VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Problém s kurzorem

https://forum.viry.cz:443/viewtopic.php?t=144751

Stránka 1 z 2

Problém s kurzorem

Napsal: 06 čer 2015 07:57
od monik1
Zdravím, mám problém s kurzorem na obrazovce - špatně reaguje, poskakuje.
Prováděla jsem sken malwarebytes a nic nenašel.
Prosím o kontrolu logu.




Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenka at 2015-06-06 08:50:23
Microsoft Windows 8.1 s aplikací Bing
System drive C: has 391 GB (90%) free of 434 GB
Total RAM: 1930 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:50:33, on 6. 6. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE
C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe
C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera_crashreporter.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files\trend micro\Lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com/?pc=LCJB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\Lenka\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Lenka\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout pomocí Download &Express - C:\Program Files (x86)\Download Express\Add_Url.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: LenovoSetSvr - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) - Unknown owner - C:\Windows\System32\LenovoWiFiHotspotSvr.exe (file missing)
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: LUService - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo PhoneCompanionPusher Service (PhoneCompanionPusher) - Lenovo - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
O23 - Service: Lenovo PhoneCompanionVap Service (PhoneCompanionVap) - Lenovo - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: USBBKSvc - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe
O23 - Service: @oem20.inf,%WBFService_SvcDesc%;Validity WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\windows\System32\valWBFPolicyService.exe (file missing)
O23 - Service: BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\windows\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wondershare Application Framework Service (WsAppService) - Wondershare - C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe

--
End of file - 11332 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a1d99aa1-ee46-4a93-a9c9-23fbf676c56a -SystemEventPortName:HostProcess-460b0fae-c5e4-4def-93e8-a70667621910 -IoCancelEventPortName:HostProcess-d81c12c0-32bf-4577-b3c7-74af62328e83 -NonStateChangingEventPortName:HostProcess-7c0398d7-d42c-420a-8d3a-7b63399de95e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:44bedc31-32f9-4074-b62b-cd0e9fc35408 -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-0fc8602c-ca82-4030-bfb0-e6f87a49377f -SystemEventPortName:HostProcess-30ed4186-081d-4055-8f23-88b4a477da48 -IoCancelEventPortName:HostProcess-442f8ad6-647a-4c15-a01f-009db665a8c4 -NonStateChangingEventPortName:HostProcess-11e736f5-fded-4be3-916e-589c43766d9b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6a9d53a6-6c4f-452c-973c-ad528bf1111d -DeviceGroupId:WudfDefaultDevicePool
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 821518515744
\??\C:\windows\system32\conhost.exe 0x4
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
"C:\Program Files\Lenovo\iMController\SystemAgentService.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe"
C:\Windows\System32\LenovoWiFiHotspotSvr.exe
"C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe"
"C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe"
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
"C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe"
C:\windows\System32\valWBFPolicyService.exe
C:\windows\system32\valWbioSyncSvc.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
dashost.exe {ae380e31-3bb3-4393-b706cbe48796b050}
"c:\Program Files\Validity Sensors\Shared\SensorDBSynch.exe"
\??\C:\windows\system32\conhost.exe 0x4
C:\windows\Explorer.EXE
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
"C:\windows\system32\GWX\GWX.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\windows\system32\igfxsrvc.exe" -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\Password Manager\password_manager.exe"
"C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe"
"C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe"
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE"
"C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe"
"C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
adb fork-server server
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --ran-launcher /crash-reporter-parent-id=5052
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=gpu-process --channel="5052.0.832891943\1951052600" --enable-proprietary-media-types-playback --crash-reporter-pid=1560 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,20,43 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3408 --enable-proprietary-media-types-playback --crash-reporter-pid=1560 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --crash-reporter-pid=1560 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5052 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="5052.3.956759877\2036323357" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=1560 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5052 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="5052.4.2020173109\770448674" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=1560 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5052 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="5052.5.181761624\1336549870" /prefetch:673131151
service
C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "0x5d8_0x918_0x587dceab"
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=1560 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5052 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="5052.10.345993245\290086847" /prefetch:673131151
taskeng.exe {42DCF2C4-C4FC-4D86-9EDF-4304EDF840A0}
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 580 584 592 65536 588

"C:\Users\Lenka\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskMachineUA1d05119c6980c62.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Lenka\AppData\Roaming\Mozilla\Firefox\Profiles\a3v3tocf.default-1431588022106

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.188 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.188 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-02 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-02 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2014-03-06 391152]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2014-03-06 771568]
"Persistence"=C:\windows\system32\igfxpers.exe [2014-03-06 770544]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-26 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2014-04-08 217088]
"PasswordManager"=C:\Program Files\Lenovo\Password Manager\password_manager.exe [2014-01-09 1622072]
"PhoneCompanion"=C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [2014-08-17 836592]
"Energy Manager"=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2014-08-17 16094704]
"Lenovo Utility"=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2014-08-17 10973168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-04-23 8204056]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-06-02 28785280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #1"=C:\Users\Lenka\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Lenka\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2011-12-07 214312]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2014-01-16 624640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-30 18:25:37 ----D---- C:\windows\Migration
2015-05-30 08:55:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-05-29 18:29:45 ----A---- C:\windows\SYSWOW64\sdbinst.exe
2015-05-29 18:29:45 ----A---- C:\windows\system32\sdbinst.exe
2015-05-28 10:54:11 ----D---- C:\Users\Lenka\AppData\Roaming\Wondershare
2015-05-28 10:52:25 ----A---- C:\windows\system32\WSMonEditor.dll
2015-05-28 10:52:18 ----D---- C:\ProgramData\wondershare
2015-05-28 10:46:56 ----D---- C:\ProgramData\PDFelement
2015-05-28 10:46:07 ----D---- C:\Program Files (x86)\Wondershare
2015-05-28 10:32:33 ----D---- C:\Users\Lenka\AppData\Roaming\PDF Architect 3
2015-05-28 10:25:01 ----D---- C:\ProgramData\PDF Architect 3
2015-05-28 10:21:02 ----D---- C:\ProgramData\Norton
2015-05-28 10:21:00 ----D---- C:\ProgramData\NortonInstaller
2015-05-24 13:27:20 ----A---- C:\windows\system32\SyncEngine.dll
2015-05-24 13:27:16 ----A---- C:\windows\system32\SkyDrive.exe
2015-05-24 13:27:14 ----A---- C:\windows\system32\SkyDriveTelemetry.dll
2015-05-24 13:27:13 ----A---- C:\windows\system32\SkyDriveShell.dll
2015-05-24 13:27:12 ----A---- C:\windows\SYSWOW64\SkyDriveShell.dll
2015-05-24 13:27:12 ----A---- C:\windows\system32\winbici.dll
2015-05-24 13:27:12 ----A---- C:\windows\system32\BulkOperationHost.exe
2015-05-24 12:35:45 ----D---- C:\a75895502d567a05039ef83838c5e95c
2015-05-22 10:44:25 ----D---- C:\windows\system32\LSC
2015-05-20 13:07:09 ----A---- C:\windows\system32\drivers\sdbus.sys
2015-05-20 13:07:08 ----A---- C:\windows\system32\drivers\dumpsd.sys
2015-05-20 13:06:49 ----A---- C:\windows\system32\wpdshext.dll
2015-05-20 13:06:48 ----A---- C:\windows\SYSWOW64\wpdshext.dll
2015-05-20 12:21:51 ----A---- C:\windows\system32\drivers\bthhfenum.sys
2015-05-20 12:21:45 ----A---- C:\windows\system32\dwmcore.dll
2015-05-20 12:21:45 ----A---- C:\windows\system32\drivers\ahcache.sys
2015-05-20 12:21:44 ----A---- C:\windows\SYSWOW64\dwmcore.dll
2015-05-20 12:21:43 ----A---- C:\windows\SYSWOW64\Windows.UI.Input.Inking.dll
2015-05-20 12:21:43 ----A---- C:\windows\system32\Windows.UI.Input.Inking.dll
2015-05-20 12:21:42 ----A---- C:\windows\system32\SettingsHandlers.dll
2015-05-20 12:21:41 ----A---- C:\windows\system32\SystemSettingsDatabase.dll
2015-05-20 12:20:53 ----A---- C:\windows\SYSWOW64\dbgeng.dll
2015-05-20 12:20:53 ----A---- C:\windows\system32\dbgeng.dll
2015-05-20 12:20:52 ----A---- C:\windows\SYSWOW64\dbghelp.dll
2015-05-20 12:20:52 ----A---- C:\windows\system32\dbghelp.dll
2015-05-20 12:20:50 ----A---- C:\windows\SYSWOW64\SRH.dll
2015-05-20 12:20:50 ----A---- C:\windows\system32\SRH.dll
2015-05-20 12:20:46 ----A---- C:\windows\SYSWOW64\PhotoMetadataHandler.dll
2015-05-20 12:20:46 ----A---- C:\windows\system32\PhotoMetadataHandler.dll
2015-05-20 12:20:37 ----A---- C:\windows\system32\drivers\USBHUB3.SYS
2015-05-20 11:55:31 ----A---- C:\windows\system32\wevtsvc.dll
2015-05-20 11:39:51 ----A---- C:\windows\system32\dpapisrv.dll
2015-05-20 11:38:36 ----A---- C:\windows\system32\drivers\udfs.sys
2015-05-19 08:28:02 ----A---- C:\windows\system32\aswBoot.exe
2015-05-16 17:11:20 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-16 17:11:20 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 18:13:05 ----A---- C:\windows\SYSWOW64\schannel.dll
2015-05-14 18:13:05 ----A---- C:\windows\system32\schannel.dll
2015-05-14 18:12:46 ----A---- C:\windows\system32\DWrite.dll
2015-05-14 18:12:45 ----A---- C:\windows\SYSWOW64\DWrite.dll
2015-05-14 18:12:45 ----A---- C:\windows\system32\win32k.sys
2015-05-14 18:12:45 ----A---- C:\windows\system32\FntCache.dll
2015-05-14 18:09:18 ----A---- C:\windows\SYSWOW64\certcli.dll
2015-05-14 18:09:18 ----A---- C:\windows\system32\lsasrv.dll
2015-05-14 18:09:18 ----A---- C:\windows\system32\drivers\cng.sys
2015-05-14 18:09:18 ----A---- C:\windows\system32\certcli.dll
2015-05-14 18:08:48 ----A---- C:\windows\system32\services.exe
2015-05-14 18:04:22 ----A---- C:\windows\system32\mshtml.dll
2015-05-14 18:04:17 ----A---- C:\windows\SYSWOW64\mshtml.dll
2015-05-14 18:04:14 ----A---- C:\windows\system32\jscript9.dll
2015-05-14 18:04:13 ----A---- C:\windows\system32\ieframe.dll
2015-05-14 18:04:11 ----A---- C:\windows\SYSWOW64\ieframe.dll
2015-05-14 18:04:10 ----A---- C:\windows\SYSWOW64\jscript9.dll
2015-05-14 18:04:09 ----A---- C:\windows\SYSWOW64\wininet.dll
2015-05-14 18:04:09 ----A---- C:\windows\SYSWOW64\iertutil.dll
2015-05-14 18:04:09 ----A---- C:\windows\system32\wininet.dll
2015-05-14 18:04:09 ----A---- C:\windows\system32\iertutil.dll
2015-05-14 18:04:08 ----A---- C:\windows\SYSWOW64\urlmon.dll
2015-05-14 18:04:08 ----A---- C:\windows\system32\urlmon.dll
2015-05-14 18:04:07 ----A---- C:\windows\system32\jscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\SYSWOW64\vbscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\SYSWOW64\jscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\system32\vbscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\system32\ie4uinit.exe
2015-05-14 18:04:03 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2015-05-14 18:04:03 ----A---- C:\windows\system32\msfeeds.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\iepeers.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\webcheck.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\mshtmled.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\inseng.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\inetcomm.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\ieui.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\iepeers.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\iedkcs32.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\dxtrans.dll
2015-05-14 18:04:01 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2015-05-14 18:04:01 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2015-05-14 18:04:01 ----A---- C:\windows\system32\ieapfltr.dll
2015-05-14 09:45:26 ----D---- C:\Users\Lenka\AppData\Roaming\Opera Software
2015-05-14 09:41:51 ----D---- C:\Program Files (x86)\Opera
2015-05-14 09:37:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-12 12:25:39 ----D---- C:\Users\Lenka\AppData\Roaming\Malwarebytes
2015-05-12 12:24:35 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-05-12 09:13:54 ----D---- C:\Program Files\trend micro
2015-05-12 09:13:53 ----D---- C:\rsit
2015-05-10 15:25:55 ----A---- C:\windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2015-06-06 08:38:27 ----D---- C:\windows\Prefetch
2015-06-06 08:37:27 ----D---- C:\windows\system32\sru
2015-06-06 08:28:09 ----D---- C:\windows\Temp
2015-06-06 08:27:04 ----D---- C:\ProgramData\Validity
2015-06-05 21:56:34 ----D---- C:\ProgramData\LU
2015-06-05 20:27:03 ----RAD---- C:\windows\System32
2015-06-05 20:27:03 ----D---- C:\windows\Inf
2015-06-05 20:27:03 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-06-05 20:22:31 ----RD---- C:\Program Files (x86)
2015-06-05 20:22:30 ----HD---- C:\ProgramData
2015-06-05 19:37:37 ----D---- C:\windows\system32\drivers
2015-06-05 19:06:33 ----D---- C:\Users\Lenka\AppData\Roaming\Skype
2015-06-05 19:01:17 ----HD---- C:\Program Files\WindowsApps
2015-06-05 18:58:09 ----D---- C:\windows\AppReadiness
2015-06-05 11:52:23 ----SHD---- C:\windows\Installer
2015-06-05 11:52:22 ----D---- C:\ProgramData\Skype
2015-06-05 11:21:39 ----AD---- C:\Windows
2015-06-05 10:52:27 ----D---- C:\windows\debug
2015-06-04 11:32:06 ----D---- C:\windows\system32\config
2015-06-04 11:18:01 ----D---- C:\windows\WinSxS
2015-06-04 11:18:01 ----D---- C:\windows\SysWOW64
2015-06-04 11:18:01 ----D---- C:\windows\apppatch
2015-06-04 11:17:50 ----D---- C:\windows\Microsoft.NET
2015-06-04 11:10:00 ----D---- C:\windows\MediaViewer
2015-06-04 11:10:00 ----D---- C:\windows\FileManager
2015-06-04 11:10:00 ----D---- C:\windows\Camera
2015-06-04 11:09:59 ----RD---- C:\windows\ToastData
2015-06-04 11:09:59 ----D---- C:\Program Files\Internet Explorer
2015-06-04 11:09:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Portable Devices
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Multimedia Platform
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Media Player
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Mail
2015-06-04 11:09:42 ----D---- C:\Program Files\Windows Photo Viewer
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\oobe
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\migration
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\en-US
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\Com
2015-06-04 11:09:39 ----D---- C:\windows\servicing
2015-06-04 11:09:39 ----D---- C:\Program Files\Common Files\System
2015-06-04 11:09:37 ----D---- C:\windows\SYSWOW64\sppui
2015-06-04 11:09:37 ----D---- C:\windows\SYSWOW64\setup
2015-06-04 11:09:37 ----D---- C:\windows\SYSWOW64\cs-CZ
2015-06-04 11:09:36 ----D---- C:\windows\SYSWOW64\wbem
2015-06-04 11:09:35 ----D---- C:\windows\SYSWOW64\migwiz
2015-06-04 11:09:35 ----D---- C:\windows\SYSWOW64\Dism
2015-06-04 11:08:28 ----D---- C:\windows\twain_32
2015-06-04 11:08:28 ----D---- C:\windows\system32\en-US
2015-06-04 11:08:28 ----D---- C:\windows\system32\Com
2015-06-04 11:08:28 ----D---- C:\windows\IME
2015-06-04 11:08:25 ----AD---- C:\windows\system32\oobe
2015-06-04 11:08:24 ----D---- C:\windows\system32\Sysprep
2015-06-04 11:08:24 ----D---- C:\windows\system32\migration
2015-06-04 11:08:22 ----D---- C:\windows\system32\setup
2015-06-04 11:08:21 ----D---- C:\windows\system32\sppui
2015-06-04 11:08:21 ----D---- C:\windows\system32\cs-CZ
2015-06-04 11:08:18 ----D---- C:\windows\system32\WinBioPlugIns
2015-06-04 11:08:17 ----D---- C:\windows\system32\drivers\en-US
2015-06-04 11:08:17 ----D---- C:\windows\system32\drivers\cs-CZ
2015-06-04 11:08:16 ----D---- C:\windows\system32\wbem
2015-06-04 11:08:12 ----D---- C:\windows\system32\migwiz
2015-06-04 11:08:11 ----SD---- C:\windows\system32\dsc
2015-06-04 11:08:11 ----D---- C:\windows\system32\SystemResetPlatform
2015-06-04 11:08:11 ----D---- C:\windows\system32\Dism
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Portable Devices
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Media Player
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Mail
2015-06-04 11:06:21 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-06-04 11:06:11 ----D---- C:\Program Files\WindowsPowerShell
2015-06-04 11:05:59 ----D---- C:\windows\system32\DriverStore
2015-06-04 11:04:50 ----D---- C:\windows\system32\drivers\UMDF
2015-06-01 18:09:27 ----SHD---- C:\System Volume Information
2015-05-31 20:27:24 ----RSD---- C:\windows\assembly
2015-05-30 19:40:25 ----D---- C:\windows\rescache
2015-05-30 18:53:26 ----D---- C:\windows\CbsTemp
2015-05-30 18:42:22 ----SH---- C:\windows\system32\desktop.ini
2015-05-30 18:38:56 ----A---- C:\windows\SYSWOW64\msclmd.dll
2015-05-30 18:38:19 ----A---- C:\windows\system32\msclmd.dll
2015-05-30 18:25:37 ----SD---- C:\windows\SYSWOW64\GWX
2015-05-30 18:25:37 ----SD---- C:\windows\system32\GWX
2015-05-28 18:42:28 ----RD---- C:\Program Files
2015-05-28 18:38:16 ----SD---- C:\ProgramData\Microsoft
2015-05-28 10:30:30 ----D---- C:\windows\system32\Tasks
2015-05-28 10:30:29 ----D---- C:\windows\Tasks
2015-05-24 13:42:47 ----D---- C:\windows\AppCompat
2015-05-24 13:26:15 ----D---- C:\windows\system32\catroot
2015-05-24 12:52:57 ----D---- C:\ProgramData\Microsoft Help
2015-05-24 12:50:04 ----RD---- C:\windows\ImmersiveControlPanel
2015-05-24 12:49:43 ----D---- C:\windows\system32\AdvancedInstallers
2015-05-24 12:49:38 ----RSD---- C:\windows\Fonts
2015-05-24 12:47:26 ----D---- C:\windows\system32\MRT
2015-05-24 12:36:08 ----A---- C:\windows\system32\MRT.exe
2015-05-24 12:31:25 ----SD---- C:\windows\system32\CompatTel
2015-05-24 12:31:25 ----D---- C:\windows\system32\appraiser
2015-05-16 10:42:24 ----D---- C:\Program Files\Windows Journal
2015-05-14 17:47:03 ----D---- C:\windows\system32\catroot2
2015-05-12 12:24:39 ----D---- C:\ProgramData\Malwarebytes
2015-05-07 09:15:30 ----D---- C:\Program Files\Lenovo

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2015-05-10 65736]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2015-05-10 272248]
R0 LubSec;LubSec; C:\windows\System32\Drivers\LubSec.sys [2014-02-22 45304]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2015-05-10 93528]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2015-05-10 1047320]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2015-05-10 442264]
R1 SMIDriver;SMIDriver; C:\windows\system32\drivers\smi.sys [2014-01-22 19760]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2015-05-10 29168]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2015-05-10 89944]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2015-05-10 137288]
R2 LubFsFlt;LubFsFlt; \??\C:\windows\System32\Drivers\LubFsFlt.sys [2014-02-22 27384]
R3 ACPIVPC;@oem22.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2014-08-17 35576]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2014-01-16 4222976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2014-05-26 3975128]
R3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2014-01-16 450520]
R3 iwdbus;@oem8.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\windows\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 RSP2STOR;@oem10.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\windows\system32\DRIVERS\RtsP2Stor.sys [2013-09-24 290520]
R3 RtkBtFilter;@oem16.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\windows\system32\DRIVERS\RtkBtfilter.sys [2014-02-26 559832]
R3 RTL8168;@oem11.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\windows\system32\DRIVERS\Rt630x64.sys [2013-12-18 839896]
R3 RTWlanE;@oem14.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\windows\system32\DRIVERS\rtwlane.sys [2014-04-30 3421040]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2014-01-24 34544]
R3 SNP2UVC;@oem15.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2014-04-26 2855960]
R3 SynTP;@oem13.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2014-01-24 532720]
R3 TXEIx64;@oem4.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\windows\System32\drivers\TXEIx64.sys [2013-07-02 87568]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2014-10-29 1198080]
S3 cleanhlp;cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys []
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2013-06-18 460288]
S3 intaud_WaveExtensible;@oem7.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 NETwNe64;@netwew02.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\windows\system32\DRIVERS\NETwew02.sys [2013-06-18 4649440]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-10 343336]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2014-03-28 95232]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-02 733696]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [2014-05-22 584960]
R2 LenovoSetSvr;LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe [2014-08-17 389680]
R2 LenovoWiFiHotspotSvr;Lenovo WiFiHotspot Service; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [2014-08-17 198192]
R2 LUService;LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [2014-02-18 38896]
R2 PhoneCompanionPusher;Lenovo PhoneCompanionPusher Service; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [2014-08-17 288240]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
R2 USBBKSvc;USBBKSvc; C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe [2013-12-25 35824]
R2 valWBFPolicyService;@oem20.inf,%WBFService_SvcDesc%;Validity WBF Policy Service; C:\windows\System32\valWBFPolicyService.exe [2014-01-17 46992]
R2 valWbioSyncSvc;BiometricSensorDataSynchronization; C:\windows\system32\valWbioSyncSvc.exe [2014-01-17 32256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16 268464]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2014-03-06 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25 107848]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-02 822232]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [2014-06-03 533760]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2014-10-16 272776]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-30 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PhoneCompanionVap;Lenovo PhoneCompanionVap Service; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [2014-08-17 305136]

-----------------EOF-----------------

Re: Problém s kurzorem

Napsal: 06 čer 2015 08:14
od Márty84
Zdravim :)

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

Re: Problém s kurzorem

Napsal: 06 čer 2015 08:33
od monik1
Zde log adw cleaner:



# AdwCleaner v4.206 - Log vytvořen 06/06/2015 v 09:28:22
# Aktualizováno 01/06/2015 by Xplode
# Databáze : 2015-06-05.1 [Server]
# Operační system : Windows 8.1 Connected (x64)
# Uživatelské jméno : Lenka - LENOVO-PCLENKA
# Spuštěno z : C:\Users\Lenka\Desktop\adwcleaner_4.206.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : valWbioSyncSvc

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Users\Lenka\AppData\Local\FileViewPro
Složka Smazáno : C:\Users\Lenka\AppData\Roaming\Solvusoft
Soubor Smazáno : C:\windows\System32\roboot64.exe
Soubor Smazáno : C:\windows\System32\valWbioSyncSvc.exe
Soubor Smazáno : C:\Users\Lenka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor Smazáno : C:\Users\Lenka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Klíč Smazáno : HKCU\Software\Classes\pokki
Klíč Smazáno : HKCU\Software\AppDataLow\Software\adawarebp

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v38.0.5 (x86 cs)


-\\ Google Chrome v43.0.2357.81

[C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : eofcbnmajmjmplflapaojjnihcjkigck

-\\ Opera v29.0.1795.60


*************************

AdwCleaner[R0].txt - [1687 bytů] - [06/06/2015 09:25:50]
AdwCleaner[S0].txt - [1605 bytů] - [06/06/2015 09:28:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1663 bytů] ##########

Re: Problém s kurzorem

Napsal: 06 čer 2015 08:36
od Márty84
V MBAM jste spustila jaky test? Sken hrozeb? Nebo vlastni sken?

Pokud sken hrozeb, spustte jeste Vlastni sken vsech disku.

Jinak dejte novy log z RSIT :)

Re: Problém s kurzorem

Napsal: 06 čer 2015 08:54
od monik1
Log RSIT:


# AdwCleaner v4.206 - Log vytvořen 06/06/2015 v 09:28:22
# Aktualizováno 01/06/2015 by Xplode
# Databáze : 2015-06-05.1 [Server]
# Operační system : Windows 8.1 Connected (x64)
# Uživatelské jméno : Lenka - LENOVO-PCLENKA
# Spuštěno z : C:\Users\Lenka\Desktop\adwcleaner_4.206.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : valWbioSyncSvc

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Users\Lenka\AppData\Local\FileViewPro
Složka Smazáno : C:\Users\Lenka\AppData\Roaming\Solvusoft
Soubor Smazáno : C:\windows\System32\roboot64.exe
Soubor Smazáno : C:\windows\System32\valWbioSyncSvc.exe
Soubor Smazáno : C:\Users\Lenka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor Smazáno : C:\Users\Lenka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Klíč Smazáno : HKCU\Software\Classes\pokki
Klíč Smazáno : HKCU\Software\AppDataLow\Software\adawarebp

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v38.0.5 (x86 cs)


-\\ Google Chrome v43.0.2357.81

[C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : eofcbnmajmjmplflapaojjnihcjkigck

-\\ Opera v29.0.1795.60


*************************

AdwCleaner[R0].txt - [1687 bytů] - [06/06/2015 09:25:50]
AdwCleaner[S0].txt - [1605 bytů] - [06/06/2015 09:28:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1663 bytů] ##########


v malwarebytes byl proveden sken hrozeb.

Re: Problém s kurzorem

Napsal: 06 čer 2015 09:13
od Márty84
To co jste poslala byl log z ADWCleaneru, ne RSIT :D

Sken hrozeb neprohlizi cely pocitac. Tak spustte MBAM znovu a spustte Vlastni sken :wink:

Re: Problém s kurzorem

Napsal: 06 čer 2015 09:24
od monik1
Tak teď už RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenka at 2015-06-06 10:23:43
Microsoft Windows 8.1 s aplikací Bing
System drive C: has 390 GB (90%) free of 434 GB
Total RAM: 1930 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:23:47, on 6. 6. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE
C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe
C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe
C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera_crashreporter.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\trend micro\Lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com/?pc=LCJB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\Lenka\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Lenka\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKUS\S-1-5-21-3807323175-3616339250-1653748877-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (User '?')
O4 - HKUS\S-1-5-21-3807323175-3616339250-1653748877-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun (User '?')
O4 - HKUS\S-1-5-21-3807323175-3616339250-1653748877-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\RunOnce: [Application Restart #1] C:\Users\Lenka\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Lenka\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session (User '?')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout pomocí Download &Express - C:\Program Files (x86)\Download Express\Add_Url.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: LenovoSetSvr - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) - Unknown owner - C:\Windows\System32\LenovoWiFiHotspotSvr.exe (file missing)
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: LUService - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo PhoneCompanionPusher Service (PhoneCompanionPusher) - Lenovo - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
O23 - Service: Lenovo PhoneCompanionVap Service (PhoneCompanionVap) - Lenovo - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: USBBKSvc - Lenovo(beijing) Limited - C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe
O23 - Service: @oem20.inf,%WBFService_SvcDesc%;Validity WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\windows\System32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wondershare Application Framework Service (WsAppService) - Wondershare - C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe

--
End of file - 12761 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-533fee95-8d98-4cfc-a3a5-bf34cd041494 -SystemEventPortName:HostProcess-f6d2e70d-10d8-4ee3-9a2d-1187642b4a2e -IoCancelEventPortName:HostProcess-f92e4216-6da9-491f-b079-3604b10b9c76 -NonStateChangingEventPortName:HostProcess-fdb2bc34-77b0-4426-be1e-9529c6236ef8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:be25e2ff-cec0-4d95-82f6-6b562091461a -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-05fcbb17-c4c2-4899-b333-b301c16860e7 -SystemEventPortName:HostProcess-e8117267-fd33-42ce-a6f3-af68821cf4cd -IoCancelEventPortName:HostProcess-6612c81b-9776-4b11-9e36-bb099a446780 -NonStateChangingEventPortName:HostProcess-6b65a97c-4d9c-4bee-ada6-2ae0e565d3a8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:432a1409-d010-47c7-9d5b-f0252b5775b3 -DeviceGroupId:WudfDefaultDevicePool
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 89779385296
\??\C:\windows\system32\conhost.exe 0x4
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
"C:\Program Files\Lenovo\iMController\SystemAgentService.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe"
C:\Windows\System32\LenovoWiFiHotspotSvr.exe
"C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe"
"C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe"
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
"C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe"
C:\windows\System32\valWBFPolicyService.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\Explorer.EXE
C:\windows\System32\svchost.exe -k LocalServicePeerNet
dashost.exe {24b72899-2e20-4fc5-89cb9e32908ab2cd}
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\system32\GWX\GWX.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\System32\igfxtray.exe"
"C:\windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\Password Manager\password_manager.exe"
"C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe"
"C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe"
"C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe"
"C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe"
"C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --ran-launcher /crash-reporter-parent-id=4920
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=gpu-process --channel="4920.0.424640378\478459393" --enable-proprietary-media-types-playback --crash-reporter-pid=4940 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,20,43 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3408 --enable-proprietary-media-types-playback --crash-reporter-pid=4940 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --crash-reporter-pid=4940 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="4920.3.2035109819\78656862" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=4940 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="4920.4.204533998\210002507" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=4940 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="4920.6.1840458709\1677769335" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=4940 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="4920.7.1671745099\216394472" /prefetch:673131151
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
adb fork-server server
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=plugin --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll" --disable-direct-npapi-requests --lang=cs --channel="4920.11.349116605\1175614046" --enable-proprietary-media-types-playback --crash-reporter-pid=4940 /prefetch:-390060480
service
"C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=4940 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="4920.12.1748482236\753972252" /prefetch:673131151
C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "0xd70_0xe8c_0x5875ab89"
"C:\windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe"
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe" -START

"C:\Users\Lenka\Downloads\RSITx64 (2).exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskMachineUA1d05119c6980c62.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Lenka\AppData\Roaming\Mozilla\Firefox\Profiles\a3v3tocf.default-1431588022106

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.188 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.188 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-02 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-02 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2014-03-06 391152]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2014-03-06 771568]
"Persistence"=C:\windows\system32\igfxpers.exe [2014-03-06 770544]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-26 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2014-04-08 217088]
"PasswordManager"=C:\Program Files\Lenovo\Password Manager\password_manager.exe [2014-01-09 1622072]
"PhoneCompanion"=C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [2014-08-17 836592]
"Energy Manager"=C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [2014-08-17 16094704]
"Lenovo Utility"=C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [2014-08-17 10973168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-04-23 8204056]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-06-02 28785280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #1"=C:\Users\Lenka\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Lenka\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2011-12-07 214312]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2014-01-16 624640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-06-06 09:55:47 ----A---- C:\windows\system32\drivers\MBAMSwissArmy.sys
2015-06-06 09:55:31 ----A---- C:\windows\system32\drivers\mwac.sys
2015-06-06 09:55:31 ----A---- C:\windows\system32\drivers\mbamchameleon.sys
2015-06-06 09:55:31 ----A---- C:\windows\system32\drivers\mbam.sys
2015-06-06 09:55:30 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-06 09:25:40 ----D---- C:\AdwCleaner
2015-05-30 18:25:37 ----D---- C:\windows\Migration
2015-05-30 08:55:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-05-29 18:29:45 ----A---- C:\windows\SYSWOW64\sdbinst.exe
2015-05-29 18:29:45 ----A---- C:\windows\system32\sdbinst.exe
2015-05-28 10:54:11 ----D---- C:\Users\Lenka\AppData\Roaming\Wondershare
2015-05-28 10:52:25 ----A---- C:\windows\system32\WSMonEditor.dll
2015-05-28 10:52:18 ----D---- C:\ProgramData\wondershare
2015-05-28 10:46:56 ----D---- C:\ProgramData\PDFelement
2015-05-28 10:46:07 ----D---- C:\Program Files (x86)\Wondershare
2015-05-28 10:32:33 ----D---- C:\Users\Lenka\AppData\Roaming\PDF Architect 3
2015-05-28 10:25:01 ----D---- C:\ProgramData\PDF Architect 3
2015-05-28 10:21:02 ----D---- C:\ProgramData\Norton
2015-05-28 10:21:00 ----D---- C:\ProgramData\NortonInstaller
2015-05-24 13:27:20 ----A---- C:\windows\system32\SyncEngine.dll
2015-05-24 13:27:16 ----A---- C:\windows\system32\SkyDrive.exe
2015-05-24 13:27:14 ----A---- C:\windows\system32\SkyDriveTelemetry.dll
2015-05-24 13:27:13 ----A---- C:\windows\system32\SkyDriveShell.dll
2015-05-24 13:27:12 ----A---- C:\windows\SYSWOW64\SkyDriveShell.dll
2015-05-24 13:27:12 ----A---- C:\windows\system32\winbici.dll
2015-05-24 13:27:12 ----A---- C:\windows\system32\BulkOperationHost.exe
2015-05-24 12:35:45 ----D---- C:\a75895502d567a05039ef83838c5e95c
2015-05-22 10:44:25 ----D---- C:\windows\system32\LSC
2015-05-20 13:07:09 ----A---- C:\windows\system32\drivers\sdbus.sys
2015-05-20 13:07:08 ----A---- C:\windows\system32\drivers\dumpsd.sys
2015-05-20 13:06:49 ----A---- C:\windows\system32\wpdshext.dll
2015-05-20 13:06:48 ----A---- C:\windows\SYSWOW64\wpdshext.dll
2015-05-20 12:21:51 ----A---- C:\windows\system32\drivers\bthhfenum.sys
2015-05-20 12:21:45 ----A---- C:\windows\system32\dwmcore.dll
2015-05-20 12:21:45 ----A---- C:\windows\system32\drivers\ahcache.sys
2015-05-20 12:21:44 ----A---- C:\windows\SYSWOW64\dwmcore.dll
2015-05-20 12:21:43 ----A---- C:\windows\SYSWOW64\Windows.UI.Input.Inking.dll
2015-05-20 12:21:43 ----A---- C:\windows\system32\Windows.UI.Input.Inking.dll
2015-05-20 12:21:42 ----A---- C:\windows\system32\SettingsHandlers.dll
2015-05-20 12:21:41 ----A---- C:\windows\system32\SystemSettingsDatabase.dll
2015-05-20 12:20:53 ----A---- C:\windows\SYSWOW64\dbgeng.dll
2015-05-20 12:20:53 ----A---- C:\windows\system32\dbgeng.dll
2015-05-20 12:20:52 ----A---- C:\windows\SYSWOW64\dbghelp.dll
2015-05-20 12:20:52 ----A---- C:\windows\system32\dbghelp.dll
2015-05-20 12:20:50 ----A---- C:\windows\SYSWOW64\SRH.dll
2015-05-20 12:20:50 ----A---- C:\windows\system32\SRH.dll
2015-05-20 12:20:46 ----A---- C:\windows\SYSWOW64\PhotoMetadataHandler.dll
2015-05-20 12:20:46 ----A---- C:\windows\system32\PhotoMetadataHandler.dll
2015-05-20 12:20:37 ----A---- C:\windows\system32\drivers\USBHUB3.SYS
2015-05-20 11:55:31 ----A---- C:\windows\system32\wevtsvc.dll
2015-05-20 11:39:51 ----A---- C:\windows\system32\dpapisrv.dll
2015-05-20 11:38:36 ----A---- C:\windows\system32\drivers\udfs.sys
2015-05-19 08:28:02 ----A---- C:\windows\system32\aswBoot.exe
2015-05-16 17:11:20 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-16 17:11:20 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 18:13:05 ----A---- C:\windows\SYSWOW64\schannel.dll
2015-05-14 18:13:05 ----A---- C:\windows\system32\schannel.dll
2015-05-14 18:12:46 ----A---- C:\windows\system32\DWrite.dll
2015-05-14 18:12:45 ----A---- C:\windows\SYSWOW64\DWrite.dll
2015-05-14 18:12:45 ----A---- C:\windows\system32\win32k.sys
2015-05-14 18:12:45 ----A---- C:\windows\system32\FntCache.dll
2015-05-14 18:09:18 ----A---- C:\windows\SYSWOW64\certcli.dll
2015-05-14 18:09:18 ----A---- C:\windows\system32\lsasrv.dll
2015-05-14 18:09:18 ----A---- C:\windows\system32\drivers\cng.sys
2015-05-14 18:09:18 ----A---- C:\windows\system32\certcli.dll
2015-05-14 18:08:48 ----A---- C:\windows\system32\services.exe
2015-05-14 18:04:22 ----A---- C:\windows\system32\mshtml.dll
2015-05-14 18:04:17 ----A---- C:\windows\SYSWOW64\mshtml.dll
2015-05-14 18:04:14 ----A---- C:\windows\system32\jscript9.dll
2015-05-14 18:04:13 ----A---- C:\windows\system32\ieframe.dll
2015-05-14 18:04:11 ----A---- C:\windows\SYSWOW64\ieframe.dll
2015-05-14 18:04:10 ----A---- C:\windows\SYSWOW64\jscript9.dll
2015-05-14 18:04:09 ----A---- C:\windows\SYSWOW64\wininet.dll
2015-05-14 18:04:09 ----A---- C:\windows\SYSWOW64\iertutil.dll
2015-05-14 18:04:09 ----A---- C:\windows\system32\wininet.dll
2015-05-14 18:04:09 ----A---- C:\windows\system32\iertutil.dll
2015-05-14 18:04:08 ----A---- C:\windows\SYSWOW64\urlmon.dll
2015-05-14 18:04:08 ----A---- C:\windows\system32\urlmon.dll
2015-05-14 18:04:07 ----A---- C:\windows\system32\jscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\SYSWOW64\vbscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\SYSWOW64\jscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\system32\vbscript.dll
2015-05-14 18:04:06 ----A---- C:\windows\system32\ie4uinit.exe
2015-05-14 18:04:03 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2015-05-14 18:04:03 ----A---- C:\windows\system32\msfeeds.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\iepeers.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2015-05-14 18:04:02 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\webcheck.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\mshtmled.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\inseng.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\inetcomm.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\ieui.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\iepeers.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\iedkcs32.dll
2015-05-14 18:04:02 ----A---- C:\windows\system32\dxtrans.dll
2015-05-14 18:04:01 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2015-05-14 18:04:01 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2015-05-14 18:04:01 ----A---- C:\windows\system32\ieapfltr.dll
2015-05-14 09:45:26 ----D---- C:\Users\Lenka\AppData\Roaming\Opera Software
2015-05-14 09:41:51 ----D---- C:\Program Files (x86)\Opera
2015-05-14 09:37:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-12 12:25:39 ----D---- C:\Users\Lenka\AppData\Roaming\Malwarebytes
2015-05-12 12:24:35 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-05-12 09:13:54 ----D---- C:\Program Files\trend micro
2015-05-12 09:13:53 ----D---- C:\rsit
2015-05-10 15:25:55 ----A---- C:\windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2015-06-06 10:20:48 ----D---- C:\windows\Prefetch
2015-06-06 10:16:32 ----D---- C:\ProgramData\LU
2015-06-06 10:00:02 ----D---- C:\windows\system32\sru
2015-06-06 09:55:48 ----D---- C:\windows\Temp
2015-06-06 09:55:47 ----D---- C:\windows\system32\drivers
2015-06-06 09:55:30 ----RD---- C:\Program Files (x86)
2015-06-06 09:29:59 ----D---- C:\ProgramData\Validity
2015-06-06 09:28:24 ----RAD---- C:\windows\System32
2015-06-05 20:27:03 ----D---- C:\windows\Inf
2015-06-05 20:27:03 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-06-05 20:22:30 ----HD---- C:\ProgramData
2015-06-05 19:06:33 ----D---- C:\Users\Lenka\AppData\Roaming\Skype
2015-06-05 19:01:20 ----D---- C:\windows\AppReadiness
2015-06-05 19:01:17 ----HD---- C:\Program Files\WindowsApps
2015-06-05 11:52:23 ----SHD---- C:\windows\Installer
2015-06-05 11:52:22 ----D---- C:\ProgramData\Skype
2015-06-05 11:21:39 ----AD---- C:\Windows
2015-06-05 10:52:27 ----D---- C:\windows\debug
2015-06-04 11:32:06 ----D---- C:\windows\system32\config
2015-06-04 11:18:01 ----D---- C:\windows\WinSxS
2015-06-04 11:18:01 ----D---- C:\windows\SysWOW64
2015-06-04 11:18:01 ----D---- C:\windows\apppatch
2015-06-04 11:17:50 ----D---- C:\windows\Microsoft.NET
2015-06-04 11:10:00 ----D---- C:\windows\MediaViewer
2015-06-04 11:10:00 ----D---- C:\windows\FileManager
2015-06-04 11:10:00 ----D---- C:\windows\Camera
2015-06-04 11:09:59 ----RD---- C:\windows\ToastData
2015-06-04 11:09:59 ----D---- C:\Program Files\Internet Explorer
2015-06-04 11:09:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Portable Devices
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Multimedia Platform
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Media Player
2015-06-04 11:09:43 ----D---- C:\Program Files\Windows Mail
2015-06-04 11:09:42 ----D---- C:\Program Files\Windows Photo Viewer
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\oobe
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\migration
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\en-US
2015-06-04 11:09:39 ----D---- C:\windows\SYSWOW64\Com
2015-06-04 11:09:39 ----D---- C:\windows\servicing
2015-06-04 11:09:39 ----D---- C:\Program Files\Common Files\System
2015-06-04 11:09:37 ----D---- C:\windows\SYSWOW64\sppui
2015-06-04 11:09:37 ----D---- C:\windows\SYSWOW64\setup
2015-06-04 11:09:37 ----D---- C:\windows\SYSWOW64\cs-CZ
2015-06-04 11:09:36 ----D---- C:\windows\SYSWOW64\wbem
2015-06-04 11:09:35 ----D---- C:\windows\SYSWOW64\migwiz
2015-06-04 11:09:35 ----D---- C:\windows\SYSWOW64\Dism
2015-06-04 11:08:28 ----D---- C:\windows\twain_32
2015-06-04 11:08:28 ----D---- C:\windows\system32\en-US
2015-06-04 11:08:28 ----D---- C:\windows\system32\Com
2015-06-04 11:08:28 ----D---- C:\windows\IME
2015-06-04 11:08:25 ----AD---- C:\windows\system32\oobe
2015-06-04 11:08:24 ----D---- C:\windows\system32\Sysprep
2015-06-04 11:08:24 ----D---- C:\windows\system32\migration
2015-06-04 11:08:22 ----D---- C:\windows\system32\setup
2015-06-04 11:08:21 ----D---- C:\windows\system32\sppui
2015-06-04 11:08:21 ----D---- C:\windows\system32\cs-CZ
2015-06-04 11:08:18 ----D---- C:\windows\system32\WinBioPlugIns
2015-06-04 11:08:17 ----D---- C:\windows\system32\drivers\en-US
2015-06-04 11:08:17 ----D---- C:\windows\system32\drivers\cs-CZ
2015-06-04 11:08:16 ----D---- C:\windows\system32\wbem
2015-06-04 11:08:12 ----D---- C:\windows\system32\migwiz
2015-06-04 11:08:11 ----SD---- C:\windows\system32\dsc
2015-06-04 11:08:11 ----D---- C:\windows\system32\SystemResetPlatform
2015-06-04 11:08:11 ----D---- C:\windows\system32\Dism
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Portable Devices
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Media Player
2015-06-04 11:06:24 ----D---- C:\Program Files (x86)\Windows Mail
2015-06-04 11:06:21 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-06-04 11:06:11 ----D---- C:\Program Files\WindowsPowerShell
2015-06-04 11:05:59 ----D---- C:\windows\system32\DriverStore
2015-06-04 11:04:50 ----D---- C:\windows\system32\drivers\UMDF
2015-06-01 18:09:27 ----SHD---- C:\System Volume Information
2015-05-31 20:27:24 ----RSD---- C:\windows\assembly
2015-05-30 19:40:25 ----D---- C:\windows\rescache
2015-05-30 18:53:26 ----D---- C:\windows\CbsTemp
2015-05-30 18:42:22 ----SH---- C:\windows\system32\desktop.ini
2015-05-30 18:38:56 ----A---- C:\windows\SYSWOW64\msclmd.dll
2015-05-30 18:38:19 ----A---- C:\windows\system32\msclmd.dll
2015-05-30 18:25:37 ----SD---- C:\windows\SYSWOW64\GWX
2015-05-30 18:25:37 ----SD---- C:\windows\system32\GWX
2015-05-28 18:42:28 ----RD---- C:\Program Files
2015-05-28 18:38:16 ----SD---- C:\ProgramData\Microsoft
2015-05-28 10:30:30 ----D---- C:\windows\system32\Tasks
2015-05-28 10:30:29 ----D---- C:\windows\Tasks
2015-05-24 13:42:47 ----D---- C:\windows\AppCompat
2015-05-24 13:26:15 ----D---- C:\windows\system32\catroot
2015-05-24 12:52:57 ----D---- C:\ProgramData\Microsoft Help
2015-05-24 12:50:04 ----RD---- C:\windows\ImmersiveControlPanel
2015-05-24 12:49:43 ----D---- C:\windows\system32\AdvancedInstallers
2015-05-24 12:49:38 ----RSD---- C:\windows\Fonts
2015-05-24 12:47:26 ----D---- C:\windows\system32\MRT
2015-05-24 12:36:08 ----A---- C:\windows\system32\MRT.exe
2015-05-24 12:31:25 ----SD---- C:\windows\system32\CompatTel
2015-05-24 12:31:25 ----D---- C:\windows\system32\appraiser
2015-05-16 10:42:24 ----D---- C:\Program Files\Windows Journal
2015-05-14 17:47:03 ----D---- C:\windows\system32\catroot2
2015-05-12 12:24:39 ----D---- C:\ProgramData\Malwarebytes
2015-05-07 09:15:30 ----D---- C:\Program Files\Lenovo

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2015-05-10 65736]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2015-05-10 272248]
R0 LubSec;LubSec; C:\windows\System32\Drivers\LubSec.sys [2014-02-22 45304]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2015-05-10 93528]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2015-05-10 1047320]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2015-05-10 442264]
R1 SMIDriver;SMIDriver; C:\windows\system32\drivers\smi.sys [2014-01-22 19760]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2015-05-10 29168]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2015-05-10 89944]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2015-05-10 137288]
R2 LubFsFlt;LubFsFlt; \??\C:\windows\System32\Drivers\LubFsFlt.sys [2014-02-22 27384]
R3 ACPIVPC;@oem22.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2014-08-17 35576]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2014-01-16 4222976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2014-05-26 3975128]
R3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2014-01-16 450520]
R3 iwdbus;@oem8.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\windows\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [2015-06-06 136408]
R3 RSP2STOR;@oem10.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\windows\system32\DRIVERS\RtsP2Stor.sys [2013-09-24 290520]
R3 RtkBtFilter;@oem16.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\windows\system32\DRIVERS\RtkBtfilter.sys [2014-02-26 559832]
R3 RTL8168;@oem11.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\windows\system32\DRIVERS\Rt630x64.sys [2013-12-18 839896]
R3 RTWlanE;@oem14.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\windows\system32\DRIVERS\rtwlane.sys [2014-04-30 3421040]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2014-01-24 34544]
R3 SNP2UVC;@oem15.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2014-04-26 2855960]
R3 SynTP;@oem13.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2014-01-24 532720]
R3 TXEIx64;@oem4.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\windows\System32\drivers\TXEIx64.sys [2013-07-02 87568]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2014-10-29 1198080]
S3 cleanhlp;cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys []
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2013-06-18 460288]
S3 intaud_WaveExtensible;@oem7.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 MBAMProtector;MBAMProtector; \??\C:\windows\system32\drivers\mbam.sys [2015-04-14 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\windows\system32\drivers\mwac.sys [2015-04-14 64216]
S3 NETwNe64;@netwew02.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\windows\system32\DRIVERS\NETwew02.sys [2013-06-18 4649440]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-10 343336]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2014-03-28 95232]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-02 733696]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [2014-05-22 584960]
R2 LenovoSetSvr;LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe [2014-08-17 389680]
R2 LenovoWiFiHotspotSvr;Lenovo WiFiHotspot Service; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [2014-08-17 198192]
R2 LUService;LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [2014-02-18 38896]
R2 PhoneCompanionPusher;Lenovo PhoneCompanionPusher Service; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [2014-08-17 288240]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
R2 USBBKSvc;USBBKSvc; C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe [2013-12-25 35824]
R2 valWBFPolicyService;@oem20.inf,%WBFService_SvcDesc%;Validity WBF Policy Service; C:\windows\System32\valWBFPolicyService.exe [2014-01-17 46992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25 107848]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16 268464]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2014-03-06 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-25 107848]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-02 822232]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [2014-06-03 533760]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2014-10-16 272776]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-30 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PhoneCompanionVap;Lenovo PhoneCompanionVap Service; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [2014-08-17 305136]

-----------------EOF-----------------

Re: Problém s kurzorem

Napsal: 06 čer 2015 09:28
od Márty84
Fajn :thumbsup:

Ted tedy spustte ten Vlastni sken v MBAM. Napiste vysledek testu a podle toho zvolim dalsi postup. Pokud neco najde, predem nic nemazte. Vysledky sem zkopirujte a program pokud mozno nezavirejte. Ja to zkontroluju a reknu vam co pripadne smazat a co nechat :)

Re: Problém s kurzorem

Napsal: 06 čer 2015 09:42
od monik1
OK, sken již běží 42 min., až bude hotovo vložím.

Re: Problém s kurzorem

Napsal: 06 čer 2015 09:43
od Márty84
:idea:

Re: Problém s kurzorem

Napsal: 06 čer 2015 14:16
od monik1
Log z malwarebytes nedávám, jelikož skenoval přes dvě a půl hodiny něco přes 270 000 souboru a již se mi nechtělo čekat.
Problém s kurzorem přetrvává hlavně při zapnutí notebooku kurzor nereaguje, pomůže 3x vypnout natvrdo pc a pak již kurzor běhá.

Re: Problém s kurzorem

Napsal: 06 čer 2015 14:54
od Márty84
monik1 píše:již se mi nechtělo čekat
To neni zrovna nejlepsi pristup :(
monik1 píše:pomůže 3x vypnout natvrdo pc
Takhle pujde system brzy do kytek.



:arrow: Vyzkousejte, zda je stejny problem i v nouzovem rezimu.

:arrow: Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach :)

Re: Problém s kurzorem

Napsal: 06 čer 2015 19:26
od monik1
V nouzovém režimu kurzor funguje normálně.
Pokud pc nevypnu natvrdo tak s kurzorem vůbec nejde pohnout, po 3 vypnutích pc již funguje jaktaž :(
Níže požadovaný sken:


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2015
Ran by Lenka (administrator) on LENOVO-PCLENKA on 06-06-2015 20:22:05
Running from C:\Users\Lenka\Desktop
Loaded Profiles: Lenka (Available Profiles: Lenka)
Platform: Windows 8.1 Connected (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe
(Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
() C:\Program Files (x86)\Opera\29.0.1795.60\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LU.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(forum.viry.cz) C:\Users\Lenka\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [217088 2014-04-08] (Realtek Semiconductor Corporation)
HKLM\...\Run: [PasswordManager] => C:\Program Files\Lenovo\Password Manager\password_manager.exe [1622072 2014-01-09] (Lenovo Group Limited)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-08-17] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-08-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10973168 2014-08-17] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28785280 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\...\RunOnce: [Application Restart #1] => C:\Users\Lenka\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cli (the data entry has 549 more characters).
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-10] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [00USBBlockerShellDs] -> {BE57AC86-892D-436E-B763-71DA8FA49A48} => C:\Program Files (x86)\Lenovo\USB Blocker\USBBlockerShell.dll [2013-12-25] (Lenovo(beijing) Limited)
ShellIconOverlayIdentifiers: [00USBBlockerShellRd] -> {FFBCBB89-938E-4412-88AF-AE7A531F95C1} => C:\Program Files (x86)\Lenovo\USB Blocker\USBBlockerShell.dll [2013-12-25] (Lenovo(beijing) Limited)
ShellIconOverlayIdentifiers: [00USBBlockerShellRw] -> {42D4ABFA-0604-45F1-9A7C-622F85614BAB} => C:\Program Files (x86)\Lenovo\USB Blocker\USBBlockerShell.dll [2013-12-25] (Lenovo(beijing) Limited)
ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll [2014-06-23] (Hightail Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3807323175-3616339250-1653748877-1001 -> {6E8ED1D6-2EDF-4418-9804-2FCF4A44E9A2} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-02] (Avast Software s.r.o.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-02] (Avast Software s.r.o.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Lenka\AppData\Roaming\Mozilla\Firefox\Profiles\a3v3tocf.default-1431588022106
FF Homepage: https://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-16] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-16] ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-02]
FF HKU\S-1-5-21-3807323175-3616339250-1653748877-1001\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: Lenovo Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 [2014-08-17]

Chrome:
=======
CHR Profile: C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-25]
CHR Extension: (Google Docs) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-25]
CHR Extension: (Google Drive) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-25]
CHR Extension: (YouTube) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-25]
CHR Extension: (Google Search) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-25]
CHR Extension: (Google Sheets) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-25]
CHR Extension: (Lenovo Password Manager) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\geempcnjhccnoepfmahaeemnnfnignab [2015-02-25]
CHR Extension: (Bookmark Manager) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-29]
CHR Extension: (Avast Online Security) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-09]
CHR Extension: (Google Wallet) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-25]
CHR Extension: (Gmail) - C:\Users\Lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-25]
CHR HKLM-x32\...\Chrome\Extension: [geempcnjhccnoepfmahaeemnnfnignab] - C:\Program Files (x86)\Lenovo\Password Manager\chrome_npapi_extension.crx [2014-01-09]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-10] (Avast Software s.r.o.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [95232 2014-03-28] () [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-05-22] (LENOVO INCORPORATED.)
R2 LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe [389680 2014-08-17] (Lenovo(beijing) Limited)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-08-17] (Lenovo(beijing) Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-08-17] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [305136 2014-08-17] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 USBBKSvc; C:\Program Files (x86)\Lenovo\USB Blocker\USBBKSvc.exe [35824 2013-12-25] (Lenovo(beijing) Limited)
R2 valWBFPolicyService; C:\Windows\System32\valWBFPolicyService.exe [46992 2014-01-17] (Validity Sensors, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [252816 2015-04-30] (Wondershare)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-10] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-10] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-10] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-10] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-10] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-10] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-10] ()
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R2 LubFsFlt; C:\windows\System32\Drivers\LubFsFlt.sys [27384 2014-02-22] (Lenovo(beijing) Limited)
R0 LubSec; C:\Windows\System32\Drivers\LubSec.sys [45304 2014-02-22] (Lenovo(beijing) Limited)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290520 2013-09-24] (Realtek Semiconductor Corp.)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [559832 2014-02-26] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3421040 2014-04-30] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-01-24] (Synaptics Incorporated)
R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19760 2014-01-22] (Windows (R) Win 7 DDK provider)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [2855960 2014-04-26] (Sonix Co. Ltd.)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-02] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-06 20:22 - 2015-06-06 20:23 - 00020167 _____ C:\Users\Lenka\Desktop\FRST.txt
2015-06-06 20:22 - 2015-06-06 20:22 - 00000000 ____D C:\FRST
2015-06-06 20:19 - 2015-06-06 20:19 - 00112640 _____ (forum.viry.cz) C:\Users\Lenka\Desktop\FRSTLauncher.exe
2015-06-06 20:16 - 2015-06-06 20:16 - 02108928 _____ (Farbar) C:\Users\Lenka\Desktop\FRST64.exe
2015-06-06 15:02 - 2015-05-10 15:26 - 00364472 _____ (Avast Software s.r.o.) C:\windows\system32\aswBoot.exe
2015-06-06 10:34 - 2015-06-06 20:06 - 00039424 ___SH C:\Users\Lenka\Desktop\Thumbs.db
2015-06-06 10:20 - 2015-06-06 10:20 - 01222144 _____ C:\Users\Lenka\Downloads\RSITx64 (2).exe
2015-06-06 09:55 - 2015-06-06 09:58 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-06 09:55 - 2015-06-06 09:55 - 00001129 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-06 09:55 - 2015-06-06 09:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-06 09:55 - 2015-06-06 09:55 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-06 09:55 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-06-06 09:55 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-06-06 09:55 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-06-06 09:52 - 2015-06-06 09:52 - 01222144 _____ C:\Users\Lenka\Downloads\RSITx64 (1).exe
2015-06-06 09:25 - 2015-06-06 15:06 - 00000000 ____D C:\AdwCleaner
2015-06-06 09:23 - 2015-06-06 09:24 - 02231296 _____ C:\Users\Lenka\Desktop\adwcleaner_4.206.exe
2015-06-06 08:49 - 2015-06-06 08:49 - 01222144 _____ C:\Users\Lenka\Downloads\RSITx64.exe
2015-06-05 19:35 - 2015-06-05 19:36 - 08402592 _____ (Crawler Group ) C:\Users\Lenka\Downloads\SpywareTerminatorSetup.exe
2015-06-05 11:21 - 2015-06-06 20:16 - 00003952 _____ C:\windows\setupact.log
2015-06-05 11:21 - 2015-06-06 15:08 - 00001072 _____ C:\windows\PFRO.log
2015-06-05 11:21 - 2015-06-05 11:21 - 00000000 _____ C:\windows\setuperr.log
2015-06-05 10:47 - 2015-06-05 10:47 - 00008522 _____ C:\Users\Lenka\Documents\cc_20150605_104718.reg
2015-06-05 10:46 - 2015-06-05 10:47 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Lenka\Downloads\mbam-setup-2.1.6.1022.exe
2015-06-05 10:28 - 2015-06-05 10:32 - 00010240 ___SH C:\Users\Lenka\Downloads\Thumbs.db
2015-06-04 11:00 - 2015-06-04 11:00 - 00000000 ____D C:\Users\Lenka\AppData\Local\GWX
2015-05-30 08:55 - 2015-06-04 11:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-05-29 18:29 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\sdbinst.exe
2015-05-29 18:29 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) C:\windows\SysWOW64\sdbinst.exe
2015-05-29 17:17 - 2015-05-29 17:17 - 00025462 _____ C:\Users\Lenka\Documents\cc_20150529_171645.reg
2015-05-28 19:39 - 2015-06-06 10:33 - 00006144 ___SH C:\Users\Lenka\Documents\Thumbs.db
2015-05-28 11:38 - 2015-01-15 09:42 - 00004619 ____R C:\Users\Lenka\Desktop\FALLEN.NFO
2015-05-28 11:38 - 2015-01-15 09:42 - 00000000 ____D C:\Users\Lenka\Desktop\Keygen
2015-05-28 10:54 - 2015-05-28 10:54 - 00000000 ____D C:\Users\Lenka\AppData\Roaming\Wondershare
2015-05-28 10:52 - 2015-05-28 10:52 - 00000000 ____D C:\ProgramData\wondershare
2015-05-28 10:52 - 2015-05-25 16:48 - 00089600 _____ (Wondershare Software) C:\windows\system32\WSMonEditor.dll
2015-05-28 10:46 - 2015-05-28 10:50 - 00000000 ____D C:\Program Files (x86)\Wondershare
2015-05-28 10:46 - 2015-05-28 10:46 - 00000000 ____D C:\ProgramData\PDFelement
2015-05-28 10:46 - 2015-05-28 10:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2015-05-28 10:39 - 2015-05-28 10:45 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2015-05-28 10:32 - 2015-05-28 10:32 - 00000000 ____D C:\Users\Lenka\AppData\Roaming\PDF Architect 3
2015-05-28 10:25 - 2015-05-29 17:00 - 00000000 ____D C:\ProgramData\PDF Architect 3
2015-05-28 10:21 - 2015-05-28 10:30 - 00000000 ____D C:\ProgramData\Norton
2015-05-28 10:16 - 2015-05-28 10:20 - 43593016 _____ (Microsoft Corporation) C:\Users\Lenka\Documents\YandexPackSetup.exe
2015-05-24 13:27 - 2014-10-31 06:50 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
2015-05-24 13:27 - 2014-10-31 05:30 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2015-05-24 13:27 - 2014-10-31 05:23 - 00733696 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2015-05-24 13:27 - 2014-10-31 05:22 - 00291840 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2015-05-24 13:27 - 2014-10-31 05:18 - 04840960 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2015-05-24 13:27 - 2014-10-31 05:09 - 01154048 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2015-05-24 13:27 - 2014-10-31 04:12 - 00266752 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2015-05-24 12:35 - 2015-05-24 12:47 - 00000000 ____D C:\a75895502d567a05039ef83838c5e95c
2015-05-22 10:44 - 2015-05-22 10:44 - 00000000 ____D C:\windows\system32\LSC
2015-05-20 13:07 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2015-05-20 13:07 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2015-05-20 13:06 - 2015-03-13 02:29 - 00410017 _____ C:\windows\system32\ApnDatabase.xml
2015-05-20 13:06 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\windows\system32\wpdshext.dll
2015-05-20 13:06 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\windows\SysWOW64\wpdshext.dll
2015-05-20 12:21 - 2015-04-10 02:34 - 02256896 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-05-20 12:21 - 2015-04-10 02:11 - 01943040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-05-20 12:21 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-05-20 12:21 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthhfenum.sys
2015-05-20 12:21 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Input.Inking.dll
2015-05-20 12:21 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-20 12:21 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2015-05-20 12:21 - 2014-11-14 08:58 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsDatabase.dll
2015-05-20 12:20 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\PhotoMetadataHandler.dll
2015-05-20 12:20 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\windows\SysWOW64\PhotoMetadataHandler.dll
2015-05-20 12:20 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\windows\SysWOW64\dbgeng.dll
2015-05-20 12:20 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\windows\system32\dbgeng.dll
2015-05-20 12:20 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\windows\system32\dbghelp.dll
2015-05-20 12:20 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\windows\SysWOW64\dbghelp.dll
2015-05-20 12:20 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2015-05-20 12:20 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2015-05-20 12:20 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2015-05-20 11:55 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\windows\system32\wevtsvc.dll
2015-05-20 11:39 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2015-05-20 11:38 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys
2015-05-19 08:29 - 2015-06-06 15:03 - 00001949 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-05-17 09:50 - 2015-05-17 09:50 - 00007644 _____ C:\Users\Lenka\Documents\cc_20150517_095013.reg
2015-05-16 17:11 - 2015-04-30 22:35 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-16 17:11 - 2015-04-30 22:35 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 18:13 - 2015-05-01 01:05 - 00429568 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-05-14 18:13 - 2015-05-01 00:48 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-05-14 18:12 - 2015-04-14 00:48 - 04180480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-05-14 18:12 - 2015-04-10 03:00 - 01996800 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-05-14 18:12 - 2015-04-10 02:50 - 01387008 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-05-14 18:12 - 2015-04-10 02:26 - 01560576 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2015-05-14 18:09 - 2015-03-30 07:47 - 00561928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-05-14 18:09 - 2015-03-27 05:27 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-05-14 18:09 - 2015-03-27 04:50 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2015-05-14 18:09 - 2015-03-27 04:48 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-05-14 18:08 - 2015-04-09 00:55 - 00410128 _____ (Microsoft Corporation) C:\windows\system32\services.exe
2015-05-14 18:04 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-05-14 18:04 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-05-14 18:04 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-05-14 18:04 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-05-14 18:04 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-05-14 18:04 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-05-14 18:04 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-05-14 18:04 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-05-14 18:04 - 2015-04-21 18:13 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2015-05-14 18:04 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-05-14 18:04 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-05-14 18:04 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-05-14 18:04 - 2015-04-21 18:07 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2015-05-14 18:04 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-05-14 18:04 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-05-14 18:04 - 2015-04-21 17:59 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-05-14 18:04 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-05-14 18:04 - 2015-04-21 17:52 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-05-14 18:04 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-05-14 18:04 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-05-14 18:04 - 2015-04-21 17:49 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-05-14 18:04 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-05-14 18:04 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-05-14 18:04 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-05-14 18:04 - 2015-04-21 17:37 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-05-14 18:04 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-05-14 18:04 - 2015-04-21 17:32 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-05-14 18:04 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-05-14 18:04 - 2015-04-21 17:28 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-05-14 18:04 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-05-14 18:04 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-05-14 18:04 - 2015-04-21 17:26 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-05-14 18:04 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-05-14 18:04 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-05-14 18:04 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-05-14 18:04 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-05-14 18:04 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-05-14 18:04 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-05-14 18:04 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-05-14 09:45 - 2015-05-14 09:45 - 00000000 ____D C:\Users\Lenka\AppData\Roaming\Opera Software
2015-05-14 09:45 - 2015-05-14 09:45 - 00000000 ____D C:\Users\Lenka\AppData\Local\Opera Software
2015-05-14 09:44 - 2015-05-20 10:33 - 00003842 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1431589480
2015-05-14 09:44 - 2015-05-20 10:33 - 00001074 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-05-14 09:44 - 2015-05-14 09:44 - 00001162 _____ C:\Users\Public\Desktop\Opera.lnk
2015-05-14 09:41 - 2015-05-20 10:33 - 00000000 ____D C:\Program Files (x86)\Opera
2015-05-14 09:40 - 2015-05-14 09:40 - 00684016 _____ (Opera Software) C:\Users\Lenka\Downloads\Opera_NI_stable.exe
2015-05-14 09:37 - 2015-05-30 20:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-14 09:37 - 2015-05-14 09:37 - 00001186 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-14 09:37 - 2015-05-14 09:37 - 00001174 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-12 12:25 - 2015-05-12 12:31 - 00000000 ____D C:\Users\Lenka\AppData\Roaming\Malwarebytes
2015-05-12 12:24 - 2015-05-12 12:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-05-12 09:13 - 2015-06-06 10:23 - 00000000 ____D C:\Program Files\trend micro
2015-05-12 09:13 - 2015-05-12 09:14 - 00000000 ____D C:\rsit
2015-05-12 08:46 - 2015-05-12 08:46 - 00388608 _____ (Trend Micro Inc.) C:\Users\Lenka\Downloads\HijackThis.exe
2015-05-10 15:25 - 2015-05-10 15:25 - 00043112 _____ (Avast Software s.r.o.) C:\windows\avastSS.scr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-06 20:20 - 2015-05-05 08:12 - 01377045 _____ C:\windows\WindowsUpdate.log
2015-06-06 20:16 - 2015-02-25 18:40 - 00000990 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1d05119c6980c62.job
2015-06-06 20:11 - 2015-02-05 11:47 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3807323175-3616339250-1653748877-1001
2015-06-06 20:06 - 2015-02-25 18:40 - 00000986 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-06 20:06 - 2015-02-05 11:40 - 00415158 _____ C:\Users\Lenka\AppData\Local\BTServer.log
2015-06-06 20:05 - 2014-08-17 14:26 - 00000000 ____D C:\ProgramData\Validity
2015-06-06 20:05 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-06 19:57 - 2015-02-05 11:39 - 00000000 ____D C:\Users\Lenka
2015-06-06 19:54 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\sru
2015-06-06 15:46 - 2015-04-15 08:28 - 00000914 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-06-06 15:02 - 2015-04-02 11:18 - 00003924 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-06-06 12:31 - 2014-08-17 14:12 - 00739924 _____ C:\windows\system32\perfh005.dat
2015-06-06 12:31 - 2014-08-17 14:12 - 00151610 _____ C:\windows\system32\perfc005.dat
2015-06-06 12:31 - 2014-03-18 11:53 - 01745984 _____ C:\windows\system32\PerfStringBackup.INI
2015-06-06 12:10 - 2015-02-05 11:49 - 00000000 ____D C:\ProgramData\LU
2015-06-06 08:32 - 2015-02-05 11:52 - 00003994 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{1240DEB7-50DC-4398-B9EE-2046B39BC829}
2015-06-05 19:43 - 2013-08-22 15:25 - 00262144 ___SH C:\windows\system32\config\BBI
2015-06-05 19:06 - 2015-03-24 09:48 - 00000000 ____D C:\Users\Lenka\AppData\Roaming\Skype
2015-06-05 19:01 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2015-06-05 11:52 - 2015-03-24 09:48 - 00000000 ____D C:\ProgramData\Skype
2015-06-04 11:10 - 2013-08-22 17:36 - 00000000 ____D C:\windows\MediaViewer
2015-06-04 11:10 - 2013-08-22 17:36 - 00000000 ____D C:\windows\FileManager
2015-06-04 11:10 - 2013-08-22 17:36 - 00000000 ____D C:\windows\Camera
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\sppui
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\setup
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\migwiz
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\Com
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-06-04 11:09 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-06-04 11:09 - 2013-08-22 15:36 - 00000000 ____D C:\windows\SysWOW64\oobe
2015-06-04 11:09 - 2013-08-22 15:36 - 00000000 ____D C:\windows\SysWOW64\Dism
2015-06-04 11:09 - 2013-08-22 15:36 - 00000000 ____D C:\windows\servicing
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ___SD C:\windows\system32\dsc
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\WinBioPlugIns
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\SystemResetPlatform
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\sppui
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\setup
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\migwiz
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\Com
2015-06-04 11:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\IME
2015-06-04 11:08 - 2013-08-22 15:36 - 00000000 ____D C:\windows\system32\Sysprep
2015-06-04 11:08 - 2013-08-22 15:36 - 00000000 ____D C:\windows\system32\oobe
2015-06-04 11:08 - 2013-08-22 15:36 - 00000000 ____D C:\windows\system32\Dism
2015-06-04 11:06 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-06-04 11:06 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-06-04 11:06 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-06-04 11:06 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-05-30 19:40 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2015-05-30 18:53 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2015-05-30 18:38 - 2013-08-22 17:36 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\msclmd.dll
2015-05-30 18:38 - 2013-08-22 17:36 - 00195072 _____ (Microsoft Corporation) C:\windows\SysWOW64\msclmd.dll
2015-05-30 18:25 - 2015-04-24 18:40 - 00000000 ___SD C:\windows\SysWOW64\GWX
2015-05-30 18:25 - 2015-04-24 18:40 - 00000000 ___SD C:\windows\system32\GWX
2015-05-29 21:42 - 2015-02-05 11:40 - 00000000 ____D C:\Users\Lenka\Documents\My Bluetooth
2015-05-28 10:20 - 2015-02-06 13:16 - 00000000 ____D C:\Users\Lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaProducts Download Express
2015-05-26 10:27 - 2015-02-25 18:44 - 00002214 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-24 14:05 - 2013-08-22 16:44 - 00493776 _____ C:\windows\system32\FNTCACHE.DAT
2015-05-24 13:42 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppCompat
2015-05-24 12:52 - 2015-02-06 13:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-05-24 12:50 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ImmersiveControlPanel
2015-05-24 12:49 - 2013-08-22 15:36 - 00000000 ____D C:\windows\system32\AdvancedInstallers
2015-05-24 12:47 - 2015-02-08 18:37 - 00000000 ____D C:\windows\system32\MRT
2015-05-24 12:36 - 2015-02-08 18:37 - 140425016 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-05-24 12:31 - 2015-02-13 15:31 - 00000000 ___SD C:\windows\system32\CompatTel
2015-05-24 12:31 - 2015-02-13 15:31 - 00000000 ____D C:\windows\system32\appraiser
2015-05-20 08:28 - 2015-04-02 11:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-05-16 17:11 - 2015-02-25 18:40 - 00003962 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1d05119c6980c62
2015-05-16 17:11 - 2015-02-25 18:40 - 00003726 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-16 17:01 - 2015-04-15 08:28 - 00003802 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-05-16 17:01 - 2015-02-05 12:14 - 00000000 ____D C:\Users\Lenka\AppData\Local\Adobe
2015-05-16 10:42 - 2014-03-18 11:38 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-12 12:24 - 2015-02-19 09:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-05-12 08:46 - 2015-02-05 11:41 - 00000000 ____D C:\Users\Lenka\AppData\Local\VirtualStore
2015-05-10 15:26 - 2015-04-02 11:17 - 00442264 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSP.sys
2015-05-10 15:26 - 2015-04-02 11:17 - 00272248 _____ C:\windows\system32\Drivers\aswVmm.sys
2015-05-10 15:26 - 2015-04-02 11:17 - 00137288 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswStm.sys
2015-05-10 15:26 - 2015-04-02 11:17 - 00093528 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswRdr2.sys
2015-05-10 15:26 - 2015-04-02 11:17 - 00089944 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswMonFlt.sys
2015-05-10 15:26 - 2015-04-02 11:17 - 00065736 _____ C:\windows\system32\Drivers\aswRvrt.sys
2015-05-10 15:26 - 2015-04-02 11:17 - 00029168 _____ C:\windows\system32\Drivers\aswHwid.sys
2015-05-10 15:25 - 2015-04-02 11:17 - 01047320 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSnx.sys
2015-05-07 09:15 - 2014-08-17 15:02 - 00000000 ____D C:\Program Files\Lenovo
2015-05-07 09:15 - 2014-08-17 14:59 - 00000000 ____D C:\windows\System32\Tasks\Lenovo

==================== Files in the root of some directories =======

2015-02-05 11:45 - 2015-02-06 19:04 - 0003803 _____ () C:\Users\Lenka\AppData\Roaming\AbsoluteReminder.xml
2015-02-05 11:40 - 2015-06-06 20:06 - 0415158 _____ () C:\Users\Lenka\AppData\Local\BTServer.log
2014-08-17 14:20 - 2014-08-17 14:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Lenka\AppData\Local\Temp\Quarantine.exe
C:\Users\Lenka\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Lenka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA1d05119c6980c62.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Lenka\Desktop" je 7 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: Problém s kurzorem

Napsal: 07 čer 2015 03:46
od Márty84
Sekne se jen kurzor, nebo cely pocitac? Klavesnici pracovat lze?

Re: Problém s kurzorem

Napsal: 07 čer 2015 09:15
od monik1
S klávesnicí lze pracovat, sekne se jen kurzor.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz