VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Martin at 2015-09-05 10:37:07
Microsoft Windows 10 Home
System drive C: has 305 GB (87%) free of 350 GB
Total RAM: 3911 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:37:12, on 5. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\NS.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Users\Martin\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\Seznam.cz\bin\postak.exe
C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\YoWindow\yowindow.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\coIEPlg.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\coIEPlg.dll
O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TrayStatus] "C:\Program Files (x86)\TrayStatus\TrayStatus.exe"
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Martin\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files (x86)\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify] "C:\Users\Martin\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Sidebar49.lnk = C:\Program Files\Windows Sidebar\sidebar.exe
O4 - Startup: Sledovat výstrahy inkoustu - HP Deskjet 2510 series.lnk = ?
O4 - Startup: Stickies.lnk = C:\Program Files (x86)\Stickies\stickies.exe
O4 - Startup: YoWindow.lnk = C:\Program Files (x86)\YoWindow\yowindow.exe
O4 - Global Startup: Acer Backup Manager Tray.lnk = C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
O23 - Service: Broadcom Card Reader Service (BrcmCardReader) - Broadcom Corp. - C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Norton Identity Safe (NCO) - Symantec Corporation - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Norton Security (NS) - Symantec Corporation - C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\NS.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11431 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
dashost.exe {11e01913-20f9-4d9b-a8cb0616314ff187}
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe" /s "NCO" /m "C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\diMaster.dll" /prefetch:1
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\NS.exe" /s "NS" /m "C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Windows\RfBtnSvc64.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window --enable-setforeground-window --enable-kbhook-window
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe" /c /a /s UserSession

C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\Launch Manager\LManager.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\WINDOWS\system32\igfxext.exe -Embedding
"C:\Program Files\Elantech\ETDTouch.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
igfxEM.exe
igfxHK.exe
"C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\NS.exe" /c /a /s UserSession
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files (x86)\TrayStatus\TrayStatus.exe"
"C:\Users\Martin\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Seznam.cz\bin\postak.exe" -s
"C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files\Windows Sidebar\sidebar.exe"
"C:\Program Files (x86)\RadioController\RfBtnHelper.exe" HigherRFButtonHelper
"C:\WINDOWS\system32\RunDll32.exe" "C:\Program Files\HP\HP Deskjet 2510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN35B37KH105TX;CONNECTION=USB;MONITOR=1;
"C:\Program Files (x86)\YoWindow\yowindow.exe" -mt

"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16464_none_116100d161f6ab1d\TiWorker.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3237514440-2733116083-671441667-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3237514440-2733116083-671441667-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 620 624 632 8192 628
"C:\RSIT\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Defraggler Volume C Task.job - C:\Program Files\Defraggler\df64.exe "C:" /ts /user "Martin" /appPath "C:\Program Files\Defraggler" /QD

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\n2iiw0q5.default

prefs.js - "browser.startup.homepage" - "chrome://speeddial/content/speeddial.xul"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll


C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\n2iiw0q5.default\extensions\
cs@dictionaries.addons.mozilla.org
foxmarks@kei.com
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Security\Engine64\22.5.2.15\coIEPlg.dll [2015-07-10 1042744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB4C7833-A6EC-433f-B9FE-6B14B1A2F836}]
Norton Identity Protection - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.11.42\coIEPlg.dll [2015-03-05 931640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\coIEPlg.dll [2015-07-10 798008]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-05 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-05 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Security\Engine64\22.5.2.15\coIEPlg.dll [2015-07-10 1042744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\coIEPlg.dll [2015-07-10 798008]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-09-06 2890056]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24 13885696]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-07-11 384912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-01-24 134784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"TrayStatus"=C:\Program Files (x86)\TrayStatus\TrayStatus.exe [2011-05-18 283032]
"Spotify Web Helper"=C:\Users\Martin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-07-30 2022968]
"Seznam Postak"=C:\Program Files (x86)\Seznam.cz\bin\postak.exe [2012-01-10 491040]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-08-20 8455960]
"Spotify"=C:\Users\Martin\AppData\Roaming\Spotify\Spotify.exe [2015-07-30 7298616]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RadioController"=C:\Program Files (x86)\RadioController\RfBtnHelper.exe [2013-02-05 111216]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2013-12-27 570880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-01-24 134784]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer Backup Manager Tray.lnk - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sidebar49.lnk - C:\Program Files\Windows Sidebar\sidebar.exe
Sledovat výstrahy inkoustu - HP Deskjet 2510 series.lnk - C:\WINDOWS\system32\RunDll32.exe
Stickies.lnk - C:\Program Files (x86)\Stickies\stickies.exe
YoWindow.lnk - C:\Program Files (x86)\YoWindow\yowindow.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-27 20:15:26 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-27 20:15:25 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-27 20:15:24 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-08-27 20:15:22 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-27 20:15:20 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-27 20:15:20 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-27 20:15:20 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-27 20:15:20 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-27 20:15:19 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-27 20:15:19 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-27 20:15:19 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-27 20:15:19 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-27 20:15:19 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-27 20:15:19 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-27 20:15:18 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-08-27 20:15:18 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-27 20:15:18 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-27 20:15:17 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-08-27 20:15:16 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-27 20:15:16 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-27 20:15:16 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-27 20:15:16 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-27 20:15:16 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-27 20:15:15 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-27 20:15:15 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-27 20:15:14 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-08-27 20:15:14 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-08-27 20:15:14 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-27 20:15:14 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-27 20:15:14 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-27 20:15:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-27 20:08:45 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-08-19 15:52:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-19 15:52:43 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 15:52:41 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-08-19 15:52:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 15:52:37 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 15:52:37 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 15:52:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 15:52:36 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 15:52:36 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 15:52:36 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 15:52:35 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 15:52:35 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 15:52:35 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 15:52:35 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 15:52:34 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 15:52:34 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 15:52:34 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-08-19 15:52:34 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 15:52:34 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 15:52:34 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-08-19 15:52:33 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 15:52:33 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 15:52:33 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 15:52:32 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-19 15:52:32 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 15:52:32 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 15:52:31 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 15:52:31 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 15:52:31 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 15:52:31 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 15:52:31 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 15:52:30 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 15:52:29 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 15:52:29 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 15:52:29 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 15:52:29 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 15:52:29 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 15:52:29 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 15:52:29 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 15:52:29 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 15:52:28 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 15:52:27 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 15:52:27 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 15:52:26 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 15:52:26 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 15:52:26 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 15:52:26 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 15:52:25 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 15:52:25 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 15:52:25 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-14 08:50:52 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT64x86.SYS
2015-08-14 08:49:28 ----D---- C:\Program Files (x86)\Norton Security
2015-08-13 21:16:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-13 21:16:03 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-13 21:15:36 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-13 21:15:33 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-08-13 21:15:27 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-13 21:15:22 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-08-13 21:15:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-13 21:15:16 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-13 21:15:15 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-08-13 21:15:14 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-13 21:15:13 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2015-08-13 21:15:13 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-13 21:15:13 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-13 21:15:12 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-13 21:15:12 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-13 21:15:11 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-13 21:15:11 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-13 21:15:08 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-13 21:15:08 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-13 21:15:07 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-08-13 21:15:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-08-13 21:15:07 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-13 21:15:07 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-13 21:15:07 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\system32\mf.dll
2015-08-13 21:15:06 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-13 21:15:05 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-08-13 21:15:05 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-08-13 21:15:05 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-13 21:15:05 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-13 21:15:05 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-13 21:15:04 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-08-13 21:15:04 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-08-13 21:15:04 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-13 21:15:04 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-13 21:15:03 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-08-13 21:15:03 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-08-13 21:15:03 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-13 21:15:03 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-13 21:15:03 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-13 21:15:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-13 21:15:03 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-13 21:15:02 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-13 21:15:01 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-13 21:15:00 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-08-13 21:15:00 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-08-13 21:15:00 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2015-08-13 21:15:00 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-13 21:15:00 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-13 21:15:00 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-13 21:15:00 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-13 21:14:59 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-13 21:14:59 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-13 21:14:59 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-13 21:14:58 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-13 21:14:58 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-13 21:14:58 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-13 21:14:58 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-13 21:14:57 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2015-08-13 21:14:57 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2015-08-13 21:14:57 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-08-13 21:14:57 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-13 21:14:56 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2015-08-13 21:14:55 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-08-13 21:14:55 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-13 21:14:55 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-13 21:14:53 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-13 21:14:53 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-13 21:14:53 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-13 21:14:52 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-13 21:14:48 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-13 21:14:48 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-13 21:14:48 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-13 21:14:47 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-13 21:14:46 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-08-13 21:14:46 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-08-13 21:14:46 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-13 21:14:46 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-13 21:14:46 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-13 21:14:46 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-13 21:14:46 ----A---- C:\WINDOWS\notepad.exe
2015-08-13 21:14:45 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-08-13 21:14:45 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-13 21:14:44 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-08-13 21:14:44 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2015-08-13 21:14:44 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-13 21:14:41 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-13 21:14:38 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2015-08-13 21:14:38 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-13 21:14:38 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-13 21:14:37 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-13 21:14:37 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-13 21:14:37 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-13 21:14:36 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-13 21:14:36 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-13 21:14:35 ----A---- C:\WINDOWS\SYSWOW64\VoiceActivationManager.dll
2015-08-13 21:14:35 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2015-08-13 21:14:35 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-13 21:14:35 ----A---- C:\WINDOWS\system32\mfps.dll
2015-08-13 21:14:32 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-13 21:14:31 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-08-13 21:14:23 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-13 21:14:22 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-13 21:14:14 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-13 21:14:13 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-13 12:10:51 ----D---- C:\WINDOWS\PCHEALTH

======List of files/folders modified in the last 1 month======

2015-09-05 10:37:11 ----D---- C:\Program Files\trend micro
2015-09-05 10:36:19 ----D---- C:\Windows
2015-09-05 10:34:54 ----D---- C:\WINDOWS\Temp
2015-09-05 10:34:39 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-09-05 10:34:32 ----D---- C:\WINDOWS\Prefetch
2015-09-05 10:32:45 ----D---- C:\WINDOWS\System32
2015-09-05 10:32:30 ----D---- C:\WINDOWS\system32\sru
2015-09-05 10:32:00 ----SHD---- C:\System Volume Information
2015-09-05 10:29:11 ----D---- C:\Users\Martin\AppData\Roaming\AIMP3
2015-09-05 10:29:04 ----D---- C:\WINDOWS\debug
2015-09-05 10:22:59 ----D---- C:\WINDOWS\system32\drivers
2015-09-05 10:22:06 ----D---- C:\Users\Martin\AppData\Roaming\stickies
2015-09-05 10:21:50 ----D---- C:\WINDOWS\ShellNew
2015-09-05 10:17:43 ----D---- C:\Users\Martin\AppData\Roaming\vlc
2015-09-05 09:38:28 ----D---- C:\Users\Martin\AppData\Roaming\Webshare
2015-09-05 09:33:24 ----D---- C:\Program Files (x86)\AIMP3
2015-09-05 09:29:57 ----D---- C:\Users\Martin\AppData\Roaming\Audacity
2015-09-05 08:53:08 ----D---- C:\WINDOWS\SoftwareDistribution
2015-09-04 19:57:32 ----D---- C:\WINDOWS\system32\config
2015-09-04 19:53:38 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-04 15:02:02 ----D---- C:\WINDOWS\AppReadiness
2015-09-04 15:01:58 ----HD---- C:\Program Files\WindowsApps
2015-09-03 14:44:07 ----D---- C:\Users\Martin\AppData\Roaming\Atheros
2015-09-02 19:05:10 ----D---- C:\Program Files (x86)\YoWindow
2015-09-01 21:21:35 ----D---- C:\WINDOWS\INF
2015-08-31 19:25:12 ----D---- C:\WINDOWS\system32\DriverStore
2015-08-29 21:09:33 ----D---- C:\WINDOWS\rescache
2015-08-29 18:56:25 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-29 17:30:34 ----HD---- C:\WINDOWS\ELAMBKUP
2015-08-29 17:24:15 ----D---- C:\WINDOWS\SysWOW64
2015-08-27 22:06:03 ----D---- C:\WINDOWS\WinSxS
2015-08-27 22:05:03 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-27 22:03:06 ----D---- C:\WINDOWS\system32\oobe
2015-08-27 22:03:06 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-27 22:03:06 ----D---- C:\WINDOWS\system32\appraiser
2015-08-27 22:03:05 ----D---- C:\WINDOWS\AppPatch
2015-08-27 20:52:12 ----D---- C:\WINDOWS\CbsTemp
2015-08-27 20:09:18 ----RD---- C:\Program Files (x86)
2015-08-27 19:52:02 ----D---- C:\WINDOWS\system32\catroot2
2015-08-26 11:11:35 ----D---- C:\Program Files\CCleaner
2015-08-25 18:31:28 ----D---- C:\Users\Martin\AppData\Roaming\Mp3tag
2015-08-25 10:29:50 ----D---- C:\Záloha Firefoxu
2015-08-25 09:52:58 ----D---- C:\01-Rychlý přístup Firefox
2015-08-21 19:29:15 ----D---- C:\WINDOWS\Tasks
2015-08-19 15:55:37 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-08-19 15:55:36 ----RD---- C:\WINDOWS\DevicesFlow
2015-08-17 14:33:46 ----D---- C:\WINDOWS\system32\Tasks
2015-08-14 17:04:40 ----RD---- C:\WINDOWS\assembly
2015-08-14 13:58:02 ----D---- C:\RSIT
2015-08-14 12:44:07 ----D---- C:\Program Files (x86)\Common Files
2015-08-14 09:04:51 ----D---- C:\Users\Martin\AppData\Roaming\Spotify
2015-08-14 08:53:06 ----D---- C:\ProgramData\Norton
2015-08-14 08:50:52 ----D---- C:\Program Files\Common Files\Symantec Shared
2015-08-14 08:49:17 ----D---- C:\Program Files (x86)\NortonInstaller
2015-08-14 08:33:56 ----HD---- C:\ProgramData
2015-08-13 21:53:03 ----SHD---- C:\$Recycle.Bin
2015-08-13 21:50:59 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-13 21:50:58 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-13 21:48:17 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-08-13 21:48:05 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-13 21:48:05 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-13 21:48:01 ----D---- C:\WINDOWS\Provisioning
2015-08-13 21:47:53 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-13 21:47:50 ----D---- C:\Program Files\Internet Explorer
2015-08-13 21:40:43 ----SHD---- C:\WINDOWS\Installer
2015-08-13 21:40:31 ----D---- C:\ProgramData\Microsoft Help
2015-08-13 21:32:11 ----D---- C:\WINDOWS\system32\MRT
2015-08-13 21:27:36 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-13 20:36:26 ----D---- C:\ProgramData\SoftwareDistribution
2015-08-13 20:25:42 ----D---- C:\WINDOWS\system32\WDI
2015-08-13 20:11:30 ----D---- C:\WINDOWS\system32\wbem
2015-08-13 20:09:47 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-13 20:09:45 ----SD---- C:\WINDOWS\system32\Nui
2015-08-13 20:09:45 ----D---- C:\WINDOWS\system32\migration
2015-08-13 20:08:56 ----D---- C:\WINDOWS\system32\Sysprep
2015-08-13 20:08:55 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-08-13 20:08:55 ----D---- C:\WINDOWS\servicing
2015-08-13 20:08:00 ----RD---- C:\Program Files (x86)\Skype
2015-08-13 20:08:00 ----D---- C:\Program Files\Common Files\microsoft shared
2015-08-13 20:05:59 ----RD---- C:\Program Files
2015-08-13 19:57:23 ----D---- C:\WINDOWS\registration
2015-08-13 19:53:37 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2015-08-13 19:52:53 ----D---- C:\ProgramData\Skype
2015-08-13 19:47:01 ----D---- C:\WINDOWS\Logs
2015-08-13 18:28:00 ----D---- C:\WINDOWS\system32\NDF
2015-08-08 17:38:46 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTATH_BUS;@oem19.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2014-01-24 35016]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 SymEFASI;Symantec Extended File Attributes (SI); C:\WINDOWS\system32\drivers\NSx64\1605020.00F\SYMEFASI64.SYS [2015-07-11 1620720]
R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.2.15\Definitions\BASHDefs\20150821.001\BHDrvx64.sys [2015-07-23 1650936]
R1 ccSet_NS;NS Settings Manager; C:\WINDOWS\system32\drivers\NSx64\1605020.00F\ccSetx64.sys [2015-07-11 173808]
R1 ccSet_NST;Norton Identity Safe Settings Manager; C:\WINDOWS\system32\drivers\NSTx64\7DE070B0.02A\ccSetx64.sys [2013-09-27 162392]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2015-08-13 498512]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.2.15\Definitions\IPSDefs\20150904.003\IDSvia64.sys [2015-08-26 767224]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\WINDOWS\system32\drivers\NSx64\1605020.00F\SRTSPX64.SYS [2015-07-11 50936]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\NSx64\1605020.00F\Ironx64.SYS [2015-07-11 297720]
R1 SymNetS;Symantec Network Security WFP Driver; C:\WINDOWS\system32\drivers\NSx64\1605020.00F\SYMNETS.SYS [2015-07-11 576248]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 athr;@oem15.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athwbx.sys [2014-01-06 3881984]
R3 b57xdbd;@oem8.inf,%bcmxd_16bf_svcd%;Broadcom xD Picture Bus Driver Service; C:\WINDOWS\System32\drivers\b57xdbd.sys [2012-08-13 72280]
R3 b57xdmp;@oem8.inf,%BXD_SVCDESC%;Broadcom xD Picture vstorp client drv; C:\WINDOWS\System32\drivers\b57xdmp.sys [2012-08-13 21080]
R3 bScsiMSa;bScsiMSa; C:\WINDOWS\System32\drivers\bScsiMSa.sys [2012-06-19 55384]
R3 bScsiSDa;bScsiSDa; C:\WINDOWS\System32\drivers\bScsiSDa.sys [2012-08-14 70744]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-01-24 597704]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2015-08-13 153936]
R3 ETD;@oem32.inf,%PS2.DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-09-06 370504]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-11 3789240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem20.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem12.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-06-26 39480]
R3 k57nd60a;@netk57a.inf,%SvcDispName%;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\System32\drivers\k57nd60a.sys [2015-07-10 425984]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MEIx64;@oem18.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.2.15\Definitions\VirusDefs\20150904.003\ENG64.SYS [2015-08-13 138488]
R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.2.15\Definitions\VirusDefs\20150904.003\EX64.SYS [2015-08-13 2146040]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 Ps2Kb2Hid;@oem6.inf,%Ps2Kb2Hid.SVCDESC%;PS/2 Keyboard to HID Driver; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [2013-02-05 26736]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\WINDOWS\system32\drivers\NSx64\1605020.00F\SRTSP64.SYS [2015-07-11 926448]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [2015-08-14 111344]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S0 SymELAM;Symantec ELAM Driver; C:\WINDOWS\system32\drivers\NSx64\1605020.00F\SymELAM.sys [2015-07-11 24192]
S3 AthBTPort;@oem35.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2014-01-24 89800]
S3 BTATH_A2DP;@oem34.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2014-01-24 355528]
S3 btath_avdt;@oem34.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2014-01-24 118984]
S3 BTATH_HCRP;@oem37.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2014-01-24 179432]
S3 BTATH_LWFLT;@oem39.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2014-01-24 77464]
S3 BTATH_RCP;@oem41.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2014-01-24 137928]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-08-20 929280]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-08-01 38296]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-06-18 64216]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-14 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [2014-01-24 319104]
R2 BrcmCardReader;Broadcom Card Reader Service; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [2012-08-21 176640]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-09-21 348784]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2013-09-06 101192]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-11 319888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-21 635104]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2010-05-21 110736]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 NCO;Norton Identity Safe; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe [2015-03-05 131144]
R2 NS;Norton Security; C:\Program Files (x86)\Norton Security\Engine\22.5.2.15\NS.exe [2015-07-16 282016]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2012-10-19 259136]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-12 193824]
R2 RfButtonDriverService;Dritek RF Button Command Service; C:\Windows\RfBtnSvc64.exe [2013-02-05 96880]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2012-09-05 658576]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-21 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-11 281488]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DeviceFastLaneService;Device Fast-lane Service; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [2012-10-09 469648]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-02-05 655624]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-27 149160]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S4 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v5.005 - Logfile created 06/09/2015 at 14:40:05
# Updated 31/08/2015 by Xplode
# Database : 2015-09-04.4 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Martin - DOMACI
# Running from : C:\Users\Martin\Desktop\adwcleaner_5.005.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [606 bytes] ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Zdravím.
Mám strach použít to OTM, už jsme to tu spulu jednou řešili na win10 mi to nějak rozhodilo PC nefungovaly systémové ikony ... Je nutné ten nástroj OTM použít ?

OTM za to nemůže, nikomu jinému se to nestalo. Budou mazány pouze dočasné soubory internetu. Chcete-li, stejnou službu vám udělá v tomto případě CCleaner: http://forum.viry.cz/viewtopic.php?f=46&t=7478 .

CCleaner běžně používám.

OK. Pak je to v pořádku.

V tom případě mockrát děkuji, můžete zamknout.

Rádo se stalo!