Naskakuje pořád průzkum spokojenosti s prohlížečem
Napsal: 17 lis 2015 21:12
Dobrý den,
prosím o pomoc. Mám pocit, že se mi tu něco dostalo, protože když kliknu na něco na jakékoli stránce tak se mi zobrazí průzkum jestli jsem spokojený s internetem nebo s prohlížečem a za odměnu dostanu telefon např. Samsung S6. Přikládám log s RSIT a prozbu o pomoc.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Tetrev at 2015-11-17 21:00:29
Microsoft Windows 10 Home
System drive C: has 644 GB (68%) free of 953 GB
Total RAM: 8130 MB (68% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:00:34, on 17.11.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\GameforgeLive\gfl_client.exe
C:\Program Files (x86)\WinRAR\WinRAR.exe
C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-14.exe
C:\Users\Tetrev\AppData\Local\Temp\Rar$EXa0.916\File__16450_i1746631724_il85.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\WinRAR\WinRAR.exe
C:\Program Files\trend micro\Tetrev.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_CA27E6F16FB76B984A73550BC44A76D4] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Norton Download Manager{NIS2250215-SHPD-FSD51083}] C:\Users\Public\Downloads\Norton\{NIS2250215-SHPD-FSD51083}\FSDUI_Custom.exe /m /SHOWONECLICK /WIN10_UPGRADE "C:\Users\Tetrev\AppData\Local\Temp\{F6FC86C2-27B1-4599-A813-7C3CC341DBE9}\Upgrade.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Tetrev\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem60.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14480 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a4574ea4-c0d9-4225-b51f-9a5df95116d9 -SystemEventPortName:HostProcess-5f7bb325-4a41-4239-bf18-202205b550b2 -IoCancelEventPortName:HostProcess-8d68b0fe-f022-44cf-b183-e7b9a8372e3a -NonStateChangingEventPortName:HostProcess-b19497a7-3ce0-4834-8af8-126d053b3694 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a4661ed9-bacc-42d2-9df7-2bf0b3e2ca07 -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {9a25e849-2dba-4b5a-84f62a50f5b2c88d}
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\Windows\system32\IProsetMonitor.exe
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Users\Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\GameforgeLive\gfl_client.exe" "/noautopatch" "-start" "SKILL"
"C:\Program Files (x86)\WinRAR\WinRAR.exe" "C:\Users\Tetrev\Downloads\File__16450_i1746621677_il85.ace"
"C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\szndesktop.exe" default restart
"C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskeng.exe {AFC16073-0477-47E0-9765-A92C2B13BC14}
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe" /rawdata=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
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1900.0.1190124944\531143419" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0f02 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1900.2.1197122906\1628966540" --font-cache-shared-handle=2672 /prefetch:673131151
taskeng.exe {83044EB1-CBF6-46AF-A7F3-9B94BFEACF73}
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-6.exe" /rawdata=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
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-6.exe" /rawdata=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
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-14.exe" /rawdata=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
"C:\Users\Tetrev\AppData\Local\Temp\Rar$EXa0.916\File__16450_i1746631724_il85.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1900.20.1443520754\955305996" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\Users\Tetrev\Dropbox\odkaz.txt
"C:\Program Files (x86)\WinRAR\WinRAR.exe" "C:\Users\Tetrev\Downloads\renault_visu_123.zip"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.25.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe" -ServerName:App.AppXqagq4n4gvy0tjw576pgh6xr601s1h1mv.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe79_ Global\UsGthrCtrlFltPipeMssGthrPipe79 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\svchost.exe -k GPSvcGroup
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 596 600 608 8192 604
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3374175700-459317722-1100794181-100080_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3374175700-459317722-1100794181-100080 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Users\Tetrev\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-1-6.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-6.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-1-7.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-7.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-10_user.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-11.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-11.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-13.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-13.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-14.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-14.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-3.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-3.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-5.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-5.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-5_user.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-5.exe /rawdata=P7AZMJCHIy+R9cNcQOlo+k4TC5JxWzZrZSYsGALtFUT72lbAYzISXcGcPb+CY2hhLA+hQw1RSUNUapE6RrSknhok+ilY0+va9r3zrXpqyWmwH2qdLtucSxY1mz9FeLak0f9BebXdbkcg70dhxfm0C+5KK0Pvbn5+PqLeguLNtLUkQ5MTpKgqhLpxhs3JxVAj6n9QLw6VhFyt0wOOeL8jjee7aBFaY7eZ/0gC7UimIOickW3WSNBr2HFnrKt0cKYgs3unbbcRXxuq6cRnftfmvFZKlWOuGMoJOZjM3jdSm2PWdILl4AngW6qLhgvi0dqkE1qSUyVoFNMO21JGT1T5SJ1iNnuUZGENGVKhCtNbcGsM5zxCwlNr0dncZSWd1h9OC6CigPtgrUJRMpTKtXMuAzwDDmzIGzAP2YAom22gg4Vi8ycjZnqWPmxFL3FnB30oHo81uxDD3aLcA4HLGuia9/p9nU26si8/SNOW5UHdeTkSsc/jH/+7NAFHphitbNbkQCy53glI+jh4G6UMCA6H10wsuAZ/tmXb06VfspbNtnu/hjdcLARbiSSLl3U4zNRbmN0iHTH534cuxcanEvt62qfl/v59Ah315ja+pZNPrG1KthqPZ3Rw1BXLkfEayl+MEw474HMJwy+e37I6h+wwIDNAz9tRCl27r2TZW/Zh+14qXS4fh4bdOpkX4n+oi3xnNxy5ZGiTMmHHVJGZvbr6VpZMm5WErjnCYuubfmA9U7z7YPPCAVDF78RlFTZuqGqEeWsFaVybeg6Gi78yE8A6A9nUeugJtuAttxzDhsW/lb8bW/ZX7dZbD6WOnz0JhEJnzbsQhNQ5Uhzu/Fuv196OsSJa0yzsgCOu+DbC2TnJrDu9XxeBrJGClBkgU1ZBGx/55rmE0fKy5S9qFN9wArsbBPCVlybz2NrLC0qsLdHFfH3USl/zBRVWqNaKqpTZRXx7uVeAPNTmxn4Cymc4JGkdfd6OXYyL7PXMrYGxz6x8alAoRw3PNqmYJqVCD07Cdwrf
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-6.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-6.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-7.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-7.exe /rawdata=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
C:\WINDOWS\tasks\7ak9Wsg6sWE5.job - C:\Users\Tetrev\AppData\Roaming\7ak9Wsg6sWE5.exe --c=ZJBYLbz8BOWS4s3PvxYL14Zjg8nCzmMj6f1javC05FIbfsB5E2/OzI7fTzKs0xrO6L2z7Le6lZXRz4MXTYQMxhrTNuSwE5nOsi4I6r9KYdd6ipTXwu5ZrYh//Sa3jdKjNFS9OEm5AH56+gof+RfE/axovr5lwWXiR4pDgXpAUiA1tfFkX8fPajFCaqlqt1uejDA5a7XJSwkUUM9fJJRds4FDbyJJwHq6+vGqLw5oVG40dAurvkfLLUmJ0cf582qf9AtnBiiM671p22CPl28R3znEuSC8eh66/L3j86NgONpKUsocQ9ORO1+IvjQRxF3YMegtWDytopxBj/6pVudDVg==
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3374175700-459317722-1100794181-1000Core.job - C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3374175700-459317722-1100794181-1000UA.job - C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /c
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-09-29 219304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-17 655480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19 256456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MIF5BA~1\Office15\GROOVEEX.DLL [2015-09-15 2339032]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-09-29 153768]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-17 559624]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-19 194504]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL [2015-09-15 1733240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19 256456]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-19 194504]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-20 1794704]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2015-04-12 39408]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2015-07-10 465920]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2015-02-27 5583120]
"GoogleChromeAutoLaunch_CA27E6F16FB76B984A73550BC44A76D4"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-11-07 811848]
"Dropbox Update"=C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]
"OneDrive"=C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-03 548552]
"Norton Download Manager{NIS2250215-SHPD-FSD51083}"=C:\Users\Public\Downloads\Norton\{NIS2250215-SHPD-FSD51083}\FSDUI_Custom.exe /m /SHOWONECLICK /WIN10_UPGRADE C:\Users\Tetrev\AppData\Local\Temp\{F6FC86C2-27B1-4599-A813-7C3CC341DBE9}\Upgrade.exe []
"cz.seznam.software.autoupdate"=C:\Users\Tetrev\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
""= []
"HPUsageTrackingLEDM"=C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [2009-10-15 30264]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-08 6133520]
"CloneCDTray"=C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
C:\Users\Tetrev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-11-17 21:00:29 ----D---- C:\rsit
2015-11-17 21:00:29 ----D---- C:\Program Files\trend micro
2015-11-17 20:17:09 ----D---- C:\Program Files (x86)\7-Zip
2015-11-17 20:16:26 ----D---- C:\Program Files (x86)\ca373d01-2b6e-4153-b669-af6ed8d41ee2
2015-11-17 20:16:03 ----D---- C:\Program Files (x86)\globalUpdate
2015-11-17 20:15:56 ----D---- C:\Program Files (x86)\CinemaP-1.9cV09.11
2015-11-17 20:15:44 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-17 20:15:24 ----D---- C:\Users\Tetrev\AppData\Roaming\Seznam.cz
2015-11-04 23:35:41 ----D---- C:\Program Files (x86)\SlySoft
2015-11-04 23:34:37 ----D---- C:\Program Files (x86)\Elaborate Bytes
2015-11-01 09:42:13 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-01 09:42:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-01 09:42:10 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-11-01 09:42:09 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-11-01 09:42:07 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-01 09:42:07 ----A---- C:\WINDOWS\system32\esent.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-01 09:42:04 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-11-01 09:42:04 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-11-01 09:42:04 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-01 09:42:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2015-11-01 09:42:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-11-01 09:42:03 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-01 09:42:02 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-11-01 09:42:02 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-11-01 09:42:02 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-01 09:42:02 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-01 09:42:01 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-11-01 09:41:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-11-01 09:41:59 ----A---- C:\WINDOWS\system32\dlnashext.dll
2015-11-01 09:41:58 ----A---- C:\WINDOWS\system32\dssvc.dll
2015-11-01 09:41:58 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2015-11-01 09:41:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2015-11-01 09:41:54 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2015-11-01 09:41:53 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-01 09:41:53 ----A---- C:\WINDOWS\system32\browserbroker.dll
2015-10-27 20:37:48 ----D---- C:\Users\Tetrev\AppData\Roaming\Wargaming.net
2015-10-27 17:20:36 ----D---- C:\Games
======List of files/folders modified in the last 1 month======
2015-11-17 21:00:29 ----RD---- C:\Program Files
2015-11-17 20:58:18 ----D---- C:\WINDOWS\Temp
2015-11-17 20:54:25 ----D---- C:\WINDOWS\System32
2015-11-17 20:44:07 ----D---- C:\WINDOWS\Prefetch
2015-11-17 20:43:53 ----SHD---- C:\WINDOWS\Installer
2015-11-17 20:43:42 ----RSD---- C:\WINDOWS\Fonts
2015-11-17 20:42:33 ----D---- C:\ProgramData\Microsoft Help
2015-11-17 20:42:20 ----SHD---- C:\System Volume Information
2015-11-17 20:42:09 ----HD---- C:\Program Files\WindowsApps
2015-11-17 20:17:09 ----RD---- C:\Program Files (x86)
2015-11-17 20:17:02 ----D---- C:\WINDOWS\Tasks
2015-11-17 20:17:02 ----D---- C:\WINDOWS\system32\Tasks
2015-11-17 20:16:29 ----D---- C:\Program Files (x86)\Advanced IP Scanner
2015-11-17 20:16:02 ----D---- C:\WINDOWS\SysWOW64
2015-11-17 20:10:00 ----D---- C:\WINDOWS\system32\sru
2015-11-17 13:32:57 ----D---- C:\WINDOWS\Microsoft.NET
2015-11-16 21:04:58 ----D---- C:\WINDOWS\AppReadiness
2015-11-15 17:08:35 ----D---- C:\Users\Tetrev\AppData\Roaming\Dropbox
2015-11-15 17:07:32 ----D---- C:\WINDOWS\INF
2015-11-15 17:07:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-15 17:03:22 ----D---- C:\ProgramData\NVIDIA
2015-11-14 17:51:53 ----RSD---- C:\WINDOWS\assembly
2015-11-11 20:34:21 ----D---- C:\WINDOWS\system32\config
2015-11-11 19:33:52 ----D---- C:\Program Files (x86)\Adobe
2015-11-11 19:33:47 ----D---- C:\ProgramData\Adobe
2015-11-11 19:05:44 ----D---- C:\WINDOWS\system32\DriverStore
2015-11-10 21:55:10 ----D---- C:\WINDOWS\CbsTemp
2015-11-10 21:47:46 ----D---- C:\WINDOWS\system32\drivers
2015-11-08 13:13:37 ----D---- C:\WINDOWS\rescache
2015-11-05 22:19:28 ----D---- C:\Windows
2015-11-05 22:16:42 ----D---- C:\Program Files (x86)\TeamViewer
2015-11-05 20:27:25 ----D---- C:\Program Files (x86)\Opera
2015-11-04 23:38:56 ----D---- C:\WINDOWS\WinSxS
2015-11-04 23:37:15 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-11-04 23:37:15 ----D---- C:\WINDOWS\system32\cs-CZ
2015-11-04 23:37:15 ----D---- C:\WINDOWS\system32\appraiser
2015-11-04 23:37:15 ----D---- C:\WINDOWS\AppPatch
2015-11-04 23:35:42 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-11-04 23:34:56 ----HD---- C:\ProgramData
2015-11-01 09:36:50 ----D---- C:\WINDOWS\system32\catroot2
2015-10-18 15:35:12 ----D---- C:\WINDOWS\LiveKernelReports
2015-10-18 02:30:53 ----D---- C:\WINDOWS\system32\Boot
2015-10-18 02:30:52 ----D---- C:\WINDOWS\system32\CodeIntegrity
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-09-24 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-09-24 274808]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-07 644968]
R1 AsIO;AsIO; C:\WINDOWS\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-09-24 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-11-08 1059656]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-11-08 449992]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-16 40816]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-09-24 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-09-24 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-09-24 153744]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 bcbtums;@oem60.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-09-21 173312]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 dtlitescsibus;@oem11.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2015-04-12 30352]
R3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\WINDOWS\System32\drivers\e1i63x64.sys [2015-07-10 482328]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 MEIx64;@oem38.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-18 175104]
R3 NVHDA;@oem58.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-08-18 206152]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-18 11153224]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
R3 teamviewervpn;@oem9.inf,%DeviceDescription%;TeamViewer VPN Adapter; C:\WINDOWS\System32\drivers\teamviewervpn.sys [2015-01-20 35112]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 btwampfl;@oem60.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-09-21 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 mvusbews;@oem18.inf,%mvusbews.SvcDesc%;USB EWS Device; C:\WINDOWS\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-18 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-18 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S4 RsFx0103;RsFx0103 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-09-24 146600]
R2 BcmBtRSupport;@oem60.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-09-21 2251992]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-10-15 136192]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2012-11-08 126856]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2015-03-28 89840]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2013-07-30 204552]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-18 26112]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-07-23 937800]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 157720]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-07-23 410768]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-02-27 1272592]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-11-17 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-11-17 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-04-12 194032]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-18 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]
-----------------EOF-----------------
prosím o pomoc. Mám pocit, že se mi tu něco dostalo, protože když kliknu na něco na jakékoli stránce tak se mi zobrazí průzkum jestli jsem spokojený s internetem nebo s prohlížečem a za odměnu dostanu telefon např. Samsung S6. Přikládám log s RSIT a prozbu o pomoc.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Tetrev at 2015-11-17 21:00:29
Microsoft Windows 10 Home
System drive C: has 644 GB (68%) free of 953 GB
Total RAM: 8130 MB (68% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:00:34, on 17.11.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\GameforgeLive\gfl_client.exe
C:\Program Files (x86)\WinRAR\WinRAR.exe
C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-14.exe
C:\Users\Tetrev\AppData\Local\Temp\Rar$EXa0.916\File__16450_i1746631724_il85.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\WinRAR\WinRAR.exe
C:\Program Files\trend micro\Tetrev.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_CA27E6F16FB76B984A73550BC44A76D4] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Norton Download Manager{NIS2250215-SHPD-FSD51083}] C:\Users\Public\Downloads\Norton\{NIS2250215-SHPD-FSD51083}\FSDUI_Custom.exe /m /SHOWONECLICK /WIN10_UPGRADE "C:\Users\Tetrev\AppData\Local\Temp\{F6FC86C2-27B1-4599-A813-7C3CC341DBE9}\Upgrade.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Tetrev\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem60.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14480 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a4574ea4-c0d9-4225-b51f-9a5df95116d9 -SystemEventPortName:HostProcess-5f7bb325-4a41-4239-bf18-202205b550b2 -IoCancelEventPortName:HostProcess-8d68b0fe-f022-44cf-b183-e7b9a8372e3a -NonStateChangingEventPortName:HostProcess-b19497a7-3ce0-4834-8af8-126d053b3694 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a4661ed9-bacc-42d2-9df7-2bf0b3e2ca07 -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
dashost.exe {9a25e849-2dba-4b5a-84f62a50f5b2c88d}
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\Windows\system32\IProsetMonitor.exe
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Users\Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\GameforgeLive\gfl_client.exe" "/noautopatch" "-start" "SKILL"
"C:\Program Files (x86)\WinRAR\WinRAR.exe" "C:\Users\Tetrev\Downloads\File__16450_i1746621677_il85.ace"
"C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\szndesktop.exe" default restart
"C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskeng.exe {AFC16073-0477-47E0-9765-A92C2B13BC14}
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe" /rawdata=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
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1900.0.1190124944\531143419" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0f02 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1900.2.1197122906\1628966540" --font-cache-shared-handle=2672 /prefetch:673131151
taskeng.exe {83044EB1-CBF6-46AF-A7F3-9B94BFEACF73}
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-6.exe" /rawdata=pCvJb6wd+hDjp3mKnXKOlIz1LL8QFuKRRR/LQoTpCuAZ+xvewOF8+oo55ZAzU6lHIVWS+kULizm24RD2YBaxQW2ic3ezXiCmiUlrRuGE4kEayIH64tG/8EtvC5EzbzLJXeXjxDyUnebDO9enllysu4iYjJ7Og/q9BS3BSWr1dxJlINO/uulCW8dDb9XrOHAs+Zbers0oPdwv9wKygepOe+SUrzmlZoUkkd0RzsGpcHe7/LKcjtjuE+oPS+Vu4ySQ4Dd82sUBLYkoAGagbqznn9V0dXQj2gCmFeOR8lWeJ2mOV5EHXRbLMzO4ISbi84dFEN0iktGyEev9zB9+8LNtTk3o/INWfeqifgzZwVxIUFPvJ0pK1zCk1+6rPjjS9J1E7hhwZhxfhW5Hi63pA3UW6jxZS2zqfne3MzfQSheqOE9/tuomBiB41+8QQd0j3aea7QTwX10Q5+De72i4C/foC8E5XDzZda+3aVfELdieeixaVIti2LDDDyAl7uprUHm6IuC+vuJ3KIh7aJBOzSZnwvx7CF2pClrOzq/3djeJhaYozFqs5TuW+4QBgwgYXsogXKAJbEER8x2Qfj1fndQrJB9AlueNoVw6tOMRJngBImZ2AxlrWhHEAVUAwYiLlUJLC//mUcmemdOVy3NEm9ulIaMKgSd6bhmak+cIHfSnSJc5k6JbhoROeXgOOOKhlmz9B8DPKzzIWJ7Wjooim9usIW6IgNgdwJ8fGUPr1JXAhIsR2DjJjJz/MkrA6EN10JHSYQ4O4Uq8BcwuKAk3snSoyF1A2WDMJmOg/oU24UOGJHNbg4rQW6O0ULJXO2tBRYv9ge0sacu0VQGYHUHIZgIdgGKroKb4a44CKy3kh7ou4VZv5uom93e5Gl0ASS66zGu3E+po6K5EuL7bQLm6oB4TCfL+zLrukqfvkaZwT/gN3bBGnzSnCdw9hH+gljn/Q04TdmlUPAgbIQ018UcAXElSBbXBFPVLV6c5idnpic0q8g2DZxYOJpy+MmVeRN3jxSNdWbnnsSRM7+CmQHZVZdCcV3RMUBhXqfzSyU4abZVWOxnK1uymQOnqJP0Q3Ohg9fmWfsUCpkQVa3F3Duvl4lsUfhjPFM2YLdIM4J8iDZVdrHi3hIom4Edrja1CtgH1dAPdwAPXn5iSZjMkPXycCleogxX0bWqLN5PgZ0P+If9cn6YAt/cJtx1Tpwn5po8vd2ZHGSksFbEL9RBjeBxfa6hQBUYCKk5w91X3dGcp1idW9/154tuQSE0rp+N4Qaj+9pSv3MYXADVPaJ1DykL2tF5NcicMaaXR+gRGdXqSOehAiuMEl0mHByglz8Lb5TsiXUrygO4M4gYlrkRhf6lfOlJ6fFLfjrovIf4QHsBbzaqHnfDxsGZDG/Sbc/Pgl1Oyw8ZmQemhQj3tisdzjnw3fIsZzlq2uAhapQmE/NqpxfkL5V8hZKo/zHkIbD/cgjng/mZBeW3LkXdROl55oRWVSf45JsliABAbqLr2N6ZmXuwIFusG2sb2RnGubmb37qfXuIwgoJACebihxc2+5Vm3YGSZckaKU/9OjibDl7q/H9M37Fe09LcKa13TemlFiwlAYiRGC5CFDfy5m1xj8x0JResbXUsFCoWaGg/EvzpZUnZ4hnC8mRg64Rih4O8/Vb9SdFK4rwIXWHxp0e+ZZFGefYQHv6AXJxMmB+MGB/hWSYN2zdkqEUuQ+cu2Ft5g0j+uVHUeB4GYt1DQ9LrNGc+Jj+V+4A32FmCN6xLk9yIJNhu/yqQBOnQQm1BO9QP9cgyCuMUgqy1WhNEW91KCK79pAY2Kcdevu6Y10LUgM1ZPNz+kiCQiLbtSLhw9la6aAQe9CPVrbpOS/V1ooiVV/oqYvWNgrCTuQ1UWll6EL6Xs7z7aqb6vUdAPCC240Nsb6JjhbtTUstrOI9GVIGQnZlgAI4oci1QBO+wbv29bNUF78yCrBr9cgPsVpJol4qYmCgYbzVZ2p8J76APBFZhLqEokYu6q7I7swz4h+l59ZCBoGNs+7eQzjdHVGhSgkAiaDqCKsVjzOSdmq0WC1Url1H1zDHhVKKWzw/P6ZlbRFojNdwbNWrrRrPcpOS7z2e2myRuzWIOpt5qtK5YDf6n7bOgqb4fHrgRfmilSu+tQzo/0CYcXEUROrB9cQh0ZGMbCHx0FUgbG0VBOTuSVkeyrIpQkSyMvlzqYd9uWjJeLWOOn1JmydhMQCfC+CFvGRT5k77Y+RhtT7r6+KOknkLaKwCKH9Wk8uNAp6BhqkmQS5kuc7ofxSbNohyTIgIY+evHEa5PXPwVQ2Ow124TSmOCxBGeKWs7tyTrC5zYq3EntFzjfVT57+kfcO/W9R6bd99EHiusWrAqkq+ogXwEwtpesibuF500ZgQ==
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-6.exe" /rawdata=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
"C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-14.exe" /rawdata=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
"C:\Users\Tetrev\AppData\Local\Temp\Rar$EXa0.916\File__16450_i1746631724_il85.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1900.20.1443520754\955305996" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\Users\Tetrev\Dropbox\odkaz.txt
"C:\Program Files (x86)\WinRAR\WinRAR.exe" "C:\Users\Tetrev\Downloads\renault_visu_123.zip"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.21.25.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe" -ServerName:App.AppXqagq4n4gvy0tjw576pgh6xr601s1h1mv.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe79_ Global\UsGthrCtrlFltPipeMssGthrPipe79 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\svchost.exe -k GPSvcGroup
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 596 600 608 8192 604
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3374175700-459317722-1100794181-100080_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3374175700-459317722-1100794181-100080 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Users\Tetrev\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-1-6.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-6.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-1-7.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-7.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-10_user.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe /rawdata=hhRqRdCV3L05UNTLgwBOHX86EDEn+ZHCpavHsG4f4AyOjSndgQ0L0KDQPuPCKHvdeYJ/+X1SZ0JnQODD0AbaZ8nniUWGtH3jNcOV5lAQ69RfWAAYQJiz5p7Ma4MACsckNSNwFuc2GmZLX5ucnMCbLZvXry/x7H1Ha6HvES+tUdmOpzzKOp+m24yQLVtjyuwjIZ377W/qNp11klgwotF1X2jm6jBHm6eRMuTTQkyjNmbk1wi1bj7TOLIgfr8+aAFgrGBtdzG3IK21Diuq/QWF3qW0rSRBWfdZZ8U3vYJ7k7zw2FIGG/r1uY131k8EZfGzoWh0x1xIDSDlhPUZRXhOC2QKlrtXAmT0ESwzD9SCT8Lq378B8z/jeT3iZMCmQ51EgnW5k9TuMaDXVKvLZVeW7eB+BUITbMAW2po01HcmYED8JxXYZ7BXcyGI5FxS/XebMaVLb3WqYc1xGhMyYKfnHAM8keC9Wc4nATxIF6Z5iEP0LzbNfVGLAYDRJInjWUvHhHrnPyp8ddMULNVvh0s6+Zy5OOX9cT3J5YFQdJimjw0KTef3TFSZqtzJEEPrXBXdy3AkLWqz22gn0ZFQLuhAm0z1yZNiANdtI3q4KI9fO7ePb93NkuuP/hmjy1YC4GHW0CYdhuWdugarIWrCo1vfs4TSSzTLPAsu9AwU63zvBeUbE2y0rWtfo1OsSWoL0tPQQ8fVAQ/uZpz0lM7RqVOOLEAFaqdJqgfQuKvCHMLt68V2cvahF875mZE/6xqBkAjWwKgHjbGfKzDrn1CYG2S0CIlwBB7ZJmceTqfAbKtlo0xVDMxRvqO/aWoPEow7rtfNQ95gQJG4t9t+4aGagK2WUg==
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-11.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-11.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-13.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-13.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-14.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-14.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-3.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-3.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-5.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-5.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-5_user.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-5.exe /rawdata=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
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-6.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-6.exe /rawdata=pCvJb6wd+hDjp3mKnXKOlIz1LL8QFuKRRR/LQoTpCuAZ+xvewOF8+oo55ZAzU6lHIVWS+kULizm24RD2YBaxQW2ic3ezXiCmiUlrRuGE4kEayIH64tG/8EtvC5EzbzLJXeXjxDyUnebDO9enllysu4iYjJ7Og/q9BS3BSWr1dxJlINO/uulCW8dDb9XrOHAs+Zbers0oPdwv9wKygepOe+SUrzmlZoUkkd0RzsGpcHe7/LKcjtjuE+oPS+Vu4ySQ4Dd82sUBLYkoAGagbqznn9V0dXQj2gCmFeOR8lWeJ2mOV5EHXRbLMzO4ISbi84dFEN0iktGyEev9zB9+8LNtTk3o/INWfeqifgzZwVxIUFPvJ0pK1zCk1+6rPjjS9J1E7hhwZhxfhW5Hi63pA3UW6jxZS2zqfne3MzfQSheqOE9/tuomBiB41+8QQd0j3aea7QTwX10Q5+De72i4C/foC8E5XDzZda+3aVfELdieeixaVIti2LDDDyAl7uprUHm6IuC+vuJ3KIh7aJBOzSZnwvx7CF2pClrOzq/3djeJhaYozFqs5TuW+4QBgwgYXsogXKAJbEER8x2Qfj1fndQrJB9AlueNoVw6tOMRJngBImZ2AxlrWhHEAVUAwYiLlUJLC//mUcmemdOVy3NEm9ulIaMKgSd6bhmak+cIHfSnSJc5k6JbhoROeXgOOOKhlmz9B8DPKzzIWJ7Wjooim9usIW6IgNgdwJ8fGUPr1JXAhIsR2DjJjJz/MkrA6EN10JHSYQ4O4Uq8BcwuKAk3snSoyF1A2WDMJmOg/oU24UOGJHNbg4rQW6O0ULJXO2tBRYv9ge0sacu0VQGYHUHIZgIdgGKroKb4a44CKy3kh7ou4VZv5uom93e5Gl0ASS66zGu3E+po6K5EuL7bQLm6oB4TCfL+zLrukqfvkaZwT/gN3bBGnzSnCdw9hH+gljn/Q04TdmlUPAgbIQ018UcAXElSBbXBFPVLV6c5idnpic0q8g2DZxYOJpy+MmVeRN3jxSNdWbnnsSRM7+CmQHZVZdCcV3RMUBhXqfzSyU4abZVWOxnK1uymQOnqJP0Q3Ohg9fmWfsUCpkQVa3F3Duvl4lsUfhjPFM2YLdIM4J8iDZVdrHi3hIom4Edrja1CtgH1dAPdwAPXn5iSZjMkPXycCleogxX0bWqLN5PgZ0P+If9cn6YAt/cJtx1Tpwn5po8vd2ZHGSksFbEL9RBjeBxfa6hQBUYCKk5w91X3dGcp1idW9/154tuQSE0rp+N4Qaj+9pSv3MYXADVPaJ1DykL2tF5NcicMaaXR+gRGdXqSOehAiuMEl0mHByglz8Lb5TsiXUrygO4M4gYlrkRhf6lfOlJ6fFLfjrovIf4QHsBbzaqHnfDxsGZDG/Sbc/Pgl1Oyw8ZmQemhQj3tisdzjnw3fIsZzlq2uAhapQmE/NqpxfkL5V8hZKo/zHkIbD/cgjng/mZBeW3LkXdROl55oRWVSf45JsliABAbqLr2N6ZmXuwIFusG2sb2RnGubmb37qfXuIwgoJACebihxc2+5Vm3YGSZckaKU/9OjibDl7q/H9M37Fe09LcKa13TemlFiwlAYiRGC5CFDfy5m1xj8x0JResbXUsFCoWaGg/EvzpZUnZ4hnC8mRg64Rih4O8/Vb9SdFK4rwIXWHxp0e+ZZFGefYQHv6AXJxMmB+MGB/hWSYN2zdkqEUuQ+cu2Ft5g0j+uVHUeB4GYt1DQ9LrNGc+Jj+V+4A32FmCN6xLk9yIJNhu/yqQBOnQQm1BO9QP9cgyCuMUgqy1WhNEW91KCK79pAY2Kcdevu6Y10LUgM1ZPNz+kiCQiLbtSLhw9la6aAQe9CPVrbpOS/V1ooiVV/oqYvWNgrCTuQ1UWll6EL6Xs7z7aqb6vUdAPCC240Nsb6JjhbtTUstrOI9GVIGQnZlgAI4oci1QBO+wbv29bNUF78yCrBr9cgPsVpJol4qYmCgYbzVZ2p8J76APBFZhLqEokYu6q7I7swz4h+l59ZCBoGNs+7eQzjdHVGhSgkAiaDqCKsVjzNaNbVleWro96YsjNWZ8mNluHN8MKsJ6LtTEyW9W9cl5lMVs9t2jJO9m/IYtYrUf7OFe4y9uEntB0Gfk2Mc6HQkcpIPR+u4xgK0NyNbO/PJ3QfXJdIkO3Qk4l2nzui3eERq0TqzXin6YP1O4ikzMqg4KJ76mBPmoaXV3ov0WV0tesDv893Hw1bFDNcs2cCXMqlvLyIj5BgczJv6S/atEpPOQjgECGLYJoxANWgeMelx9r5DKuLKiKBdYlVEKLMuREnH98TG+JV8P5JxGvomGXJzF6yGvChV1LLnIB0RXa5s99GuNVzObq6AbNdJ3uorwmDQWo1LOlekb3SLOdhdcWpGaPREgY370bTl69H7lM9/Z7UBQzS7iIIzuanCq9JB0F+xKmx17ZEv/FSKhOjo7w/N05JPeS07sXOmajr5UAB+odFYTdzCu7QodSIc/o44E1v2YmTZ9M/mEe2lZv2NM5B4efQFpFBX2YhIuERQU+LvMcnT1g3V4JhVb112yiFTuI
C:\WINDOWS\tasks\40db1533-f551-4998-8bca-934da85073e3-7.job - C:\Program Files (x86)\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-7.exe /rawdata=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
C:\WINDOWS\tasks\7ak9Wsg6sWE5.job - C:\Users\Tetrev\AppData\Roaming\7ak9Wsg6sWE5.exe --c=ZJBYLbz8BOWS4s3PvxYL14Zjg8nCzmMj6f1javC05FIbfsB5E2/OzI7fTzKs0xrO6L2z7Le6lZXRz4MXTYQMxhrTNuSwE5nOsi4I6r9KYdd6ipTXwu5ZrYh//Sa3jdKjNFS9OEm5AH56+gof+RfE/axovr5lwWXiR4pDgXpAUiA1tfFkX8fPajFCaqlqt1uejDA5a7XJSwkUUM9fJJRds4FDbyJJwHq6+vGqLw5oVG40dAurvkfLLUmJ0cf582qf9AtnBiiM671p22CPl28R3znEuSC8eh66/L3j86NgONpKUsocQ9ORO1+IvjQRxF3YMegtWDytopxBj/6pVudDVg==
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3374175700-459317722-1100794181-1000Core.job - C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3374175700-459317722-1100794181-1000UA.job - C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /c
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-09-29 219304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-17 655480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19 256456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MIF5BA~1\Office15\GROOVEEX.DLL [2015-09-15 2339032]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-09-29 153768]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-17 559624]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-19 194504]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL [2015-09-15 1733240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19 256456]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-19 194504]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-20 1794704]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2015-04-12 39408]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2015-07-10 465920]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2015-02-27 5583120]
"GoogleChromeAutoLaunch_CA27E6F16FB76B984A73550BC44A76D4"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-11-07 811848]
"Dropbox Update"=C:\Users\Tetrev\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]
"OneDrive"=C:\Users\Tetrev\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-03 548552]
"Norton Download Manager{NIS2250215-SHPD-FSD51083}"=C:\Users\Public\Downloads\Norton\{NIS2250215-SHPD-FSD51083}\FSDUI_Custom.exe /m /SHOWONECLICK /WIN10_UPGRADE C:\Users\Tetrev\AppData\Local\Temp\{F6FC86C2-27B1-4599-A813-7C3CC341DBE9}\Upgrade.exe []
"cz.seznam.software.autoupdate"=C:\Users\Tetrev\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Tetrev\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
""= []
"HPUsageTrackingLEDM"=C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [2009-10-15 30264]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-08 6133520]
"CloneCDTray"=C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
C:\Users\Tetrev\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Tetrev\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-11-17 21:00:29 ----D---- C:\rsit
2015-11-17 21:00:29 ----D---- C:\Program Files\trend micro
2015-11-17 20:17:09 ----D---- C:\Program Files (x86)\7-Zip
2015-11-17 20:16:26 ----D---- C:\Program Files (x86)\ca373d01-2b6e-4153-b669-af6ed8d41ee2
2015-11-17 20:16:03 ----D---- C:\Program Files (x86)\globalUpdate
2015-11-17 20:15:56 ----D---- C:\Program Files (x86)\CinemaP-1.9cV09.11
2015-11-17 20:15:44 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-17 20:15:24 ----D---- C:\Users\Tetrev\AppData\Roaming\Seznam.cz
2015-11-04 23:35:41 ----D---- C:\Program Files (x86)\SlySoft
2015-11-04 23:34:37 ----D---- C:\Program Files (x86)\Elaborate Bytes
2015-11-01 09:42:13 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-01 09:42:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-01 09:42:10 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-11-01 09:42:09 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-11-01 09:42:07 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-01 09:42:07 ----A---- C:\WINDOWS\system32\esent.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-01 09:42:06 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-01 09:42:05 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-01 09:42:04 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-11-01 09:42:04 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-11-01 09:42:04 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-01 09:42:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2015-11-01 09:42:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-11-01 09:42:03 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-01 09:42:02 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-11-01 09:42:02 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-11-01 09:42:02 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-01 09:42:02 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-01 09:42:01 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-11-01 09:41:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-11-01 09:41:59 ----A---- C:\WINDOWS\system32\dlnashext.dll
2015-11-01 09:41:58 ----A---- C:\WINDOWS\system32\dssvc.dll
2015-11-01 09:41:58 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2015-11-01 09:41:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2015-11-01 09:41:54 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2015-11-01 09:41:53 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-01 09:41:53 ----A---- C:\WINDOWS\system32\browserbroker.dll
2015-10-27 20:37:48 ----D---- C:\Users\Tetrev\AppData\Roaming\Wargaming.net
2015-10-27 17:20:36 ----D---- C:\Games
======List of files/folders modified in the last 1 month======
2015-11-17 21:00:29 ----RD---- C:\Program Files
2015-11-17 20:58:18 ----D---- C:\WINDOWS\Temp
2015-11-17 20:54:25 ----D---- C:\WINDOWS\System32
2015-11-17 20:44:07 ----D---- C:\WINDOWS\Prefetch
2015-11-17 20:43:53 ----SHD---- C:\WINDOWS\Installer
2015-11-17 20:43:42 ----RSD---- C:\WINDOWS\Fonts
2015-11-17 20:42:33 ----D---- C:\ProgramData\Microsoft Help
2015-11-17 20:42:20 ----SHD---- C:\System Volume Information
2015-11-17 20:42:09 ----HD---- C:\Program Files\WindowsApps
2015-11-17 20:17:09 ----RD---- C:\Program Files (x86)
2015-11-17 20:17:02 ----D---- C:\WINDOWS\Tasks
2015-11-17 20:17:02 ----D---- C:\WINDOWS\system32\Tasks
2015-11-17 20:16:29 ----D---- C:\Program Files (x86)\Advanced IP Scanner
2015-11-17 20:16:02 ----D---- C:\WINDOWS\SysWOW64
2015-11-17 20:10:00 ----D---- C:\WINDOWS\system32\sru
2015-11-17 13:32:57 ----D---- C:\WINDOWS\Microsoft.NET
2015-11-16 21:04:58 ----D---- C:\WINDOWS\AppReadiness
2015-11-15 17:08:35 ----D---- C:\Users\Tetrev\AppData\Roaming\Dropbox
2015-11-15 17:07:32 ----D---- C:\WINDOWS\INF
2015-11-15 17:07:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-15 17:03:22 ----D---- C:\ProgramData\NVIDIA
2015-11-14 17:51:53 ----RSD---- C:\WINDOWS\assembly
2015-11-11 20:34:21 ----D---- C:\WINDOWS\system32\config
2015-11-11 19:33:52 ----D---- C:\Program Files (x86)\Adobe
2015-11-11 19:33:47 ----D---- C:\ProgramData\Adobe
2015-11-11 19:05:44 ----D---- C:\WINDOWS\system32\DriverStore
2015-11-10 21:55:10 ----D---- C:\WINDOWS\CbsTemp
2015-11-10 21:47:46 ----D---- C:\WINDOWS\system32\drivers
2015-11-08 13:13:37 ----D---- C:\WINDOWS\rescache
2015-11-05 22:19:28 ----D---- C:\Windows
2015-11-05 22:16:42 ----D---- C:\Program Files (x86)\TeamViewer
2015-11-05 20:27:25 ----D---- C:\Program Files (x86)\Opera
2015-11-04 23:38:56 ----D---- C:\WINDOWS\WinSxS
2015-11-04 23:37:15 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-11-04 23:37:15 ----D---- C:\WINDOWS\system32\cs-CZ
2015-11-04 23:37:15 ----D---- C:\WINDOWS\system32\appraiser
2015-11-04 23:37:15 ----D---- C:\WINDOWS\AppPatch
2015-11-04 23:35:42 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-11-04 23:34:56 ----HD---- C:\ProgramData
2015-11-01 09:36:50 ----D---- C:\WINDOWS\system32\catroot2
2015-10-18 15:35:12 ----D---- C:\WINDOWS\LiveKernelReports
2015-10-18 02:30:53 ----D---- C:\WINDOWS\system32\Boot
2015-10-18 02:30:52 ----D---- C:\WINDOWS\system32\CodeIntegrity
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-09-24 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-09-24 274808]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-07 644968]
R1 AsIO;AsIO; C:\WINDOWS\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-09-24 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-11-08 1059656]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-11-08 449992]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-16 40816]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-09-24 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-09-24 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-09-24 153744]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 bcbtums;@oem60.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-09-21 173312]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 dtlitescsibus;@oem11.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2015-04-12 30352]
R3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\WINDOWS\System32\drivers\e1i63x64.sys [2015-07-10 482328]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 MEIx64;@oem38.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-18 175104]
R3 NVHDA;@oem58.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-08-18 206152]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-18 11153224]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
R3 teamviewervpn;@oem9.inf,%DeviceDescription%;TeamViewer VPN Adapter; C:\WINDOWS\System32\drivers\teamviewervpn.sys [2015-01-20 35112]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 btwampfl;@oem60.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-09-21 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 mvusbews;@oem18.inf,%mvusbews.SvcDesc%;USB EWS Device; C:\WINDOWS\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-18 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-18 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S4 RsFx0103;RsFx0103 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-09-24 146600]
R2 BcmBtRSupport;@oem60.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-09-21 2251992]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-10-15 136192]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2012-11-08 126856]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2015-03-28 89840]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2013-07-30 204552]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-18 26112]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-07-23 937800]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 157720]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-07-23 410768]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-02-27 1272592]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-11-17 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-11-17 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-04-12 194032]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-18 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]
-----------------EOF-----------------
