 ----A---- C:\Windows\system32\cryptbase.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\bcrypt.dll
2018-03-13 18:54:58 ----A---- C:\Windows\system32\appidsvc.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-03-13 18:54:57 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\wow32.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\srclient.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\secur32.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\credssp.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2018-03-13 18:54:57 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\wow64cpu.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\srclient.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\secur32.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\msiexec.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\ieapfltr.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\drivers\appid.sys
2018-03-13 18:54:57 ----A---- C:\Windows\system32\credssp.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\authui.dll
2018-03-13 18:54:57 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-03-13 18:54:57 ----A---- C:\Windows\system32\apisetschema.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-03-13 18:54:56 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-03-13 18:54:56 ----A---- C:\Windows\SYSWOW64\instnm.exe
2018-03-13 18:54:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2018-03-13 18:54:56 ----A---- C:\Windows\SYSWOW64\authui.dll
2018-03-13 18:54:56 ----A---- C:\Windows\system32\appinfo.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\user.exe
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2018-03-13 18:54:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\msobjs.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\msimsg.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\msaudite.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-03-13 18:54:55 ----A---- C:\Windows\system32\adtschema.dll
2018-03-06 09:24:46 ----A---- C:\Windows\system32\ibtproppage.dll
2018-03-06 09:24:46 ----A---- C:\Windows\system32\drivers\ibtusb.sys
2018-03-03 06:52:15 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2018-03-03 06:52:15 ----A---- C:\Windows\system32\WinSCard.dll
2018-03-01 06:14:25 ----D---- C:\Users\Jarka\AppData\Roaming\vlc
2018-03-01 06:13:46 ----D---- C:\Program Files\VideoLAN
2018-02-28 07:15:45 ----A---- C:\Windows\system32\appraiser.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\invagent.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\generaltel.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\devinv.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\centel.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\aeinv.dll
2018-02-28 07:15:44 ----A---- C:\Windows\system32\acmigration.dll
2018-02-28 07:15:43 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-02-28 07:15:43 ----A---- C:\Windows\system32\aitstatic.exe
2018-02-28 07:15:43 ----A---- C:\Windows\system32\aepic.dll
2018-02-27 11:31:04 ----RA---- C:\Windows\system32\drivers\dlmfenc.sys
2018-02-24 00:28:15 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2018-02-24 00:28:15 ----A---- C:\Windows\system32\scesrv.dll
2018-02-24 00:28:09 ----A---- C:\Windows\SYSWOW64\tzres.dll
2018-02-24 00:28:09 ----A---- C:\Windows\system32\tzres.dll

====== List of files/folders modified in the last 1 month ======

2018-03-20 23:21:00 ----D---- C:\Program Files\trend micro
2018-03-20 23:19:57 ----D---- C:\Windows\inf
2018-03-20 23:19:56 ----D---- C:\Windows\Temp
2018-03-20 23:19:56 ----D---- C:\Windows
2018-03-20 23:19:28 ----D---- C:\Users\Jarka\AppData\Roaming\IObit
2018-03-20 23:16:13 ----D---- C:\Program Files (x86)\IObit
2018-03-20 23:09:25 ----D---- C:\Windows\system32\config
2018-03-20 23:08:37 ----D---- C:\Windows\SoftwareDistribution
2018-03-20 23:08:16 ----D---- C:\Windows\System32
2018-03-20 23:08:16 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-03-20 23:07:44 ----D---- C:\Windows\debug
2018-03-20 22:04:24 ----D---- C:\AdwCleaner
2018-03-20 22:03:57 ----D---- C:\Users\Jarka\AppData\Roaming\Wise Disk Cleaner
2018-03-20 20:33:17 ----SHD---- C:\Windows\Installer
2018-03-20 20:33:12 ----D---- C:\Windows\system32\drivers
2018-03-20 20:32:17 ----HD---- C:\ProgramData
2018-03-20 20:32:17 ----D---- C:\Program Files
2018-03-20 20:16:26 ----D---- C:\Windows\system32\Tasks
2018-03-20 16:35:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-03-20 11:13:31 ----D---- C:\Windows\system32\catroot
2018-03-20 07:28:38 ----D---- C:\Windows\system32\catroot2
2018-03-20 06:28:06 ----D---- C:\Windows\system32\DriverStore
2018-03-20 02:46:04 ----D---- C:\ProgramData\IObit
2018-03-20 02:18:34 ----RD---- C:\Program Files (x86)
2018-03-20 02:04:25 ----SHD---- C:\System Volume Information
2018-03-20 01:38:14 ----D---- C:\ProgramData\TuneUp Software
2018-03-20 01:37:29 ----D---- C:\Windows\SysWOW64
2018-03-20 01:09:39 ----D---- C:\Program Files (x86)\TeamViewer
2018-03-19 16:28:09 ----D---- C:\Windows\SYSWOW64\config
2018-03-19 16:21:38 ----D---- C:\ProgramData\ProductData
2018-03-19 16:19:35 ----D---- C:\Users\Jarka\AppData\Roaming\WiseUpdate
2018-03-16 18:10:04 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-03-16 18:10:04 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-03-15 12:08:03 ----D---- C:\logs
2018-03-15 01:00:39 ----D---- C:\Windows\system32\NDF
2018-03-13 22:39:16 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2018-03-13 22:39:11 ----D---- C:\Windows\system32\Macromed
2018-03-13 22:39:07 ----D---- C:\Windows\SYSWOW64\Macromed
2018-03-13 22:05:10 ----D---- C:\Windows\rescache
2018-03-13 19:29:42 ----D---- C:\Windows\winsxs
2018-03-13 19:26:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2018-03-13 19:26:22 ----D---- C:\Program Files\Internet Explorer
2018-03-13 19:26:22 ----D---- C:\Program Files (x86)\Internet Explorer
2018-03-13 19:26:21 ----D---- C:\Windows\SYSWOW64\en-US
2018-03-13 19:26:18 ----D---- C:\Windows\system32\en-US
2018-03-13 19:26:18 ----D---- C:\Windows\system32\cs-CZ
2018-03-13 19:26:13 ----D---- C:\Windows\system32\CodeIntegrity
2018-03-13 19:26:13 ----D---- C:\Windows\system32\Boot
2018-03-13 19:26:13 ----D---- C:\Windows\AppPatch
2018-03-13 19:07:51 ----D---- C:\Windows\system32\MRT
2018-03-13 19:01:03 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-03-13 19:00:21 ----AC---- C:\Windows\system32\MRT.exe
2018-03-11 00:07:20 ----D---- C:\Windows\Prefetch
2018-03-08 03:12:16 ----D---- C:\ProgramData\Synaptics
2018-03-07 17:09:22 ----D---- C:\Windows\LiveKernelReports
2018-03-06 09:29:26 ----D---- C:\Program Files (x86)\Intel Driver and Support Assistant
2018-03-06 09:24:46 ----A---- C:\Windows\system32\ibtsiva.exe
2018-03-02 12:00:37 ----D---- C:\Windows\Tasks
2018-03-01 21:08:07 ----D---- C:\Users\Jarka\AppData\Roaming\Skype
2018-02-28 07:16:58 ----D---- C:\Windows\system32\appraiser
2018-02-24 07:47:12 ----D---- C:\Windows\Microsoft.NET
2018-02-24 00:32:15 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 DLMFENC;DLMFENC; C:\Windows\system32\DRIVERS\DLMFENC.sys [2018-02-27 174152]
R0 DLPCRYPT;DLPCRYPT; C:\Windows\system32\DRIVERS\dlpcrypt.sys [2017-11-02 121728]
R0 dlpvdisk;dlpvdisk; C:\Windows\system32\DRIVERS\dlpvdisk.sys [2017-11-02 98296]
R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2018-01-08 110432]
R0 file_tracker;Acronis File Tracker Driver; C:\Windows\system32\DRIVERS\file_tracker.sys [2017-06-26 366432]
R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2016-09-27 163160]
R0 iaStorA;Intel(R) Chipset SATA/PCIe RST Premium Controller; C:\Windows\system32\DRIVERS\iaStorA.sys [2017-12-05 905736]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2017-12-05 41480]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2018-03-11 331240]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2018-03-11 590824]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 213736]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2017-06-26 340312]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2017-06-26 1267552]
R0 VDLPToken2;VDLPToken2; C:\Windows\system32\DRIVERS\vdlptkn2.sys [2017-11-02 135672]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2018-02-14 137928]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2018-01-08 196112]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2018-01-08 82816]
R1 EpfwLWF;ESET Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2018-01-08 61520]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2018-01-08 108320]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2017-12-05 27552]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\Windows\system32\DRIVERS\ndisrd.sys [2014-08-14 43088]
R1 RapportAegle64;RapportAegle64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [2018-03-11 482600]
R1 RapportCerberus_1908115;RapportCerberus_1908115; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1908115.sys [2018-03-19 1628776]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2018-03-11 695592]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2018-03-11 736488]
R1 RawDisk3;RawDisk3; \??\C:\Windows\system32\drivers\rawdsk3.sys [2016-02-19 41576]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2018-01-08 50136]
R2 NPF;NetGroup Packet Filter Driver; \??\C:\Windows\system32\drivers\npf.sys [2018-02-10 35344]
R2 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2017-06-26 193376]
R2 virtual_file;Acronis Virtual File Driver; C:\Windows\system32\DRIVERS\virtual_file.sys [2016-09-27 279392]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2016-09-21 34552]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2017-07-06 119296]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2017-11-20 159752]
R3 ibtusb;Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2018-03-06 126912]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2016-11-02 38680]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-06-20 7940600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-07-07 5545512]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-09-04 394992]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2017-07-07 824848]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2017-12-21 201296]
R3 NETwNs64;___ Ovladač adaptéru Intel(R) Wireless pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw04.sys [2017-10-29 3472392]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2017-09-11 329184]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2018-01-31 980424]
R3 rtsuvc;EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2018-02-13 3127552]
R3 Tpm;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 147904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2017-11-20 1569288]
S3 ESETCleanersDriver;ESET Cleaner Service; \??\C:\Windows\system32\Drivers\ESETCleanersDriver.sys [2017-09-02 181160]
S3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2017-07-07 32840]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2017-07-07 480800]
S3 IUFileFilter;IUFileFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [2017-06-06 21928]
S3 IURegProcessFilter;IURegProcessFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [2017-09-28 21872]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 semav6msr64;semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [2018-01-11 41512]
S3 tnd;Acronis Try&Decide filter; C:\Windows\system32\DRIVERS\tnd.sys [2017-06-26 601432]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2017-10-26 1205992]
R2 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2017-10-26 1861352]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2017-10-26 1193704]
R2 dlpsrv;DESlock+ Service; C:\Program Files\ESET\ESET SecurityESET Secure Data\dlpsrv.exe [2017-11-02 542400]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [2018-01-17 22304]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2018-03-15 2213344]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-11-12 644776]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2017-11-21 332144]
R2 HPTouchpointAnalyticsService;HP Touchpoint Analytics; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [2017-11-22 332216]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-06-20 356352]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2018-03-11 5243208]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-11-12 159912]
R2 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe [2018-01-11 182544]
R2 valWBFPolicyService;Synaptics FP WBF Policy Service; C:\Windows\system32\valWBFPolicyService.exe [2017-02-14 88400]
R3 ekrnEpfw;ESET Firewall Helper; C:\Program Files\ESET\ESET Security\ekrn.exe [2018-03-15 2213344]
R3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2017-12-12 23920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-10-03 128608]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-02-15 24576]
S3 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2016-10-14 1244408]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-03-13 272384]
S3 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2017-06-26 4463592]
S3 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-06-20 284160]
S3 ESRV_SVC_QUEENCREEK;Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [2018-01-11 886032]
S3 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-19 153168]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-19 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-02-10 116224]
S3 Intel(R) SUR QC SAM;Intel(R) SUR QC Software Asset Manager; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13 18168]
S3 IObitUnSvr;IObit Uninstaller Service; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [2017-06-14 206112]
S3 mmsminisrv;Acronis Managed Machine Service Mini; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [2015-08-11 4884064]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-03-16 174544]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-11-12 268968]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 TeamViewer;TeamViewer 13; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2018-03-09 11294448]
S3 USER_ESRV_SVC_QUEENCREEK;User Energy Server Service queencreek; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [2018-01-11 886032]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-09-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-10-03 52832]
S4 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 UxTuneUp;TuneUp Theme Extension; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\uxtuneup.dll

-----------------EOF-----------------

Smazáno, log je již OK.

_________________
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte:

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

a co s tím OTM prosím? to už se nemaže?

Jj., maže. Spusťte OT a klikněte na CleanUp! OTM uklidí vše, co jsme do PC natahali.

_________________
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte:

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

děkuji pěkně

Rádo se stalo!

_________________
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte:

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.