VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Zamrzá pc

https://forum.viry.cz:443/viewtopic.php?t=146518

Stránka 1 z 2

Zamrzá pc

Napsal: 18 říj 2015 12:24
od davsa
Dobrý den mám prosbu od včera mi začalo zamrzat počítač a to tak že uplně že nejde ani myš ani hodiny a pomůže až jenom tvrdej restart,mohli by jste se mi mrknout na to a popřípadě poradit co stím?předem moc děkuji a přeji pěkný den .

Logfile of random's system information tool 1.10 (written by random/random)
Run by Davsa at 2015-10-18 13:20:07
Microsoft Windows 10 Pro
System drive C: has 118 GB (77%) free of 153 GB
Total RAM: 4095 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:20:12, on 18.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
C:\Program Files (x86)\Winstep\WorkShelf.exe
C:\Program Files\trend micro\Davsa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: ScriptInjectionPluginBrowserHelperObject - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [WorkShelf] C:\Program Files (x86)\Winstep\workshelf.exe autostart
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Služba Kaspersky Anti-Virus 16.0.0 (AVP16.0.0) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vssbrigde64 - AO Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8202 bytes

======Listing Processes======







winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\atiesrxx.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f7db8852-d5ba-4558-9844-26464ed8bb64 -SystemEventPortName:HostProcess-5e4687e0-3566-4e27-809a-98efd38b843d -IoCancelEventPortName:HostProcess-0a7ed014-be12-4dd5-9468-f32e51505b48 -NonStateChangingEventPortName:HostProcess-c5035b1f-9e2e-4779-894d-be9073310f94 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:90c7c5c6-539d-4ba8-9f3b-821e53754979 -DeviceGroupId:WpdFsGroup
atieclxx
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe" -r
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k appmodel

"C:\Program Files (x86)\Winstep\WsxService"

taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
adb fork-server server
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe" -hidden
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Winstep\WorkShelf.exe" autostart
"C:\Program Files\Spamihilator\spamihilator.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
"fontdrvhost.exe"

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 656 660 668 8192 664
"C:\Users\Davsa\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Davsa\AppData\Roaming\Mozilla\Firefox\Profiles\3vdlh593.default-1445021878758

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "ietab@ip.cn:1.95.20100933, noia2_option@kk.noia:3.76, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.25.36, {35106bca-6c78-48c7-ac28-56df30b51d2b}:1.1.12, {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.9, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.51, adblockpopups@jessehakanen.net:0.2.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15, {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.76, {5b175400-2368-11de-8c30-0800200c9a66}:1.9"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =443898&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll


C:\Users\Davsa\AppData\Roaming\Mozilla\Firefox\Profiles\3vdlh593.default-1445021878758\extensions\
coralietab@mozdev.org
{003D3EDC-99B9-4a34-9C20-60CB94F7E829}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C66D064F-82FE-4E1A-B06A-B2490BA48B18}]
Kaspersky Protection plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-07-08 789760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C66D064F-82FE-4E1A-B06A-B2490BA48B18}]
Kaspersky Protection plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-07-08 574208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3507FA00-ADA2-4A02-99B9-51AD26CA9120} - Kaspersky Protection toolbar - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-07-08 789760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]
{3507FA00-ADA2-4A02-99B9-51AD26CA9120} - Kaspersky Protection toolbar - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-07-08 574208]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2015-09-10 3933496]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-18 14021336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WorkShelf"=C:\Program Files (x86)\Winstep\workshelf.exe [2015-07-27 12466176]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"NextSTART"= []
"Workshelf"= []

C:\Users\Davsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Spamihilator.lnk - C:\Program Files\Spamihilator\spamihilator.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-18 13:20:08 ----D---- C:\Program Files\trend micro
2015-10-18 13:20:07 ----D---- C:\rsit
2015-10-18 12:58:18 ----D---- C:\AdwCleaner
2015-10-17 21:06:19 ----D---- C:\Users\Davsa\AppData\Roaming\foobar2000
2015-10-17 21:05:17 ----D---- C:\Program Files (x86)\foobar2000
2015-10-16 20:47:31 ----A---- C:\Windows\system32\klfphc.dll
2015-10-16 20:46:45 ----D---- C:\Program Files (x86)\Kaspersky Lab
2015-10-16 20:46:21 ----A---- C:\Windows\system32\drivers\klif.sys
2015-10-16 20:46:21 ----A---- C:\Windows\system32\drivers\klhk.sys
2015-10-16 20:46:21 ----A---- C:\Windows\system32\drivers\klflt.sys
2015-10-14 21:04:12 ----A---- C:\Windows\system32\mshtml.dll
2015-10-14 21:04:11 ----A---- C:\Windows\system32\edgehtml.dll
2015-10-14 21:04:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-10-14 21:04:06 ----A---- C:\Windows\system32\shell32.dll
2015-10-14 21:04:05 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-14 21:04:03 ----A---- C:\Windows\system32\ieframe.dll
2015-10-14 21:04:02 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-10-14 21:04:01 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-10-14 21:04:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-10-14 21:03:59 ----A---- C:\Windows\system32\jscript9.dll
2015-10-14 21:03:59 ----A---- C:\Windows\system32\Chakra.dll
2015-10-14 21:03:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-10-14 21:03:56 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-10-14 21:03:54 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2015-10-14 21:03:54 ----A---- C:\Windows\system32\msxml6.dll
2015-10-14 21:03:53 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-10-14 21:03:52 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-10-14 21:03:52 ----A---- C:\Windows\system32\win32kfull.sys
2015-10-14 21:03:52 ----A---- C:\Windows\system32\UserDataService.dll
2015-10-14 21:03:52 ----A---- C:\Windows\system32\Unistore.dll
2015-10-14 21:03:51 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-10-14 21:03:51 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2015-10-14 21:03:51 ----A---- C:\Windows\system32\TokenBroker.dll
2015-10-14 21:03:51 ----A---- C:\Windows\system32\msxml3.dll
2015-10-14 21:03:50 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2015-10-14 21:03:50 ----A---- C:\Windows\SYSWOW64\TokenBroker.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\jscript.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\ContactApis.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-14 21:03:49 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2015-10-14 21:03:49 ----A---- C:\Windows\system32\winload.exe
2015-10-14 21:03:49 ----A---- C:\Windows\system32\kerberos.dll
2015-10-14 21:03:48 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-10-14 21:03:48 ----A---- C:\Windows\SYSWOW64\AppointmentApis.dll
2015-10-14 21:03:48 ----A---- C:\Windows\system32\win32kbase.sys
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2015-10-14 21:03:47 ----A---- C:\Windows\system32\vbscript.dll
2015-10-14 21:03:47 ----A---- C:\Windows\system32\ChatApis.dll
2015-10-14 21:03:47 ----A---- C:\Windows\system32\drivers\usbhub.sys
2015-10-14 21:03:46 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2015-10-14 21:03:46 ----A---- C:\Windows\system32\winresume.exe
2015-10-14 21:03:46 ----A---- C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 21:03:45 ----A---- C:\Windows\SYSWOW64\MessagingDataModel2.dll
2015-10-14 21:03:45 ----A---- C:\Windows\system32\winlogon.exe
2015-10-14 21:03:45 ----A---- C:\Windows\system32\PimIndexMaintenance.dll
2015-10-14 21:03:45 ----A---- C:\Windows\system32\EmailApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\MessagingDataModel2.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\fveapi.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\CallHistoryClient.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\AppointmentApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\acmigration.dll
2015-10-14 21:03:43 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2015-10-14 21:03:43 ----A---- C:\Windows\SYSWOW64\CallHistoryClient.dll
2015-10-14 21:03:43 ----A---- C:\Windows\system32\UserDataAccountApis.dll
2015-10-14 21:03:43 ----A---- C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-14 21:03:43 ----A---- C:\Windows\system32\Chakradiag.dll
2015-10-11 21:08:36 ----D---- C:\ProgramData\Kaspersky Lab
2015-10-11 21:08:30 ----A---- C:\ProgramData\ntuser.dat
2015-10-11 15:20:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-11 12:28:08 ----D---- C:\Users\Davsa\AppData\Roaming\ESET
2015-10-10 22:44:34 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2015-10-10 22:44:33 ----A---- C:\Windows\system32\BingMaps.dll
2015-10-10 22:44:32 ----A---- C:\Windows\system32\windows.storage.dll
2015-10-10 22:44:27 ----A---- C:\Windows\system32\mos.dll
2015-10-10 22:44:26 ----A---- C:\Windows\SYSWOW64\mos.dll
2015-10-10 22:44:25 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2015-10-10 22:44:22 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2015-10-10 22:44:22 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2015-10-10 22:44:20 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2015-10-10 22:44:20 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-10-10 22:44:20 ----A---- C:\Windows\system32\mfcore.dll
2015-10-10 22:44:19 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2015-10-10 22:44:19 ----A---- C:\Windows\system32\Windows.Media.dll
2015-10-10 22:44:19 ----A---- C:\Windows\system32\CoreUIComponents.dll
2015-10-10 22:44:14 ----A---- C:\Windows\system32\wininet.dll
2015-10-10 22:44:13 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-10-10 22:44:13 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-10-10 22:44:11 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2015-10-10 22:44:10 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2015-10-10 22:44:10 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2015-10-10 22:44:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-10-10 22:44:08 ----A---- C:\Windows\system32\drivers\tcpip.sys
2015-10-10 22:44:07 ----A---- C:\Windows\system32\wlansvc.dll
2015-10-10 22:44:06 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2015-10-10 22:44:06 ----A---- C:\Windows\system32\winmde.dll
2015-10-10 22:44:06 ----A---- C:\Windows\system32\LicenseManager.dll
2015-10-10 22:44:05 ----A---- C:\Windows\system32\wlidsvc.dll
2015-10-10 22:44:05 ----A---- C:\Windows\system32\Windows.UI.Shell.dll
2015-10-10 22:44:05 ----A---- C:\Windows\system32\RemoteNaturalLanguage.dll
2015-10-10 22:44:04 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-10-10 22:44:04 ----A---- C:\Windows\system32\UIAutomationCore.dll
2015-10-10 22:44:04 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2015-10-10 22:44:03 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2015-10-10 22:44:03 ----A---- C:\Windows\system32\wwansvc.dll
2015-10-10 22:44:03 ----A---- C:\Windows\system32\CoreMessaging.dll
2015-10-10 22:44:02 ----A---- C:\Windows\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-10 22:44:02 ----A---- C:\Windows\system32\twinapi.appcore.dll
2015-10-10 22:44:01 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2015-10-10 22:44:01 ----A---- C:\Windows\SYSWOW64\usoapi.dll
2015-10-10 22:44:01 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-10-10 22:44:00 ----A---- C:\Windows\system32\wuaueng.dll
2015-10-10 22:44:00 ----A---- C:\Windows\system32\mfsvr.dll
2015-10-10 22:44:00 ----A---- C:\Windows\system32\esent.dll
2015-10-10 22:43:59 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2015-10-10 22:43:59 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2015-10-10 22:43:59 ----A---- C:\Windows\system32\RDXService.dll
2015-10-10 22:43:59 ----A---- C:\Windows\system32\modernexecserver.dll
2015-10-10 22:43:59 ----A---- C:\Windows\system32\MBMediaManager.dll
2015-10-10 22:43:58 ----A---- C:\Windows\system32\wpx.dll
2015-10-10 22:43:58 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2015-10-10 22:43:57 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-10 22:43:56 ----A---- C:\Windows\system32\mfds.dll
2015-10-10 22:43:56 ----A---- C:\Windows\system32\hevcdecoder.dll
2015-10-10 22:43:55 ----A---- C:\Windows\SYSWOW64\mfds.dll
2015-10-10 22:43:55 ----A---- C:\Windows\system32\wmpmde.dll
2015-10-10 22:43:55 ----A---- C:\Windows\system32\MapControlCore.dll
2015-10-10 22:43:54 ----A---- C:\Windows\SYSWOW64\MapControlCore.dll
2015-10-10 22:43:54 ----A---- C:\Windows\system32\SharedStartModel.dll
2015-10-10 22:43:54 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2015-10-10 22:43:54 ----A---- C:\Windows\system32\bisrv.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\WWanAPI.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\ngcsvc.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\MbaeApi.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\directmanipulation.dll
2015-10-10 22:43:52 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-10 22:43:52 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2015-10-10 22:43:52 ----A---- C:\Windows\system32\VEEventDispatcher.dll
2015-10-10 22:43:52 ----A---- C:\Windows\system32\NotificationController.dll
2015-10-10 22:43:51 ----A---- C:\Windows\SYSWOW64\winmde.dll
2015-10-10 22:43:51 ----A---- C:\Windows\SYSWOW64\esent.dll
2015-10-10 22:43:51 ----A---- C:\Windows\SYSWOW64\directmanipulation.dll
2015-10-10 22:43:51 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2015-10-10 22:43:51 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2015-10-10 22:43:51 ----A---- C:\Windows\system32\CredProvDataModel.dll
2015-10-10 22:43:50 ----A---- C:\Windows\SYSWOW64\WWanAPI.dll
2015-10-10 22:43:50 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-10-10 22:43:50 ----A---- C:\Windows\system32\wcmsvc.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\VEEventDispatcher.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\JpMapControl.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\CredProvDataModel.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\Windows.UI.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\tileobjserver.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\LockAppBroker.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\audiosrv.dll
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\SettingSyncHost.exe
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\SensorsApi.dll
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\LockAppBroker.dll
2015-10-10 22:43:48 ----A---- C:\Windows\system32\SettingSyncHost.exe
2015-10-10 22:43:48 ----A---- C:\Windows\system32\SensorsApi.dll
2015-10-10 22:43:48 ----A---- C:\Windows\system32\PsmServiceExtHost.dll
2015-10-10 22:43:47 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2015-10-10 22:43:47 ----A---- C:\Windows\system32\ncsi.dll
2015-10-10 22:43:47 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2015-10-10 22:43:47 ----A---- C:\Windows\system32\drivers\fastfat.sys
2015-10-10 22:43:47 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2015-10-10 22:43:46 ----A---- C:\Windows\SYSWOW64\hevcdecoder.dll
2015-10-10 22:43:46 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\workfolderssvc.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\mf.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\KnobsCsp.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\KnobsCore.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\dmenrollengine.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2015-10-10 22:43:45 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-10 22:43:45 ----A---- C:\Windows\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\wcmcsp.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\psmsrv.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\provengine.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\ngccredprov.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\JpMapControl.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\CellularAPI.dll
2015-10-10 22:43:44 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-10-10 22:43:44 ----A---- C:\Windows\system32\wwanconn.dll
2015-10-10 22:43:44 ----A---- C:\Windows\system32\wuuhext.dll
2015-10-10 22:43:44 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2015-10-10 22:43:43 ----A---- C:\Windows\system32\WUDFx02000.dll
2015-10-10 22:43:43 ----A---- C:\Windows\system32\pnidui.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\VEStoreEventHandlers.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\tetheringservice.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\SubscriptionMgr.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\StoreAgent.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\ncryptprov.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\mfps.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\MapsStore.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\cloudAP.dll
2015-10-10 22:43:41 ----A---- C:\Windows\SYSWOW64\ncryptprov.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\wwanmm.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\omadmclient.exe
2015-10-10 22:43:41 ----A---- C:\Windows\system32\MDMAppInstaller.exe
2015-10-10 22:43:41 ----A---- C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\HttpsDataSource.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\drivers\pdc.sys
2015-10-10 22:43:41 ----A---- C:\Windows\system32\drivers\buttonconverter.sys
2015-10-10 22:43:40 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\ngckeyenum.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\MapConfiguration.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\LocationWiFiAdapter.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\drivers\portcls.sys
2015-10-10 22:43:39 ----A---- C:\Windows\system32\Windows.Speech.Pal.dll
2015-10-10 22:43:39 ----A---- C:\Windows\system32\omadmapi.dll
2015-10-10 22:43:39 ----A---- C:\Windows\system32\DeviceEnroller.exe
2015-10-10 22:43:38 ----A---- C:\Windows\SYSWOW64\Windows.Speech.Pal.dll
2015-10-10 22:43:38 ----A---- C:\Windows\system32\syncutil.dll
2015-10-10 22:43:38 ----A---- C:\Windows\system32\LocationWebproxy.dll
2015-10-10 22:43:38 ----A---- C:\Windows\system32\LicenseManagerShellext.exe
2015-10-10 22:43:38 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-10-10 22:43:37 ----A---- C:\Windows\system32\wwancfg.dll
2015-10-10 22:43:37 ----A---- C:\Windows\system32\LocationGeofences.dll
2015-10-10 22:43:37 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2015-10-10 22:43:36 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2015-10-10 22:43:36 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\wpnapps.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\netcenter.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\enterprisecsps.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\drivers\sdbus.sys
2015-10-10 22:43:36 ----A---- C:\Windows\system32\DataSenseHandlers.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\AudioEng.dll
2015-10-10 22:43:35 ----A---- C:\Windows\SYSWOW64\mdmregistration.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\LocationPeIP.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\LocationCrowdsource.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\enrollmentapi.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\accountaccessor.dll
2015-10-10 22:43:33 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2015-10-10 22:43:33 ----A---- C:\Windows\system32\provops.dll
2015-10-10 22:43:33 ----A---- C:\Windows\system32\MPSSVC.dll
2015-10-10 22:43:33 ----A---- C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-10 22:43:32 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2015-10-10 22:43:32 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2015-10-10 22:43:32 ----A---- C:\Windows\system32\nlasvc.dll
2015-10-10 22:43:32 ----A---- C:\Windows\system32\LocationFramework.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\mdmregistration.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\mdmmigrator.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\LocationPeWiFi.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\LocationPeCell.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\dmcsps.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\dmcertinst.exe
2015-10-10 22:43:29 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-10 22:43:29 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-10 22:43:29 ----A---- C:\Windows\system32\provisioningcsp.dll
2015-10-10 22:43:29 ----A---- C:\Windows\system32\configmanager2.dll
2015-10-10 22:43:28 ----A---- C:\Windows\system32\syncmlhook.dll
2015-10-10 22:25:22 ----D---- C:\věci na mobil
2015-09-23 09:30:22 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys

======List of files/folders modified in the last 1 month======

2015-10-18 13:20:11 ----D---- C:\Windows\Temp
2015-10-18 13:20:08 ----RD---- C:\Program Files
2015-10-18 13:08:34 ----D---- C:\Instalačky programů
2015-10-18 13:05:52 ----D---- C:\Windows\System32
2015-10-18 13:05:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-10-18 13:05:51 ----D---- C:\Windows\INF
2015-10-18 13:05:47 ----D---- C:\Windows
2015-10-18 13:05:16 ----D---- C:\Windows\Prefetch
2015-10-18 13:03:42 ----D---- C:\Muzika
2015-10-18 13:02:12 ----D---- C:\Users\Davsa\AppData\Roaming\Spamihilator
2015-10-18 13:00:49 ----SHD---- C:\System Volume Information
2015-10-18 12:59:46 ----D---- C:\Windows\system32\sru
2015-10-18 12:59:44 ----D---- C:\Windows\system32\CatRoot
2015-10-18 12:52:43 ----D---- C:\Windows\debug
2015-10-17 21:05:53 ----RSD---- C:\Windows\Fonts
2015-10-17 21:05:17 ----RD---- C:\Program Files (x86)
2015-10-17 20:48:39 ----D---- C:\Downloads
2015-10-17 19:50:37 ----D---- C:\Windows\AppReadiness
2015-10-17 15:20:22 ----D---- C:\Windows\Microsoft.NET
2015-10-17 13:29:05 ----D---- C:\Windows\system32\WDI
2015-10-17 13:17:56 ----D---- C:\Users\Davsa\AppData\Roaming\AIMP
2015-10-16 21:50:53 ----D---- C:\Windows\system32\drivers
2015-10-16 21:07:32 ----SHD---- C:\Windows\Installer
2015-10-16 20:48:06 ----HD---- C:\ProgramData
2015-10-16 20:47:41 ----D---- C:\Windows\system32\DriverStore
2015-10-16 20:47:13 ----HD---- C:\Windows\ELAMBKUP
2015-10-16 20:09:56 ----D---- C:\Windows\system32\config
2015-10-16 20:03:54 ----SHD---- C:\Boot
2015-10-16 20:03:54 ----D---- C:\Windows\WinSxS
2015-10-16 20:01:27 ----D---- C:\Windows\SysWOW64
2015-10-16 20:01:25 ----D---- C:\Windows\system32\Boot
2015-10-16 20:01:24 ----D---- C:\Windows\system32\appraiser
2015-10-16 20:01:22 ----D---- C:\Windows\system32\CodeIntegrity
2015-10-16 20:01:22 ----D---- C:\Windows\AppPatch
2015-10-16 19:33:48 ----HD---- C:\Program Files\WindowsApps
2015-10-15 09:43:23 ----D---- C:\Windows\CbsTemp
2015-10-15 09:41:40 ----D---- C:\Windows\system32\MRT
2015-10-15 09:36:28 ----A---- C:\Windows\system32\MRT.exe
2015-10-13 22:30:42 ----D---- C:\Windows\system32\catroot2
2015-10-13 22:21:46 ----D---- C:\Users\Davsa\AppData\Roaming\Skype
2015-10-11 15:18:35 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-11 15:17:13 ----SD---- C:\Windows\SYSWOW64\F12
2015-10-11 15:17:13 ----D---- C:\Windows\SYSWOW64\migration
2015-10-11 15:17:05 ----SD---- C:\Windows\system32\F12
2015-10-11 15:17:05 ----D---- C:\Windows\system32\WinBioPlugIns
2015-10-11 15:17:05 ----D---- C:\Windows\system32\SystemResetPlatform
2015-10-11 15:17:05 ----D---- C:\Windows\system32\migration
2015-10-11 15:17:01 ----RD---- C:\Windows\PurchaseDialog
2015-10-11 15:17:01 ----D---- C:\Windows\Provisioning
2015-10-11 15:17:00 ----D---- C:\Windows\L2Schemas
2015-10-11 12:41:11 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-10-10 22:59:01 ----SD---- C:\Windows\system32\Microsoft
2015-10-10 22:29:22 ----D---- C:\Program Files (x86)\Common Files
2015-10-10 22:29:19 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-10-10 22:25:11 ----D---- C:\ProgramData\NortonInstaller
2015-10-09 22:15:45 ----D---- C:\Windows\system32\drivers\UMDF
2015-10-03 21:29:31 ----SD---- C:\ProgramData\Microsoft
2015-09-25 22:13:39 ----SD---- C:\Users\Davsa\AppData\Roaming\Microsoft
2015-09-22 22:03:03 ----D---- C:\Program Files (x86)\Winstep
2015-09-21 20:51:19 ----D---- C:\Windows\appcompat
2015-09-20 19:57:59 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 cm_km;Kaspersky Lab ZAO Cryptographic Module x64 (Weak); C:\Windows\system32\DRIVERS\cm_km.sys [2015-07-06 389816]
R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2015-06-22 478392]
R0 klbackupdisk;Kaspersky Lab klbackupdisk; C:\Windows\system32\DRIVERS\klbackupdisk.sys [2015-06-06 53432]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 klbackupflt;Kaspersky Lab klbackupflt; C:\Windows\system32\DRIVERS\klbackupflt.sys [2015-06-27 70512]
R1 klhk;Kaspersky Lab service driver; C:\Windows\system32\DRIVERS\klhk.sys [2015-07-04 227000]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2015-06-30 937656]
R1 KLIM6;@oem14.inf,%KLIM6_Desc%;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2015-06-11 39608]
R1 klpd;Kaspersky Lab format recognizer driver; C:\Windows\system32\DRIVERS\klpd.sys [2015-10-16 41352]
R1 klwfp;klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [2015-06-26 78008]
R1 Klwtp;Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [2015-06-16 102584]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2015-06-23 187056]
R2 kldisk;kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [2015-06-06 68280]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-09-10 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-09-10 359936]
R3 AtcL001;@netl160a.inf,%AtcL001.Service.DispName%;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\Windows\System32\drivers\l160x64.sys [2015-07-10 65024]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-06-18 4496600]
R3 klflt;Kaspersky Lab Kernel DLL; C:\Windows\system32\DRIVERS\klflt.sys [2015-06-30 171192]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2015-06-06 41656]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2015-06-07 41656]
R3 MTsensor;@oem4.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2015-09-10 17280]
S0 klelam;klelam; C:\Windows\system32\DRIVERS\klelam.sys [2015-06-24 30328]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-07-10 40288]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-07-10 116736]
S3 CisUtMonitor;CisUtMonitor; C:\Windows\system32\DRIVERS\CisUtMonitor.sys [2014-08-07 33360]
S3 fcvsc;fcvsc; C:\Windows\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 HTCAND64;@oem5.inf,%HTCAND64.SvcDesc%;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;@oem9.inf,%NDISPROT_Desc%;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-07-14 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\Windows\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\Windows\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;Adaptér USB RNDIS; C:\Windows\System32\drivers\usb8023x.sys [2015-07-10 22016]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2015-07-10 46080]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Sériový ovladač USB od společnosti Microsoft; C:\Windows\System32\drivers\usbser.sys [2015-07-24 67072]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\Windows\System32\drivers\vhf.sys [2015-07-10 31744]
S4 klkbdflt2;Kaspersky Lab KlKbdFlt2; C:\Windows\system32\DRIVERS\klkbdflt2.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-09-10 238080]
R2 AVP16.0.0;Služba Kaspersky Anti-Virus 16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [2015-08-21 194000]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2014-06-27 87368]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session2;Hostitel synchronizace_Session2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-10 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session2;Data kontaktů_Session2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session2;Úložiště uživatelských dat_Session2; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session2;Přístup k uživatelským datům_Session2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\Windows\system32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Re: Zamrzá pc

Napsal: 18 říj 2015 12:25
od davsa
tady je ještě pokračování

info.txt logfile of random's system information tool 1.10 2015-10-18 13:20:15

======MBR======

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

======Uninstall list======

7-Zip 9.22beta-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Adobe Flash Player 19 NPAPI-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe -maintain plugin
AIMP-->C:\Program Files (x86)\AIMP\Uninstall.exe
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
DriverEasy 4.9.5-->"C:\Program Files\Easeware\DriverEasy\unins000.exe"
EPSON Attach To Email-->C:\Program Files (x86)\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x9 UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x9 UNINST
EPSON Scan Assistant-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x9 -u
EPSON Scan-->C:\Program Files (x86)\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x9 -anything
ESDX5000_CX4900 Uěivatelsk‡ pŢ’ru‹ka-->C:\Program Files (x86)\EPSON\TPMANUAL\ESDX5000_CX4900\USE_G\DOCUNINS.EXE
foobar2000 v1.3.8-->"C:\Program Files (x86)\foobar2000\uninstall.exe" _?=C:\Program Files (x86)\foobar2000
Foxit Reader-->"C:\Program Files (x86)\Foxit Software\Foxit Reader\unins000.exe"
HijackThis 2.0.2-->"C:\Users\Davsa\Desktop\HijackThis.exe" /uninstall
HTC Driver Installer-->MsiExec.exe /X{4CEEE5D0-F905-4688-B9F9-ECC710507796}
HTC Sync Manager-->MsiExec.exe /X{231D0C79-98A6-4693-A366-36DE7D7346EC}
IPTInstaller-->MsiExec.exe /I{08208143-777D-4A06-BB54-71BF0AD1BB70}
IZArc 4.1.9-->"C:\Program Files (x86)\IZArc\unins000.exe"
JDownloader 2-->"C:\Users\Davsa\AppData\Local\JDownloader v2.0\Uninstall JDownloader.exe"
Kaspersky Internet Security-->MsiExec.exe /I{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}
Kaspersky Internet Security-->MsiExec.exe /I{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26} REMOVE=ALL
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
MozBackup 1.5.1-->C:\Program Files (x86)\MozBackup\Uninstall.exe
Mozilla Firefox 40.0.3 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Mozilla Thunderbird 38.3.0 (x86 cs)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
PIF DESIGNER-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x9 anything
Realtek High Definition Audio Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -runfromtemp -removeonly
Skype™ 7.10-->MsiExec.exe /X{6A0549A9-1B96-498C-ACBC-3943001FEB19}
Software tiskárny EPSON-->C:\Windows\system32\spool\DRIVERS\x64\3\EPUPDATE.EXE /R
Spamihilator 1.6.0 (64 bit)-->MsiExec.exe /I{4F7A5C94-1A9E-4F41-BD1B-1D32A799F7DD}
Splash PRO EX-->"C:\Program Files (x86)\Mirillis\Splash PRO EX\uninstall.exe"
Total Commander 64-bit (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcunin64.exe
Uninstall Tool-->"C:\Program Files\Uninstall Tool\unins000.exe"
VueScan x64-->"C:\Program Files\VueScan\vuescan.exe" /remove
Winstep Xtreme 15.7-->"C:\Program Files (x86)\Winstep\unins001.exe"
Zoner Photo Studio 17-->"C:\Program Files\Zoner\Photo Studio 17\unins000.exe"

======System event log======

Computer Name: DESKTOP-M7P1NB6
Event Code: 13
Message: Operační systém se vypíná v systémovém čase ‎2015‎-‎07‎-‎10T12:22:58.143876300Z.
Record Number: 5
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20150710122258.143877-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 109
Message: Správce napájení jádra inicioval přechod do režimu vypnutí.

Důvod vypnutí: Rozhraní API jádra
Record Number: 4
Source Name: Microsoft-Windows-Kernel-Power
Time Written: 20150710122257.950476-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 6005
Message: Služba Event Log byla spuštěna.
Record Number: 3
Source Name: EventLog
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 6009
Message: Microsoft (R) Windows (R) 10.00. 10240 Multiprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z DESKTOP-M7P1NB6 na WIN-8R94B3EVQS6.
Record Number: 1
Source Name: EventLog
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: DESKTOP-M7P1NB6
Event Code: 1003
Message: Služba Ochrana softwaru dokončila kontrolu stavu licencování.
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
Stav licencování=
1: 040fa323-92b1-4baf-97a2-5b67feaefddb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 0724cb7d-3437-4cb7-93cb-830375d0079d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 0cdc4d08-6df6-4eb4-b5b4-a373c3e351e7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 221a02da-e2a1-4b75-864c-0a4410a33fdf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 2c293c26-a45a-4a2a-a350-c69a67097529, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 2de67392-b7a7-462a-b1ca-108dd189f588, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
7: 377333b1-8b5d-48d6-9679-1225c872d37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: 3df374ef-d444-4494-a5a1-4b0d9fd0e203, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: 4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c, 1, 0 [(0 )(1 )(2 [0xC004E003, 0, 0], [( 1 0xC004F034)( 1 0xC004F034)(?)(?)(?)(?)(?)(?)])(3 [0x00000000, 0, 0], [( 6 0xC004F009 0 0)( 1 0x00000000)( 6 0xC004F009 0 0)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)( 11 0x00000000 0xC004F034)])]
11: 613d217f-7f13-4268-9907-1662339531cd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: 7a802526-4c94-4bd1-ba14-835a1aca2120, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: b0773a15-df3a-4312-9ad2-83d69648e356, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
14: bbc56067-37f8-49dd-87b2-a418a9ba130a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
15: bd3762d7-270d-4760-8fb3-d829ca45278a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
16: c082c31b-2c4f-4e07-94d7-9181fa802c4b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
17: c86d5194-4840-4dae-9c1c-0301003a5ab0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
18: d6eadb3b-5ca8-4a6b-986e-35b550756111, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
19: ef51e000-2659-4f25-8345-3de70a9cf4c4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
20: fe74f55b-0338-41d6-b267-4a201abe7285, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
21: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
22: ec67814b-30e6-4a50-bf7b-d55daf729d1e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]


Record Number: 5
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20150910165854.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 5615
Message: Služba WMI (Windows Management Instrumentation) byla úspěšně spuštěna.
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20150910165847.940925-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: DESKTOP-M7P1NB6
Event Code: 1033
Message: Zásady budou vyloučeny, protože jsou definovány jen s atributem Pouze přepsat.
Názvy zásad=(IIS-W3SVC-MaxConcurrentRequests) (Microsoft.Windows.Smc-Enabled) (Telnet-Client-EnableTelnetClient) (TiffIFilterLicensing-EnableTiffIFilter)
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
ID SKU=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
Record Number: 3
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20150910165849.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20150910165844.181252-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: WIN-8R94B3EVQS6
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x160
Název nového procesu: C:\Windows\System32\smss.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x110
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165812.671528-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x158
Název nového procesu: C:\Windows\System32\setupcl.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x110
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165757.520649-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x128
Název nového procesu: C:\Windows\System32\autochk.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x110
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165755.650943-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x110
Název nového procesu: C:\Windows\System32\smss.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x4
Název tvůrčího procesu:
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165744.316838-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4826
Message: Načetla se konfigurační data spouštění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7

Obecné nastavení:
Možnosti načtení: -
Upřesňující možnosti: Ne
Zásady přístupu ke konfiguraci: Výchozí
Protokolování systémových událostí: Ne
Ladění jádra: Ne
Typ spuštění VSM: Vypnuto

Nastavení podpisu:
Testovací podepsání: Ne
Podepsání za běhu: Ne
Zakázat kontroly integrity: Ne

Nastavení HyperVisoru:
Možnosti načtení HyperVisoru: -
Typ spuštění HyperVisoru: Vypnuto
Ladění HyperVisoru: Ne
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165744.221316-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Skype\Phone\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=AMD64 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02

-----------------EOF-----------------

Re: Zamrzá pc

Napsal: 18 říj 2015 16:38
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Zamrzá pc

Napsal: 18 říj 2015 19:11
od davsa
Zdravíčko tady to je ale nic to nenašlo

# AdwCleaner v5.013 - Logfile created 18/10/2015 at 20:07:08
# Updated 09/10/2015 by Xplode
# Database : 2015-10-18.3 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : Davsa - DESKTOP-20SSTIT
# Running from : C:\Users\Davsa\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [638 bytes] ##########

Re: Zamrzá pc

Napsal: 18 říj 2015 19:58
od Rudy
Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Re: Zamrzá pc

Napsal: 18 říj 2015 20:21
od davsa
Diky za rady a tady je log

Logfile of random's system information tool 1.10 (written by random/random)
Run by Davsa at 2015-10-18 21:19:56
Microsoft Windows 10 Pro
System drive C: has 118 GB (77%) free of 153 GB
Total RAM: 4095 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:20:00, on 18.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
C:\Program Files (x86)\Winstep\WorkShelf.exe
C:\Program Files\trend micro\Davsa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: ScriptInjectionPluginBrowserHelperObject - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [WorkShelf] C:\Program Files (x86)\Winstep\workshelf.exe autostart
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Služba Kaspersky Anti-Virus 16.0.0 (AVP16.0.0) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vssbrigde64 - AO Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8202 bytes

======Listing Processes======







winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b97b522a-564c-406f-878f-64b8b53a22c4 -SystemEventPortName:HostProcess-3f1a0180-ba30-42c4-a6d8-b95e9b91fdfe -IoCancelEventPortName:HostProcess-153e32ed-20ca-46b8-a777-9edf1742f2ac -NonStateChangingEventPortName:HostProcess-8d7e0f7f-4e89-4bf2-8e9f-ce0d92f31480 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:217995a9-f56e-4e1e-8402-159bb246dfef -DeviceGroupId:WpdFsGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe" -r
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k appmodel

"C:\Program Files (x86)\Winstep\WsxService"

taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
C:\Windows\Explorer.EXE
adb fork-server server
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\10182015_211211.log
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe" -hidden
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Winstep\WorkShelf.exe" autostart
"C:\Program Files\Spamihilator\spamihilator.exe"

C:\Windows\system32\svchost.exe -k UnistackSvcGroup
"fontdrvhost.exe"
C:\Windows\system32\wbem\wmiprvse.exe
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 608 612 620 8192 616
"C:\Users\Davsa\Desktop\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Davsa\AppData\Roaming\Mozilla\Firefox\Profiles\3vdlh593.default-1445021878758

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "ietab@ip.cn:1.95.20100933, noia2_option@kk.noia:3.76, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.25.36, {35106bca-6c78-48c7-ac28-56df30b51d2b}:1.1.12, {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.9, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.51, adblockpopups@jessehakanen.net:0.2.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15, {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.76, {5b175400-2368-11de-8c30-0800200c9a66}:1.9"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =443898&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll


C:\Users\Davsa\AppData\Roaming\Mozilla\Firefox\Profiles\3vdlh593.default-1445021878758\extensions\
coralietab@mozdev.org
{003D3EDC-99B9-4a34-9C20-60CB94F7E829}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C66D064F-82FE-4E1A-B06A-B2490BA48B18}]
Kaspersky Protection plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-07-08 789760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C66D064F-82FE-4E1A-B06A-B2490BA48B18}]
Kaspersky Protection plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-07-08 574208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3507FA00-ADA2-4A02-99B9-51AD26CA9120} - Kaspersky Protection toolbar - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-07-08 789760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]
{3507FA00-ADA2-4A02-99B9-51AD26CA9120} - Kaspersky Protection toolbar - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-07-08 574208]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2015-09-10 3933496]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-18 14021336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WorkShelf"=C:\Program Files (x86)\Winstep\workshelf.exe [2015-07-27 12466176]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"NextSTART"= []
"Workshelf"= []

C:\Users\Davsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Spamihilator.lnk - C:\Program Files\Spamihilator\spamihilator.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-18 21:12:11 ----D---- C:\_OTM
2015-10-18 13:20:08 ----D---- C:\Program Files\trend micro
2015-10-18 13:20:07 ----D---- C:\rsit
2015-10-18 12:58:18 ----D---- C:\AdwCleaner
2015-10-17 21:06:19 ----D---- C:\Users\Davsa\AppData\Roaming\foobar2000
2015-10-17 21:05:17 ----D---- C:\Program Files (x86)\foobar2000
2015-10-16 20:47:31 ----A---- C:\Windows\system32\klfphc.dll
2015-10-16 20:46:45 ----D---- C:\Program Files (x86)\Kaspersky Lab
2015-10-16 20:46:21 ----A---- C:\Windows\system32\drivers\klif.sys
2015-10-16 20:46:21 ----A---- C:\Windows\system32\drivers\klhk.sys
2015-10-16 20:46:21 ----A---- C:\Windows\system32\drivers\klflt.sys
2015-10-14 21:04:12 ----A---- C:\Windows\system32\mshtml.dll
2015-10-14 21:04:11 ----A---- C:\Windows\system32\edgehtml.dll
2015-10-14 21:04:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-10-14 21:04:06 ----A---- C:\Windows\system32\shell32.dll
2015-10-14 21:04:05 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-14 21:04:03 ----A---- C:\Windows\system32\ieframe.dll
2015-10-14 21:04:02 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-10-14 21:04:01 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-10-14 21:04:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-10-14 21:03:59 ----A---- C:\Windows\system32\jscript9.dll
2015-10-14 21:03:59 ----A---- C:\Windows\system32\Chakra.dll
2015-10-14 21:03:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-10-14 21:03:56 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-10-14 21:03:54 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2015-10-14 21:03:54 ----A---- C:\Windows\system32\msxml6.dll
2015-10-14 21:03:53 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-10-14 21:03:52 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-10-14 21:03:52 ----A---- C:\Windows\system32\win32kfull.sys
2015-10-14 21:03:52 ----A---- C:\Windows\system32\UserDataService.dll
2015-10-14 21:03:52 ----A---- C:\Windows\system32\Unistore.dll
2015-10-14 21:03:51 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-10-14 21:03:51 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2015-10-14 21:03:51 ----A---- C:\Windows\system32\TokenBroker.dll
2015-10-14 21:03:51 ----A---- C:\Windows\system32\msxml3.dll
2015-10-14 21:03:50 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2015-10-14 21:03:50 ----A---- C:\Windows\SYSWOW64\TokenBroker.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\jscript.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\ContactApis.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2015-10-14 21:03:50 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-14 21:03:49 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2015-10-14 21:03:49 ----A---- C:\Windows\system32\winload.exe
2015-10-14 21:03:49 ----A---- C:\Windows\system32\kerberos.dll
2015-10-14 21:03:48 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-10-14 21:03:48 ----A---- C:\Windows\SYSWOW64\AppointmentApis.dll
2015-10-14 21:03:48 ----A---- C:\Windows\system32\win32kbase.sys
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-10-14 21:03:47 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2015-10-14 21:03:47 ----A---- C:\Windows\system32\vbscript.dll
2015-10-14 21:03:47 ----A---- C:\Windows\system32\ChatApis.dll
2015-10-14 21:03:47 ----A---- C:\Windows\system32\drivers\usbhub.sys
2015-10-14 21:03:46 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2015-10-14 21:03:46 ----A---- C:\Windows\system32\winresume.exe
2015-10-14 21:03:46 ----A---- C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 21:03:45 ----A---- C:\Windows\SYSWOW64\MessagingDataModel2.dll
2015-10-14 21:03:45 ----A---- C:\Windows\system32\winlogon.exe
2015-10-14 21:03:45 ----A---- C:\Windows\system32\PimIndexMaintenance.dll
2015-10-14 21:03:45 ----A---- C:\Windows\system32\EmailApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\MessagingDataModel2.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\fveapi.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\CallHistoryClient.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\AppointmentApis.dll
2015-10-14 21:03:44 ----A---- C:\Windows\system32\acmigration.dll
2015-10-14 21:03:43 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2015-10-14 21:03:43 ----A---- C:\Windows\SYSWOW64\CallHistoryClient.dll
2015-10-14 21:03:43 ----A---- C:\Windows\system32\UserDataAccountApis.dll
2015-10-14 21:03:43 ----A---- C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-14 21:03:43 ----A---- C:\Windows\system32\Chakradiag.dll
2015-10-11 21:08:36 ----D---- C:\ProgramData\Kaspersky Lab
2015-10-11 21:08:30 ----A---- C:\ProgramData\ntuser.dat
2015-10-11 15:20:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-11 12:28:08 ----D---- C:\Users\Davsa\AppData\Roaming\ESET
2015-10-10 22:44:34 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2015-10-10 22:44:33 ----A---- C:\Windows\system32\BingMaps.dll
2015-10-10 22:44:32 ----A---- C:\Windows\system32\windows.storage.dll
2015-10-10 22:44:27 ----A---- C:\Windows\system32\mos.dll
2015-10-10 22:44:26 ----A---- C:\Windows\SYSWOW64\mos.dll
2015-10-10 22:44:25 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2015-10-10 22:44:22 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2015-10-10 22:44:22 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2015-10-10 22:44:20 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2015-10-10 22:44:20 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-10-10 22:44:20 ----A---- C:\Windows\system32\mfcore.dll
2015-10-10 22:44:19 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2015-10-10 22:44:19 ----A---- C:\Windows\system32\Windows.Media.dll
2015-10-10 22:44:19 ----A---- C:\Windows\system32\CoreUIComponents.dll
2015-10-10 22:44:14 ----A---- C:\Windows\system32\wininet.dll
2015-10-10 22:44:13 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-10-10 22:44:13 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-10-10 22:44:11 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2015-10-10 22:44:10 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2015-10-10 22:44:10 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2015-10-10 22:44:09 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-10-10 22:44:08 ----A---- C:\Windows\system32\drivers\tcpip.sys
2015-10-10 22:44:07 ----A---- C:\Windows\system32\wlansvc.dll
2015-10-10 22:44:06 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2015-10-10 22:44:06 ----A---- C:\Windows\system32\winmde.dll
2015-10-10 22:44:06 ----A---- C:\Windows\system32\LicenseManager.dll
2015-10-10 22:44:05 ----A---- C:\Windows\system32\wlidsvc.dll
2015-10-10 22:44:05 ----A---- C:\Windows\system32\Windows.UI.Shell.dll
2015-10-10 22:44:05 ----A---- C:\Windows\system32\RemoteNaturalLanguage.dll
2015-10-10 22:44:04 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-10-10 22:44:04 ----A---- C:\Windows\system32\UIAutomationCore.dll
2015-10-10 22:44:04 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2015-10-10 22:44:03 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2015-10-10 22:44:03 ----A---- C:\Windows\system32\wwansvc.dll
2015-10-10 22:44:03 ----A---- C:\Windows\system32\CoreMessaging.dll
2015-10-10 22:44:02 ----A---- C:\Windows\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-10 22:44:02 ----A---- C:\Windows\system32\twinapi.appcore.dll
2015-10-10 22:44:01 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2015-10-10 22:44:01 ----A---- C:\Windows\SYSWOW64\usoapi.dll
2015-10-10 22:44:01 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-10-10 22:44:00 ----A---- C:\Windows\system32\wuaueng.dll
2015-10-10 22:44:00 ----A---- C:\Windows\system32\mfsvr.dll
2015-10-10 22:44:00 ----A---- C:\Windows\system32\esent.dll
2015-10-10 22:43:59 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2015-10-10 22:43:59 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2015-10-10 22:43:59 ----A---- C:\Windows\system32\RDXService.dll
2015-10-10 22:43:59 ----A---- C:\Windows\system32\modernexecserver.dll
2015-10-10 22:43:59 ----A---- C:\Windows\system32\MBMediaManager.dll
2015-10-10 22:43:58 ----A---- C:\Windows\system32\wpx.dll
2015-10-10 22:43:58 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2015-10-10 22:43:57 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-10 22:43:56 ----A---- C:\Windows\system32\mfds.dll
2015-10-10 22:43:56 ----A---- C:\Windows\system32\hevcdecoder.dll
2015-10-10 22:43:55 ----A---- C:\Windows\SYSWOW64\mfds.dll
2015-10-10 22:43:55 ----A---- C:\Windows\system32\wmpmde.dll
2015-10-10 22:43:55 ----A---- C:\Windows\system32\MapControlCore.dll
2015-10-10 22:43:54 ----A---- C:\Windows\SYSWOW64\MapControlCore.dll
2015-10-10 22:43:54 ----A---- C:\Windows\system32\SharedStartModel.dll
2015-10-10 22:43:54 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2015-10-10 22:43:54 ----A---- C:\Windows\system32\bisrv.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\WWanAPI.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\ngcsvc.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\MbaeApi.dll
2015-10-10 22:43:53 ----A---- C:\Windows\system32\directmanipulation.dll
2015-10-10 22:43:52 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-10 22:43:52 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2015-10-10 22:43:52 ----A---- C:\Windows\system32\VEEventDispatcher.dll
2015-10-10 22:43:52 ----A---- C:\Windows\system32\NotificationController.dll
2015-10-10 22:43:51 ----A---- C:\Windows\SYSWOW64\winmde.dll
2015-10-10 22:43:51 ----A---- C:\Windows\SYSWOW64\esent.dll
2015-10-10 22:43:51 ----A---- C:\Windows\SYSWOW64\directmanipulation.dll
2015-10-10 22:43:51 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2015-10-10 22:43:51 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2015-10-10 22:43:51 ----A---- C:\Windows\system32\CredProvDataModel.dll
2015-10-10 22:43:50 ----A---- C:\Windows\SYSWOW64\WWanAPI.dll
2015-10-10 22:43:50 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-10-10 22:43:50 ----A---- C:\Windows\system32\wcmsvc.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\VEEventDispatcher.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\JpMapControl.dll
2015-10-10 22:43:49 ----A---- C:\Windows\SYSWOW64\CredProvDataModel.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\Windows.UI.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\tileobjserver.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\LockAppBroker.dll
2015-10-10 22:43:49 ----A---- C:\Windows\system32\audiosrv.dll
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\SettingSyncHost.exe
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\SensorsApi.dll
2015-10-10 22:43:48 ----A---- C:\Windows\SYSWOW64\LockAppBroker.dll
2015-10-10 22:43:48 ----A---- C:\Windows\system32\SettingSyncHost.exe
2015-10-10 22:43:48 ----A---- C:\Windows\system32\SensorsApi.dll
2015-10-10 22:43:48 ----A---- C:\Windows\system32\PsmServiceExtHost.dll
2015-10-10 22:43:47 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2015-10-10 22:43:47 ----A---- C:\Windows\system32\ncsi.dll
2015-10-10 22:43:47 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2015-10-10 22:43:47 ----A---- C:\Windows\system32\drivers\fastfat.sys
2015-10-10 22:43:47 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2015-10-10 22:43:46 ----A---- C:\Windows\SYSWOW64\hevcdecoder.dll
2015-10-10 22:43:46 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\workfolderssvc.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\mf.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\KnobsCsp.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\KnobsCore.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\dmenrollengine.dll
2015-10-10 22:43:46 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2015-10-10 22:43:45 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-10 22:43:45 ----A---- C:\Windows\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\wcmcsp.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\psmsrv.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\provengine.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\ngccredprov.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\JpMapControl.dll
2015-10-10 22:43:45 ----A---- C:\Windows\system32\CellularAPI.dll
2015-10-10 22:43:44 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-10-10 22:43:44 ----A---- C:\Windows\system32\wwanconn.dll
2015-10-10 22:43:44 ----A---- C:\Windows\system32\wuuhext.dll
2015-10-10 22:43:44 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2015-10-10 22:43:43 ----A---- C:\Windows\system32\WUDFx02000.dll
2015-10-10 22:43:43 ----A---- C:\Windows\system32\pnidui.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\VEStoreEventHandlers.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\tetheringservice.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\SubscriptionMgr.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\StoreAgent.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\ncryptprov.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\mfps.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\MapsStore.dll
2015-10-10 22:43:42 ----A---- C:\Windows\system32\cloudAP.dll
2015-10-10 22:43:41 ----A---- C:\Windows\SYSWOW64\ncryptprov.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\wwanmm.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\omadmclient.exe
2015-10-10 22:43:41 ----A---- C:\Windows\system32\MDMAppInstaller.exe
2015-10-10 22:43:41 ----A---- C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\HttpsDataSource.dll
2015-10-10 22:43:41 ----A---- C:\Windows\system32\drivers\pdc.sys
2015-10-10 22:43:41 ----A---- C:\Windows\system32\drivers\buttonconverter.sys
2015-10-10 22:43:40 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\ngckeyenum.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\MapConfiguration.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\LocationWiFiAdapter.dll
2015-10-10 22:43:40 ----A---- C:\Windows\system32\drivers\portcls.sys
2015-10-10 22:43:39 ----A---- C:\Windows\system32\Windows.Speech.Pal.dll
2015-10-10 22:43:39 ----A---- C:\Windows\system32\omadmapi.dll
2015-10-10 22:43:39 ----A---- C:\Windows\system32\DeviceEnroller.exe
2015-10-10 22:43:38 ----A---- C:\Windows\SYSWOW64\Windows.Speech.Pal.dll
2015-10-10 22:43:38 ----A---- C:\Windows\system32\syncutil.dll
2015-10-10 22:43:38 ----A---- C:\Windows\system32\LocationWebproxy.dll
2015-10-10 22:43:38 ----A---- C:\Windows\system32\LicenseManagerShellext.exe
2015-10-10 22:43:38 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-10-10 22:43:37 ----A---- C:\Windows\system32\wwancfg.dll
2015-10-10 22:43:37 ----A---- C:\Windows\system32\LocationGeofences.dll
2015-10-10 22:43:37 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2015-10-10 22:43:36 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2015-10-10 22:43:36 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\wpnapps.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\netcenter.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\enterprisecsps.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\drivers\sdbus.sys
2015-10-10 22:43:36 ----A---- C:\Windows\system32\DataSenseHandlers.dll
2015-10-10 22:43:36 ----A---- C:\Windows\system32\AudioEng.dll
2015-10-10 22:43:35 ----A---- C:\Windows\SYSWOW64\mdmregistration.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\LocationPeIP.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\LocationCrowdsource.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\enrollmentapi.dll
2015-10-10 22:43:35 ----A---- C:\Windows\system32\accountaccessor.dll
2015-10-10 22:43:33 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2015-10-10 22:43:33 ----A---- C:\Windows\system32\provops.dll
2015-10-10 22:43:33 ----A---- C:\Windows\system32\MPSSVC.dll
2015-10-10 22:43:33 ----A---- C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-10 22:43:32 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2015-10-10 22:43:32 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2015-10-10 22:43:32 ----A---- C:\Windows\system32\nlasvc.dll
2015-10-10 22:43:32 ----A---- C:\Windows\system32\LocationFramework.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\mdmregistration.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\mdmmigrator.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\LocationPeWiFi.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\LocationPeCell.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\dmcsps.dll
2015-10-10 22:43:30 ----A---- C:\Windows\system32\dmcertinst.exe
2015-10-10 22:43:29 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-10 22:43:29 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-10 22:43:29 ----A---- C:\Windows\system32\provisioningcsp.dll
2015-10-10 22:43:29 ----A---- C:\Windows\system32\configmanager2.dll
2015-10-10 22:43:28 ----A---- C:\Windows\system32\syncmlhook.dll
2015-10-10 22:25:22 ----D---- C:\věci na mobil
2015-09-23 09:30:22 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys

======List of files/folders modified in the last 1 month======

2015-10-18 21:19:59 ----D---- C:\Windows\Temp
2015-10-18 21:17:03 ----D---- C:\Users\Davsa\AppData\Roaming\Spamihilator
2015-10-18 21:16:32 ----D---- C:\Windows\Prefetch
2015-10-18 21:16:28 ----D---- C:\Windows\system32\catroot2
2015-10-18 21:15:47 ----D---- C:\Windows\System32
2015-10-18 21:15:31 ----SHD---- C:\System Volume Information
2015-10-18 21:14:31 ----D---- C:\Windows\system32\sru
2015-10-18 21:13:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-10-18 21:13:06 ----D---- C:\Windows\INF
2015-10-18 20:33:34 ----D---- C:\Muzika
2015-10-18 13:20:08 ----RD---- C:\Program Files
2015-10-18 13:08:34 ----D---- C:\Instalačky programů
2015-10-18 13:05:47 ----D---- C:\Windows
2015-10-18 12:59:44 ----D---- C:\Windows\system32\CatRoot
2015-10-18 12:52:43 ----D---- C:\Windows\debug
2015-10-17 21:05:53 ----RSD---- C:\Windows\Fonts
2015-10-17 21:05:17 ----RD---- C:\Program Files (x86)
2015-10-17 20:48:39 ----D---- C:\Downloads
2015-10-17 19:50:37 ----D---- C:\Windows\AppReadiness
2015-10-17 15:20:22 ----D---- C:\Windows\Microsoft.NET
2015-10-17 13:29:05 ----D---- C:\Windows\system32\WDI
2015-10-17 13:17:56 ----D---- C:\Users\Davsa\AppData\Roaming\AIMP
2015-10-16 21:50:53 ----D---- C:\Windows\system32\drivers
2015-10-16 21:07:32 ----SHD---- C:\Windows\Installer
2015-10-16 20:48:06 ----HD---- C:\ProgramData
2015-10-16 20:47:41 ----D---- C:\Windows\system32\DriverStore
2015-10-16 20:47:13 ----HD---- C:\Windows\ELAMBKUP
2015-10-16 20:09:56 ----D---- C:\Windows\system32\config
2015-10-16 20:03:54 ----SHD---- C:\Boot
2015-10-16 20:03:54 ----D---- C:\Windows\WinSxS
2015-10-16 20:01:27 ----D---- C:\Windows\SysWOW64
2015-10-16 20:01:25 ----D---- C:\Windows\system32\Boot
2015-10-16 20:01:24 ----D---- C:\Windows\system32\appraiser
2015-10-16 20:01:22 ----D---- C:\Windows\system32\CodeIntegrity
2015-10-16 20:01:22 ----D---- C:\Windows\AppPatch
2015-10-16 19:33:48 ----HD---- C:\Program Files\WindowsApps
2015-10-15 09:43:23 ----D---- C:\Windows\CbsTemp
2015-10-15 09:41:40 ----D---- C:\Windows\system32\MRT
2015-10-15 09:36:28 ----A---- C:\Windows\system32\MRT.exe
2015-10-13 22:21:46 ----D---- C:\Users\Davsa\AppData\Roaming\Skype
2015-10-11 15:18:35 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-11 15:17:13 ----SD---- C:\Windows\SYSWOW64\F12
2015-10-11 15:17:13 ----D---- C:\Windows\SYSWOW64\migration
2015-10-11 15:17:05 ----SD---- C:\Windows\system32\F12
2015-10-11 15:17:05 ----D---- C:\Windows\system32\WinBioPlugIns
2015-10-11 15:17:05 ----D---- C:\Windows\system32\SystemResetPlatform
2015-10-11 15:17:05 ----D---- C:\Windows\system32\migration
2015-10-11 15:17:01 ----RD---- C:\Windows\PurchaseDialog
2015-10-11 15:17:01 ----D---- C:\Windows\Provisioning
2015-10-11 15:17:00 ----D---- C:\Windows\L2Schemas
2015-10-11 12:41:11 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-10-10 22:59:01 ----SD---- C:\Windows\system32\Microsoft
2015-10-10 22:29:22 ----D---- C:\Program Files (x86)\Common Files
2015-10-10 22:29:19 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-10-10 22:25:11 ----D---- C:\ProgramData\NortonInstaller
2015-10-09 22:15:45 ----D---- C:\Windows\system32\drivers\UMDF
2015-10-03 21:29:31 ----SD---- C:\ProgramData\Microsoft
2015-09-25 22:13:39 ----SD---- C:\Users\Davsa\AppData\Roaming\Microsoft
2015-09-22 22:03:03 ----D---- C:\Program Files (x86)\Winstep
2015-09-21 20:51:19 ----D---- C:\Windows\appcompat
2015-09-20 19:57:59 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 cm_km;Kaspersky Lab ZAO Cryptographic Module x64 (Weak); C:\Windows\system32\DRIVERS\cm_km.sys [2015-07-06 389816]
R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2015-06-22 478392]
R0 klbackupdisk;Kaspersky Lab klbackupdisk; C:\Windows\system32\DRIVERS\klbackupdisk.sys [2015-06-06 53432]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 klbackupflt;Kaspersky Lab klbackupflt; C:\Windows\system32\DRIVERS\klbackupflt.sys [2015-06-27 70512]
R1 klhk;Kaspersky Lab service driver; C:\Windows\system32\DRIVERS\klhk.sys [2015-07-04 227000]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2015-06-30 937656]
R1 KLIM6;@oem14.inf,%KLIM6_Desc%;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2015-06-11 39608]
R1 klpd;Kaspersky Lab format recognizer driver; C:\Windows\system32\DRIVERS\klpd.sys [2015-10-16 41352]
R1 klwfp;klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [2015-06-26 78008]
R1 Klwtp;Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [2015-06-16 102584]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2015-06-23 187056]
R2 kldisk;kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [2015-06-06 68280]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-09-10 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-09-10 359936]
R3 AtcL001;@netl160a.inf,%AtcL001.Service.DispName%;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\Windows\System32\drivers\l160x64.sys [2015-07-10 65024]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-06-18 4496600]
R3 klflt;Kaspersky Lab Kernel DLL; C:\Windows\system32\DRIVERS\klflt.sys [2015-06-30 171192]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2015-06-06 41656]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2015-06-07 41656]
R3 MTsensor;@oem4.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2015-09-10 17280]
S0 klelam;klelam; C:\Windows\system32\DRIVERS\klelam.sys [2015-06-24 30328]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-07-10 40288]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-07-10 116736]
S3 CisUtMonitor;CisUtMonitor; C:\Windows\system32\DRIVERS\CisUtMonitor.sys [2014-08-07 33360]
S3 fcvsc;fcvsc; C:\Windows\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 HTCAND64;@oem5.inf,%HTCAND64.SvcDesc%;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;@oem9.inf,%NDISPROT_Desc%;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-07-14 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\Windows\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\Windows\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;Adaptér USB RNDIS; C:\Windows\System32\drivers\usb8023x.sys [2015-07-10 22016]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2015-07-10 46080]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Sériový ovladač USB od společnosti Microsoft; C:\Windows\System32\drivers\usbser.sys [2015-07-24 67072]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\Windows\System32\drivers\vhf.sys [2015-07-10 31744]
S4 klkbdflt2;Kaspersky Lab KlKbdFlt2; C:\Windows\system32\DRIVERS\klkbdflt2.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-09-10 238080]
R2 AVP16.0.0;Služba Kaspersky Anti-Virus 16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [2015-08-21 194000]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2014-06-27 87368]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-10 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\Windows\system32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Re: Zamrzá pc

Napsal: 18 říj 2015 21:29
od Rudy
Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Re: Zamrzá pc

Napsal: 26 říj 2015 21:43
od davsa
Zdravím vás,omlouvám se ale nebyl jsem ted dlouho doma.Pc maká jak má :idea: Mockrát děkuji a přeji pěkný den.Byl tam nějaký vir?

Re: Zamrzá pc

Napsal: 26 říj 2015 22:30
od Rudy
Nebyl. Spíše jen zbytečnosti. Nemáte zač! :)

Re: Zamrzá pc

Napsal: 20 lis 2015 20:42
od davsa
Dobrý den tak bohužel zas začal počítač zamrzat před chvílí opět zamrznul a pomohl až tvrdej restart.Díky za rady.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Davsa at 2015-11-20 20:36:55
Microsoft Windows 10 Pro
System drive C: has 107 GB (70%) free of 153 GB
Total RAM: 4095 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:37:00, on 20.11.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\NIS.exe
C:\Program Files (x86)\Winstep\WorkShelf.exe
C:\Program Files\trend micro\Davsa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\coIEPlg.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\coIEPlg.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [WorkShelf] C:\Program Files (x86)\Winstep\workshelf.exe autostart
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\NIS.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7975 bytes

======Listing Processes======







winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\atiesrxx.exe
atieclxx
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-61228510-31fa-44b9-aa11-c5d70f380d52 -SystemEventPortName:HostProcess-5dc662d2-5a0e-4c97-bada-bfd34c38aa03 -IoCancelEventPortName:HostProcess-f1f26cf0-cffa-4d10-9910-11d0201208c9 -NonStateChangingEventPortName:HostProcess-79da4d46-080c-47dc-948c-a8e8f732d42f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d454d424-d192-40fa-a43a-e6ef583f5144 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\NIS.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\diMaster.dll" /prefetch:1
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Winstep\WsxService"
"C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\NIS.exe" /c /a /s UserSession2
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Winstep\WorkShelf.exe" autostart
"C:\Program Files\Spamihilator\spamihilator.exe"
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16565_none_1162030161f5c19b\TiWorker.exe -Embedding

"C:\Users\Davsa\Desktop\Programy\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Davsa\AppData\Roaming\Mozilla\Firefox\Profiles\3vdlh593.default-1445021878758

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "ietab@ip.cn:1.95.20100933, noia2_option@kk.noia:3.76, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2010.25.36, {35106bca-6c78-48c7-ac28-56df30b51d2b}:1.1.12, {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.9, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.51, adblockpopups@jessehakanen.net:0.2.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15, {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.76, {5b175400-2368-11de-8c30-0800200c9a66}:1.9"

"{C1A2A613-35F1-4FCF-B27F-2840527B6556}"=C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon\


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll


C:\Users\Davsa\AppData\Roaming\Mozilla\Firefox\Profiles\3vdlh593.default-1445021878758\extensions\
coralietab@mozdev.org
{003D3EDC-99B9-4a34-9C20-60CB94F7E829}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.4.24\coIEPlg.dll [2015-09-23 1041208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\coIEPlg.dll [2015-09-23 796472]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.4.24\coIEPlg.dll [2015-09-23 1041208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\coIEPlg.dll [2015-09-23 796472]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2015-09-10 3933496]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-18 14021336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WorkShelf"=C:\Program Files (x86)\Winstep\workshelf.exe [2015-07-27 12466176]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"NextSTART"= []
"Workshelf"= []

C:\Users\Davsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Spamihilator.lnk - C:\Program Files\Spamihilator\spamihilator.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-20 20:36:55 ----D---- C:\rsit
2015-11-10 20:03:44 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-10 20:03:43 ----A---- C:\Windows\system32\mshtml.dll
2015-11-10 20:03:40 ----A---- C:\Windows\system32\edgehtml.dll
2015-11-10 20:03:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-10 20:03:36 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-11-10 20:03:35 ----A---- C:\Windows\SYSWOW64\Windows.StateRepository.dll
2015-11-10 20:03:35 ----A---- C:\Windows\system32\Windows.StateRepository.dll
2015-11-10 20:03:35 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-11-10 20:03:34 ----A---- C:\Windows\SYSWOW64\dlnashext.dll
2015-11-10 20:03:34 ----A---- C:\Windows\system32\dlnashext.dll
2015-11-10 20:03:33 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-10 20:03:33 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-11-10 20:03:33 ----A---- C:\Windows\system32\appraiser.dll
2015-11-10 20:03:32 ----A---- C:\Windows\system32\Windows.Media.dll
2015-11-10 20:03:32 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-11-10 20:03:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-10 20:03:31 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-10 20:03:31 ----A---- C:\Windows\system32\drivers\netio.sys
2015-11-10 20:03:30 ----A---- C:\Windows\system32\LicenseManager.dll
2015-11-10 20:03:29 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-11-10 20:03:29 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-11-10 20:03:29 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-10 20:03:28 ----A---- C:\Windows\system32\iertutil.dll
2015-11-10 20:03:27 ----A---- C:\Windows\SYSWOW64\esent.dll
2015-11-10 20:03:27 ----A---- C:\Windows\system32\win32kfull.sys
2015-11-10 20:03:27 ----A---- C:\Windows\system32\internetmail.dll
2015-11-10 20:03:27 ----A---- C:\Windows\system32\dssvc.dll
2015-11-10 20:03:26 ----A---- C:\Windows\system32\usermgr.dll
2015-11-10 20:03:26 ----A---- C:\Windows\system32\esent.dll
2015-11-10 20:03:26 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2015-11-10 20:03:25 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-11-10 20:03:25 ----A---- C:\Windows\system32\ieframe.dll
2015-11-10 20:03:25 ----A---- C:\Windows\system32\browserbroker.dll
2015-11-10 20:03:25 ----A---- C:\Windows\system32\audiosrv.dll
2015-11-10 20:03:24 ----A---- C:\Windows\system32\Windows.Devices.Usb.dll
2015-11-10 20:03:24 ----A---- C:\Windows\system32\RDXService.dll
2015-11-10 20:03:24 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2015-11-10 20:03:23 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Usb.dll
2015-11-10 20:03:23 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-10 20:03:23 ----A---- C:\Windows\system32\winlogon.exe
2015-11-10 20:03:23 ----A---- C:\Windows\system32\Windows.UI.dll
2015-11-10 20:03:23 ----A---- C:\Windows\system32\urlmon.dll
2015-11-10 20:03:22 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2015-11-10 20:03:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-10 20:03:22 ----A---- C:\Windows\system32\win32kbase.sys
2015-11-10 20:03:22 ----A---- C:\Windows\system32\twinapi.appcore.dll
2015-11-10 20:03:21 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2015-11-10 20:03:21 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2015-11-10 20:03:20 ----A---- C:\Windows\system32\jscript.dll
2015-11-10 20:03:19 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-10 20:03:19 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2015-11-10 20:03:19 ----A---- C:\Windows\system32\kerberos.dll
2015-11-10 20:03:19 ----A---- C:\Windows\system32\fontdrvhost.exe
2015-11-07 13:54:40 ----D---- C:\Program Files (x86)\directx
2015-10-30 20:50:36 ----D---- C:\Users\Davsa\AppData\Roaming\Ashampoo
2015-10-30 20:49:35 ----D---- C:\ProgramData\ashampoo
2015-10-30 20:48:30 ----D---- C:\Program Files (x86)\Ashampoo
2015-10-24 21:02:13 ----D---- C:\Users\Davsa\AppData\Roaming\uTorrent

======List of files/folders modified in the last 1 month======

2015-11-20 20:36:59 ----D---- C:\Program Files\trend micro
2015-11-20 20:36:42 ----D---- C:\Windows\Prefetch
2015-11-20 20:34:03 ----D---- C:\Windows\System32
2015-11-20 20:34:03 ----D---- C:\Windows\INF
2015-11-20 20:34:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-20 20:31:13 ----D---- C:\Users\Davsa\AppData\Roaming\Spamihilator
2015-11-20 20:30:19 ----D---- C:\Windows\Temp
2015-11-20 20:29:57 ----D---- C:\Windows\system32\sru
2015-11-20 20:20:37 ----D---- C:\Windows\AppReadiness
2015-11-20 20:20:36 ----HD---- C:\Program Files\WindowsApps
2015-11-20 20:18:22 ----D---- C:\Windows\system32\config
2015-11-19 20:55:36 ----D---- C:\Program Files (x86)\Winstep
2015-11-19 20:52:58 ----D---- C:\Windows\WinSxS
2015-11-19 20:45:22 ----D---- C:\Windows\Microsoft.NET
2015-11-18 21:10:09 ----D---- C:\Users\Davsa\AppData\Roaming\Skype
2015-11-18 14:04:37 ----D---- C:\Windows
2015-11-18 14:00:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-11-18 14:00:36 ----D---- C:\Windows\SysWOW64
2015-11-18 14:00:36 ----D---- C:\Windows\system32\cs-CZ
2015-11-18 14:00:36 ----D---- C:\Windows\system32\appraiser
2015-11-18 14:00:24 ----D---- C:\Windows\system32\drivers
2015-11-18 14:00:24 ----D---- C:\Windows\AppPatch
2015-11-18 14:00:22 ----D---- C:\Windows\system32\DriverStore
2015-11-17 21:13:07 ----SHD---- C:\System Volume Information
2015-11-17 21:03:01 ----D---- C:\Windows\debug
2015-11-14 19:47:53 ----D---- C:\Downloads
2015-11-14 19:47:49 ----D---- C:\Muzika
2015-11-14 19:47:41 ----D---- C:\věci na mobil
2015-11-10 20:53:19 ----D---- C:\Windows\CbsTemp
2015-11-10 20:51:15 ----D---- C:\Windows\system32\MRT
2015-11-10 20:46:06 ----A---- C:\Windows\system32\MRT.exe
2015-11-10 19:57:28 ----D---- C:\Windows\system32\catroot2
2015-11-08 19:58:59 ----D---- C:\AdwCleaner
2015-11-08 13:30:57 ----D---- C:\Windows\rescache
2015-11-07 22:10:54 ----HD---- C:\Windows\ELAMBKUP
2015-11-07 13:59:36 ----RD---- C:\Program Files (x86)
2015-11-03 19:20:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-31 21:03:55 ----D---- C:\Users\Davsa\AppData\Roaming\AIMP
2015-10-30 20:55:51 ----D---- C:\Instalačky programů
2015-10-30 20:49:35 ----HD---- C:\ProgramData
2015-10-23 19:34:31 ----D---- C:\Windows\Tasks
2015-10-23 19:34:31 ----D---- C:\Windows\system32\Tasks
2015-10-22 20:18:02 ----D---- C:\Windows\system32\drivers\NISx64

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 SymEFASI;Symantec Extended File Attributes (SI); C:\Windows\system32\drivers\NISx64\1605040.018\SYMEFASI64.SYS [2015-07-11 1620720]
R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20151113.001\BHDrvx64.sys [2015-10-08 1665608]
R1 ccSet_NIS;NIS Settings Manager; C:\Windows\system32\drivers\NISx64\1605040.018\ccSetx64.sys [2015-07-11 173808]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2015-11-18 498512]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20151119.001\IDSvia64.sys [2015-10-16 767224]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1605040.018\SRTSPX64.SYS [2015-07-11 50936]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1605040.018\Ironx64.SYS [2015-07-11 297720]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1605040.018\SYMNETS.SYS [2015-09-23 577768]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-09-10 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-09-10 359936]
R3 AtcL001;@netl160a.inf,%AtcL001.Service.DispName%;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\Windows\System32\drivers\l160x64.sys [2015-07-10 65024]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2015-11-18 157520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-06-18 4496600]
R3 MTsensor;@oem4.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2015-09-10 17280]
R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20151120.003\ENG64.SYS [2015-10-27 138488]
R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20151120.003\EX64.SYS [2015-10-27 2148080]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1605040.018\SRTSP64.SYS [2015-09-23 930024]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2015-10-20 111344]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-07-10 40288]
S0 SymELAM;Symantec ELAM Driver; C:\Windows\system32\drivers\NISx64\1605040.018\SymELAM.sys [2015-07-11 24192]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-07-10 116736]
S3 CisUtMonitor;CisUtMonitor; C:\Windows\system32\DRIVERS\CisUtMonitor.sys [2014-08-07 33360]
S3 fcvsc;fcvsc; C:\Windows\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 HTCAND64;@oem5.inf,%HTCAND64.SvcDesc%;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;@oem9.inf,%NDISPROT_Desc%;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2013-10-17 36928]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-07-14 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\Windows\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\Windows\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;Adaptér USB RNDIS; C:\Windows\System32\drivers\usb8023x.sys [2015-07-10 22016]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2015-07-10 46080]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Sériový ovladač USB od společnosti Microsoft; C:\Windows\System32\drivers\usbser.sys [2015-07-24 67072]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\Windows\System32\drivers\vhf.sys [2015-07-10 31744]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-09-10 238080]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\22.5.4.24\NIS.exe [2015-09-24 282016]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session3;Hostitel synchronizace_Session3; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-11 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-10 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session3;Data kontaktů_Session3; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session3;Úložiště uživatelských dat_Session3; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session3;Přístup k uživatelským datům_Session3; C:\Windows\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\Windows\system32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------

Re: Zamrzá pc

Napsal: 20 lis 2015 20:43
od davsa
info.txt logfile of random's system information tool 1.10 2015-11-20 20:37:03

======MBR======

0x33C08ED0BC007C8EC08ED8BE007CBF0006B90002FCF3A450681C06CBFBB90400BDBE07807E00007C0B0F850E0183C510E2F1CD1888560055C6461105C6461000B441BBAA55CD135D720F81FB55AA7509F7C101007403FE46106660807E1000742666680000000066FF760868000068007C680100681000B4428A56008BF4CD139F83C4109EEB14B80102BB007C8A56008A76018A4E028A6E03CD136661731CFE4E11750C807E00800F848A00B280EB845532E48A5600CD135DEB9E813EFE7D55AA756EFF7600E88D007517FAB0D1E664E88300B0DFE660E87C00B0FFE664E87500FBB800BBCD1A6623C0753B6681FB54435041753281F90201722C666807BB00006668000200006668080000006653665366556668000000006668007C0000666168000007CD1A5A32F6EA007C0000CD18A0B707EB08A0B607EB03A0B50732E40500078BF0AC3C007409BB0700B40ECD10EBF2F4EBFD2BC9E464EB002402E0F82402C3496E76616C696420706172746974696F6E207461626C65004572726F72206C6F6164696E67206F7065726174696E672073797374656D004D697373696E67206F7065726174696E672073797374656D000000637B9A419C419C000080010100073BCCFF0C000000E497A11200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA

======Uninstall list======

7-Zip 9.22beta-->"C:\Program Files (x86)\7-Zip\Uninstall.exe"
Adobe Flash Player 19 NPAPI-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_245_Plugin.exe -maintain plugin
AIMP-->C:\Program Files (x86)\AIMP\Uninstall.exe
Ashampoo Burning Studio 15 v.15.0.0-->"C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 15\unins000.exe"
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
DriverEasy 4.9.5-->"C:\Program Files\Easeware\DriverEasy\unins000.exe"
EPSON Attach To Email-->C:\Program Files (x86)\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x9 UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x9 UNINST
EPSON Scan Assistant-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x9 -u
EPSON Scan-->C:\Program Files (x86)\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x9 -anything
ESDX5000_CX4900 Uěivatelsk‡ pŢ’ru‹ka-->C:\Program Files (x86)\EPSON\TPMANUAL\ESDX5000_CX4900\USE_G\DOCUNINS.EXE
Foxit Reader-->"C:\Program Files (x86)\Foxit Software\Foxit Reader\unins000.exe"
IPTInstaller-->MsiExec.exe /I{08208143-777D-4A06-BB54-71BF0AD1BB70}
IZArc 4.1.9-->"C:\Program Files (x86)\IZArc\unins000.exe"
JDownloader 2-->"C:\Users\Davsa\AppData\Local\JDownloader v2.0\Uninstall JDownloader.exe"
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
MozBackup 1.5.1-->C:\Program Files (x86)\MozBackup\Uninstall.exe
Mozilla Firefox 40.0.3 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Mozilla Thunderbird 38.3.0 (x86 cs)-->C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
Norton Internet Security-->"C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\562C4DD5\22.5.4.24\InstStub.exe" /X /ARP
PIF DESIGNER-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x9 anything
Realtek High Definition Audio Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -runfromtemp -removeonly
Skype™ 7.10-->MsiExec.exe /X{6A0549A9-1B96-498C-ACBC-3943001FEB19}
Software tiskárny EPSON-->C:\Windows\system32\spool\DRIVERS\x64\3\EPUPDATE.EXE /R
Spamihilator 1.6.0 (64 bit)-->MsiExec.exe /I{4F7A5C94-1A9E-4F41-BD1B-1D32A799F7DD}
Splash PRO EX-->"C:\Program Files (x86)\Mirillis\Splash PRO EX\uninstall.exe"
Total Commander 64-bit (Remove or Repair)-->C:\Program Files (x86)\totalcmd\tcunin64.exe
Uninstall Tool-->"C:\Program Files\Uninstall Tool\unins000.exe"
VueScan x64-->"C:\Program Files\VueScan\vuescan.exe" /remove
Winstep Xtreme 15.7-->"C:\Program Files (x86)\Winstep\unins001.exe"
Zoner Photo Studio 17-->"C:\Program Files\Zoner\Photo Studio 17\unins000.exe"

======System event log======

Computer Name: DESKTOP-M7P1NB6
Event Code: 13
Message: Operační systém se vypíná v systémovém čase ‎2015‎-‎07‎-‎10T12:22:58.143876300Z.
Record Number: 5
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20150710122258.143877-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 109
Message: Správce napájení jádra inicioval přechod do režimu vypnutí.

Důvod vypnutí: Rozhraní API jádra
Record Number: 4
Source Name: Microsoft-Windows-Kernel-Power
Time Written: 20150710122257.950476-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 6005
Message: Služba Event Log byla spuštěna.
Record Number: 3
Source Name: EventLog
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 6009
Message: Microsoft (R) Windows (R) 10.00. 10240 Multiprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z DESKTOP-M7P1NB6 na WIN-8R94B3EVQS6.
Record Number: 1
Source Name: EventLog
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: DESKTOP-M7P1NB6
Event Code: 1003
Message: Služba Ochrana softwaru dokončila kontrolu stavu licencování.
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
Stav licencování=
1: 040fa323-92b1-4baf-97a2-5b67feaefddb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 0724cb7d-3437-4cb7-93cb-830375d0079d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 0cdc4d08-6df6-4eb4-b5b4-a373c3e351e7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 221a02da-e2a1-4b75-864c-0a4410a33fdf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 2c293c26-a45a-4a2a-a350-c69a67097529, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 2de67392-b7a7-462a-b1ca-108dd189f588, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
7: 377333b1-8b5d-48d6-9679-1225c872d37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: 3df374ef-d444-4494-a5a1-4b0d9fd0e203, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: 4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c, 1, 0 [(0 )(1 )(2 [0xC004E003, 0, 0], [( 1 0xC004F034)( 1 0xC004F034)(?)(?)(?)(?)(?)(?)])(3 [0x00000000, 0, 0], [( 6 0xC004F009 0 0)( 1 0x00000000)( 6 0xC004F009 0 0)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)( 11 0x00000000 0xC004F034)])]
11: 613d217f-7f13-4268-9907-1662339531cd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: 7a802526-4c94-4bd1-ba14-835a1aca2120, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: b0773a15-df3a-4312-9ad2-83d69648e356, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
14: bbc56067-37f8-49dd-87b2-a418a9ba130a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
15: bd3762d7-270d-4760-8fb3-d829ca45278a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
16: c082c31b-2c4f-4e07-94d7-9181fa802c4b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
17: c86d5194-4840-4dae-9c1c-0301003a5ab0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
18: d6eadb3b-5ca8-4a6b-986e-35b550756111, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
19: ef51e000-2659-4f25-8345-3de70a9cf4c4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
20: fe74f55b-0338-41d6-b267-4a201abe7285, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
21: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
22: ec67814b-30e6-4a50-bf7b-d55daf729d1e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]


Record Number: 5
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20150910165854.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 5615
Message: Služba WMI (Windows Management Instrumentation) byla úspěšně spuštěna.
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20150910165847.940925-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: DESKTOP-M7P1NB6
Event Code: 1033
Message: Zásady budou vyloučeny, protože jsou definovány jen s atributem Pouze přepsat.
Názvy zásad=(IIS-W3SVC-MaxConcurrentRequests) (Microsoft.Windows.Smc-Enabled) (Telnet-Client-EnableTelnetClient) (TiffIFilterLicensing-EnableTiffIFilter)
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
ID SKU=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
Record Number: 3
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20150910165849.000000-000
Event Type: Informace
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20150910165844.181252-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: WIN-8R94B3EVQS6
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20150910165843.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x160
Název nového procesu: C:\Windows\System32\smss.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x110
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165812.671528-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x158
Název nového procesu: C:\Windows\System32\setupcl.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x110
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165757.520649-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x128
Název nového procesu: C:\Windows\System32\autochk.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x110
Název tvůrčího procesu: C:\Windows\System32\smss.exe
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165755.650943-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4688
Message: Byl vytvořen nový proces.

Tvůrčí subjekt:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x3E7

Cílový subjekt:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
Přihlašovací ID: 0x0

Informace o procesu:
ID nového procesu: 0x110
Název nového procesu: C:\Windows\System32\smss.exe
Typ zvýšení oprávnění tokenu: %%1936
Povinný štítek: S-1-16-16384
ID tvůrčího procesu: 0x4
Název tvůrčího procesu:
Příkazový řádek procesu:

Typ zvýšení oprávnění tokenu označuje typ tokenu, který byl přiřazen novému procesu v souladu se zásadami nástroje Řízení uživatelských účtů.

Typ 1 je úplný token, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Úplný token se používá pouze v případě, že je vypnut nástroj Řízení uživatelských účtů nebo pokud uživatel je integrovaný účet Administrator nebo účet služby.

Typ 2 je token se zvýšenými oprávněními, u kterého nebyla odebrána žádná oprávnění ani nebyly zakázány skupiny. Token se zvýšenými oprávněními se používá, pokud je zapnut nástroj Řízení uživatelských účtů a uživatel se rozhodne spustit program pomocí možnosti Spustit jako správce. Token se zvýšenými oprávněními se také používá, pokud je aplikace nakonfigurována tak, aby vždy vyžadovala oprávnění správce nebo maximální oprávnění, a uživatel je členem skupiny Administrators.

Typ 3 je omezený token s odebranými oprávněními správce a zakázanými skupinami pro správu. Omezený token se používá, pokud je zapnut nástroj Řízení uživatelských účtů, aplikace nevyžaduje oprávnění správce a uživatel se nerozhodne spustit program pomocí možnosti Spustit jako správce.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165744.316838-000
Event Type: Úspěšný audit
User:

Computer Name: DESKTOP-M7P1NB6
Event Code: 4826
Message: Načetla se konfigurační data spouštění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: -
Doména účtu: -
ID přihlášení: 0x3E7

Obecné nastavení:
Možnosti načtení: -
Upřesňující možnosti: Ne
Zásady přístupu ke konfiguraci: Výchozí
Protokolování systémových událostí: Ne
Ladění jádra: Ne
Typ spuštění VSM: Vypnuto

Nastavení podpisu:
Testovací podepsání: Ne
Podepsání za běhu: Ne
Zakázat kontroly integrity: Ne

Nastavení HyperVisoru:
Možnosti načtení HyperVisoru: -
Typ spuštění HyperVisoru: Vypnuto
Ladění HyperVisoru: Ne
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150910165744.221316-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Skype\Phone\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=AMD64 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02

-----------------EOF-----------------

Re: Zamrzá pc

Napsal: 20 lis 2015 21:05
od Rudy
Spusťte opět tutp utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Zamrzá pc

Napsal: 20 lis 2015 21:37
od davsa
Tady to je ale nic nenašel

# AdwCleaner v5.021 - Logfile created 20/11/2015 at 21:34:32
# Updated 14/11/2015 by Xplode
# Database : 2015-11-19.4 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : Davsa - DESKTOP-20SSTIT
# Running from : C:\Users\Davsa\Desktop\adwcleaner_5.021.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [665 bytes] ##########

Re: Zamrzá pc

Napsal: 20 lis 2015 22:10
od Rudy
Toto je OK a ani v logu nic nepatřičného nevidím. Co jste instaloval těsně před tím, než se problém objevil?

Re: Zamrzá pc

Napsal: 20 lis 2015 22:15
od davsa
Díky za rady,právě že nic prostě to samo zamrzne,tenhle tyden to bylo 2x,doufám že to neni hardwarem v počítači dá se to nějak zjisti?díky moc
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz