Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zničeho nic se pc velmi zpomalilo a seká se

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Zničeho nic se pc velmi zpomalilo a seká se

#1 Příspěvek od jindra.paryzek »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jindra at 2015-12-19 10:40:30
Microsoft Windows 10 Home
System drive C: has 889 GB (93%) free of 953 GB
Total RAM: 3977 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:40:38, on 19. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16603)
Boot mode: Normal

Running processes:
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jindra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9651 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel

dashost.exe {1f57ccc6-f935-4930-ab5e4b7823bbba81}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
atieclxx
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4P1
"C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\System32\InstallAgent.exe -Embedding
"C:\Program Files\Windows Defender\MSASCui.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\WINDOWS\System32\NetworkUXBroker.exe" -ServerName:Windows.Networking.UX
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
taskhostw.exe
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:452
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:440
\??\C:\WINDOWS\system32\conhost.exe 0x4
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehavior
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey B7F8E5D3-3641-E61D-927E-E1E7F90A1347 -Reinvoke
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
C:\WINDOWS\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:19
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\msiexec.exe /V
C:\WINDOWS\system32\SearchIndexer.exe /Embedding

C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" install "System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /NoDependencies /noroot /version:v4.0.30319 /LegacyServiceBehavior
"C:\WINDOWS\system32\wuauclt.exe" /RunHandlerComServer
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 624 628 636 8192 632
"C:\Users\Jindra\Desktop\RSITx64.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f0 -InterruptEvent 0 -NGENProcess 3d0 -Pipe 344 -Comment "NGen Worker Process"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\9989mys1.default-1436779391318

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\9989mys1.default-1436779391318\searchplugins\
google-default.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-11-15 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2013-11-02 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2013-11-15 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 1727176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-30 36352]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-10-20 405416]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-23 2779376]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-09-11 8512760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-09-11 1411320]
"WavesSvc"=C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [2015-05-21 611248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-06-22 767176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-19 10:40:30 ----D---- C:\rsit
2015-12-17 23:14:01 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-12-17 23:10:05 ----D---- C:\ProgramData\Microsoft Toolkit
2015-12-17 22:50:17 ----D---- C:\Program Files\Microsoft.NET
2015-12-17 22:42:24 ----D---- C:\Program Files\Common Files\DESIGNER
2015-12-17 22:42:06 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2015-12-17 22:41:01 ----D---- C:\WINDOWS\PCHEALTH
2015-12-17 22:41:01 ----D---- C:\Program Files\Microsoft SQL Server
2015-12-17 22:39:05 ----D---- C:\Program Files\Microsoft Analysis Services
2015-12-17 22:39:05 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2015-12-17 22:38:55 ----D---- C:\Program Files\Microsoft Office
2015-12-17 22:38:54 ----D---- C:\ProgramData\Microsoft Help
2015-12-17 22:38:46 ----RHD---- C:\MSOCache
2015-12-16 09:53:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-12 11:54:13 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-12-12 11:54:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-12 11:54:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-12 11:54:06 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-12-12 11:54:04 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-12 11:54:03 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-12 11:54:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-12 11:54:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-12 11:54:00 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-12 11:54:00 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-12 11:53:59 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-12 11:53:57 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-12-12 11:53:57 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-12 11:53:54 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-12 11:53:54 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\system32\Magnify.exe
2015-12-12 11:53:50 ----A---- C:\WINDOWS\SYSWOW64\Magnify.exe
2015-12-12 11:53:49 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-12-12 11:53:49 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-12-12 11:53:48 ----A---- C:\WINDOWS\system32\ninput.dll
2015-12-12 11:53:48 ----A---- C:\WINDOWS\system32\duser.dll
2015-12-12 11:53:47 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2015-12-12 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-12-12 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-12 11:53:44 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-12 11:53:43 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-12 11:53:42 ----A---- C:\WINDOWS\system32\dot3mm.dll
2015-12-12 11:53:42 ----A---- C:\WINDOWS\system32\DAMM.dll
2015-12-12 11:53:42 ----A---- C:\WINDOWS\explorer.exe
2015-12-12 11:53:41 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-12-12 11:53:40 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-12 11:53:40 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\DAMediaManager.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\NetworkUXBroker.exe
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-12-12 11:53:36 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-12 11:53:36 ----A---- C:\WINDOWS\system32\EthernetMediaManager.dll
2015-12-12 11:53:35 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2015-12-12 11:53:34 ----A---- C:\WINDOWS\system32\userenv.dll
2015-12-12 11:53:34 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2015-12-12 11:53:33 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\KBDAZE.DLL
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\drivers\gpuenergydrv.sys
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\kbdgeoqw.dll
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZST.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZEL.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZE.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\system32\KBDAZST.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-12 11:53:29 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2015-12-12 11:53:29 ----A---- C:\WINDOWS\system32\profext.dll
2015-12-12 11:53:29 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-12-12 11:53:25 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-12 11:53:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-12 11:29:45 ----ASH---- C:\swapfile.sys
2015-12-12 11:29:45 ----ASH---- C:\pagefile.sys
2015-12-12 11:29:40 ----ASH---- C:\hiberfil.sys
2015-12-12 11:19:04 ----D---- C:\$SysReset
2015-12-07 19:38:11 ----D---- C:\temp
2015-12-07 15:58:06 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2015-12-19 10:40:38 ----SHD---- C:\WINDOWS\Installer
2015-12-19 10:40:38 ----D---- C:\WINDOWS\Prefetch
2015-12-19 10:40:35 ----D---- C:\Program Files\trend micro
2015-12-19 10:40:12 ----RD---- C:\WINDOWS\assembly
2015-12-19 10:39:57 ----D---- C:\WINDOWS\Temp
2015-12-19 10:38:23 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-19 10:37:14 ----D---- C:\WINDOWS\System32
2015-12-19 10:35:16 ----A---- C:\WINDOWS\win.ini
2015-12-19 10:34:22 ----SHD---- C:\System Volume Information
2015-12-19 10:31:07 ----HD---- C:\Program Files\WindowsApps
2015-12-19 10:31:01 ----D---- C:\WINDOWS\AppReadiness
2015-12-19 10:25:42 ----D---- C:\WINDOWS\system32\sru
2015-12-19 10:11:54 ----D---- C:\WINDOWS
2015-12-18 12:29:00 ----D---- C:\WINDOWS\system32\config
2015-12-18 11:01:20 ----SD---- C:\Users\Jindra\AppData\Roaming\Microsoft
2015-12-18 09:54:45 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-18 01:39:40 ----D---- C:\WINDOWS\INF
2015-12-17 23:51:52 ----D---- C:\WINDOWS\system32\Tasks
2015-12-17 23:28:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-17 23:14:01 ----RD---- C:\Program Files (x86)
2015-12-17 23:13:08 ----D---- C:\WINDOWS\ShellNew
2015-12-17 23:12:50 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-17 23:10:05 ----HD---- C:\ProgramData
2015-12-17 22:50:17 ----RD---- C:\Program Files
2015-12-17 22:50:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-17 22:43:17 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-17 22:42:43 ----RSD---- C:\WINDOWS\Fonts
2015-12-17 22:42:24 ----D---- C:\Program Files\Common Files
2015-12-17 22:41:50 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-17 22:40:15 ----D---- C:\Program Files\Common Files\System
2015-12-17 22:38:57 ----D---- C:\Program Files (x86)\Microsoft Office
2015-12-17 22:31:35 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-17 22:27:48 ----D---- C:\WINDOWS\SysWOW64
2015-12-17 22:27:48 ----D---- C:\Program Files (x86)\Common Files
2015-12-17 14:39:35 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-14 11:15:44 ----A---- C:\WINDOWS\BRRBCOM.INI
2015-12-12 13:20:49 ----D---- C:\WINDOWS\rescache
2015-12-12 13:01:19 ----D---- C:\WINDOWS\WinSxS
2015-12-12 12:12:34 ----D---- C:\WINDOWS\system32\drivers
2015-12-12 12:10:36 ----D---- C:\WINDOWS\system32\oobe
2015-12-12 12:10:35 ----D---- C:\Program Files\Internet Explorer
2015-12-12 12:10:35 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-12 12:00:53 ----D---- C:\WINDOWS\CbsTemp
2015-12-12 11:45:21 ----D---- C:\WINDOWS\system32\catroot2
2015-12-12 11:31:10 ----HD---- C:\$WINDOWS.~BT
2015-12-12 11:22:04 ----SD---- C:\ProgramData\Microsoft
2015-12-12 11:22:04 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-12 11:22:02 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-12 11:22:01 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-12-12 11:22:01 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\spool
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\NDF
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\InputMethod
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\en-US
2015-12-12 11:21:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-12 11:21:59 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-12 11:21:59 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-12 11:21:58 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-12 11:21:58 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-12 11:21:53 ----D---- C:\WINDOWS\InputMethod
2015-12-12 11:21:53 ----D---- C:\WINDOWS\Help
2015-12-12 11:21:52 ----RD---- C:\Users
2015-12-12 11:21:52 ----D---- C:\ProgramData\USOPrivate
2015-12-12 11:21:49 ----D---- C:\Program Files\Intel
2015-12-12 11:21:49 ----D---- C:\Program Files\AMD
2015-12-12 11:21:47 ----D---- C:\WINDOWS\Tasks
2015-12-12 11:21:47 ----D---- C:\WINDOWS\system32\Recovery
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-09 01:18:29 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-09 01:18:29 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-08 20:38:40 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-07 16:25:01 ----D---- C:\WINDOWS\registration
2015-12-07 16:20:32 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-12-07 15:38:22 ----DC---- C:\WINDOWS\Panther
2015-12-04 01:09:19 ----D---- C:\WINDOWS\debug
2015-12-01 01:32:22 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-11-23 01:07:06 ----D---- C:\WINDOWS\ModemLogs
2015-11-20 00:00:41 ----D---- C:\WINDOWS\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem12.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2014-07-21 36096]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-30 644968]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-12-01 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-06-23 21612032]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-06-23 663552]
R3 athr;@oem48.inf,%ATHR.Service.DispName%;Dell Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw10x.sys [2015-09-11 4318760]
R3 BTATH_BUS;@oem25.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2013-09-04 34384]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-03-09 599240]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 DellRbtn;@oem5.inf,%DellRbtn%;Airplane Mode Switch; C:\WINDOWS\System32\drivers\DellRbtn.sys [2013-01-24 10752]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-20 6415272]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-09-11 4518136]
R3 iwdbus;@oem3.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-03-04 30512]
R3 MEIx64;@oem13.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-12-11 100312]
R3 rt640x64;@oem53.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-09-11 896744]
R3 RTSUER;@oem39.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-08-23 34544]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 12800]
R3 SynTP;@oem7.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-08-23 529648]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 DFX11_1;DFX Audio Enhancer 11.1; C:\WINDOWS\system32\drivers\dfx11_1x64.sys [2012-12-13 28008]
S3 dg_ssudbus;@oem56.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-10-10 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-03-04 42288]
S3 IntcDAud;@oem61.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-08 473864]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MiraDispKmd;@miradisp.inf,%MiraDispKmd%;Kernel Mode Miracast Filter Driver; C:\WINDOWS\System32\drivers\MiraDispKmd.sys [2015-07-10 23552]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 nmwcd;@oem29.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem4.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 RTL8168;@oem17.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2013-06-21 816344]
S3 ssudmdm;@oem59.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-10-10 206080]
S3 ssudserd;@oem58.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2015-10-10 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-06-23 245760]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-30 15720]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-20 359848]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-11 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-12-11 390616]
R2 OneSyncSvc_Session2;Hostitel synchronizace_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-09-11 312056]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session23;Hostitel synchronizace_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-13 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-10-26 282112]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-20 291752]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-16 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session2;Data kontaktů_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session23;Data kontaktů_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session2;Úložiště uživatelských dat_Session2; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session23;Úložiště uživatelských dat_Session23; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#3 Příspěvek od jindra.paryzek »

# AdwCleaner v5.013 - Logfile created 14/10/2015 at 20:15:04
# Updated 09/10/2015 by Xplode
# Database : 2015-10-13.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Jindra - I5CORE
# Running from : C:\Users\Jindra\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Registry Dr
[-] Folder Deleted : C:\Users\Jindra\AppData\Local\RegistryDr
[-] Folder Deleted : C:\Users\Jindra\Documents\RegistryDr

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : RegistryDr_Popup
[-] Task Deleted : RegistryDr_Start

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{78F6156C-0E9D-4756-8AB7-4B7C3DC05E75}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Key Deleted : HKCU\Software\RegistryDrLanguage
[-] Key Deleted : HKCU\Software\Reg\Clean
[-] Key Deleted : HKLM\SOFTWARE\Reg\Clean
[!] Key Not Deleted : [x64] HKCU\Software\RegistryDrLanguage
[!] Key Not Deleted : [x64] HKCU\Software\Reg\Clean

***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [1582 bytes] ##########
# AdwCleaner v5.025 - Logfile created 19/12/2015 at 11:36:41
# Updated 13/12/2015 by Xplode
# Database : 2015-12-13.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Jindra - I5CORE
# Running from : C:\Users\Jindra\Desktop\adwcleaner_5.025.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Jindra\AppData\Local\RegistryDr

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : RegistryDr_Popup
[-] Task Deleted : RegistryDr_Start

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6575033D-9E87-4BD2-B7E9-75487367CBC4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{78F6156C-0E9D-4756-8AB7-4B7C3DC05E75}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6575033D-9E87-4BD2-B7E9-75487367CBC4}
[-] Key Deleted : HKCU\Software\RegistryDrLanguage
[-] Key Deleted : HKCU\Software\Reg\Clean
[-] Key Deleted : HKLM\SOFTWARE\Reg\Clean

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [3245 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#5 Příspěvek od jindra.paryzek »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jindra at 2015-12-19 12:10:49
Microsoft Windows 10 Home
System drive C: has 888 GB (93%) free of 953 GB
Total RAM: 3977 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:10:52, on 19. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16603)
Boot mode: Normal

Running processes:
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Jindra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9569 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\atiesrxx.exe
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
atieclxx
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel

dashost.exe {bffc508e-ffb5-4773-b910edc77381ab34}
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE

C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
igfxEM.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
igfxHK.exe
igfxTray.exe
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 6A74107F-7E52-E181-5575-63E04CA41F03 -Reinvoke
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4P1
"C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\InstallAgent.exe -Embedding

C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jindra\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\9989mys1.default-1436779391318

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\9989mys1.default-1436779391318\searchplugins\
google-default.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2013-11-02 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 1727176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-30 36352]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-10-20 405416]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-23 2779376]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-09-11 8512760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-09-11 1411320]
"WavesSvc"=C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [2015-05-21 611248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-06-22 767176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-19 10:40:30 ----D---- C:\rsit
2015-12-19 10:29:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-17 23:14:01 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-12-17 23:10:05 ----D---- C:\ProgramData\Microsoft Toolkit
2015-12-17 22:50:17 ----D---- C:\Program Files\Microsoft.NET
2015-12-17 22:42:24 ----D---- C:\Program Files\Common Files\DESIGNER
2015-12-17 22:42:06 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2015-12-17 22:41:01 ----D---- C:\WINDOWS\PCHEALTH
2015-12-17 22:41:01 ----D---- C:\Program Files\Microsoft SQL Server
2015-12-17 22:39:05 ----D---- C:\Program Files\Microsoft Analysis Services
2015-12-17 22:39:05 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2015-12-17 22:38:55 ----D---- C:\Program Files\Microsoft Office
2015-12-17 22:38:54 ----D---- C:\ProgramData\Microsoft Help
2015-12-17 22:38:46 ----RHD---- C:\MSOCache
2015-12-12 11:54:13 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-12-12 11:54:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-12 11:54:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-12 11:54:06 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-12-12 11:54:04 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-12 11:54:03 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-12 11:54:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-12 11:54:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-12 11:54:00 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-12 11:54:00 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-12 11:53:59 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-12 11:53:57 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-12-12 11:53:57 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-12 11:53:54 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-12 11:53:54 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\system32\Magnify.exe
2015-12-12 11:53:50 ----A---- C:\WINDOWS\SYSWOW64\Magnify.exe
2015-12-12 11:53:49 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-12-12 11:53:49 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-12-12 11:53:48 ----A---- C:\WINDOWS\system32\ninput.dll
2015-12-12 11:53:48 ----A---- C:\WINDOWS\system32\duser.dll
2015-12-12 11:53:47 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2015-12-12 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-12-12 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-12 11:53:44 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-12 11:53:43 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-12 11:53:42 ----A---- C:\WINDOWS\system32\dot3mm.dll
2015-12-12 11:53:42 ----A---- C:\WINDOWS\system32\DAMM.dll
2015-12-12 11:53:42 ----A---- C:\WINDOWS\explorer.exe
2015-12-12 11:53:41 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-12-12 11:53:40 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-12 11:53:40 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\DAMediaManager.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\NetworkUXBroker.exe
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-12-12 11:53:36 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-12 11:53:36 ----A---- C:\WINDOWS\system32\EthernetMediaManager.dll
2015-12-12 11:53:35 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2015-12-12 11:53:34 ----A---- C:\WINDOWS\system32\userenv.dll
2015-12-12 11:53:34 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2015-12-12 11:53:33 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\KBDAZE.DLL
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\drivers\gpuenergydrv.sys
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\kbdgeoqw.dll
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZST.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZEL.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZE.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\system32\KBDAZST.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-12 11:53:29 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2015-12-12 11:53:29 ----A---- C:\WINDOWS\system32\profext.dll
2015-12-12 11:53:29 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-12-12 11:53:25 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-12 11:53:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-12 11:29:45 ----ASH---- C:\swapfile.sys
2015-12-12 11:29:45 ----ASH---- C:\pagefile.sys
2015-12-12 11:29:40 ----ASH---- C:\hiberfil.sys
2015-12-12 11:19:04 ----D---- C:\$SysReset
2015-12-07 19:38:11 ----D---- C:\temp
2015-12-07 15:58:06 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2015-12-19 12:10:51 ----D---- C:\Program Files\trend micro
2015-12-19 12:04:37 ----D---- C:\WINDOWS\Temp
2015-12-19 12:02:32 ----D---- C:\WINDOWS\System32
2015-12-19 12:02:09 ----D---- C:\WINDOWS\Prefetch
2015-12-19 11:59:32 ----D---- C:\WINDOWS\AppReadiness
2015-12-19 11:43:13 ----D---- C:\WINDOWS\INF
2015-12-19 11:43:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-19 11:39:34 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-19 11:39:32 ----RD---- C:\Program Files (x86)
2015-12-19 11:39:09 ----D---- C:\WINDOWS
2015-12-19 11:38:34 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-19 11:37:00 ----D---- C:\WINDOWS\system32\sru
2015-12-19 11:36:43 ----D---- C:\WINDOWS\system32\Tasks
2015-12-19 10:57:13 ----SHD---- C:\WINDOWS\Installer
2015-12-19 10:53:52 ----RD---- C:\WINDOWS\assembly
2015-12-19 10:50:40 ----A---- C:\WINDOWS\win.ini
2015-12-19 10:43:42 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-19 10:42:56 ----RSD---- C:\WINDOWS\Fonts
2015-12-19 10:34:22 ----SHD---- C:\System Volume Information
2015-12-19 10:31:07 ----HD---- C:\Program Files\WindowsApps
2015-12-18 12:29:00 ----D---- C:\WINDOWS\system32\config
2015-12-18 11:01:20 ----SD---- C:\Users\Jindra\AppData\Roaming\Microsoft
2015-12-17 23:13:08 ----D---- C:\WINDOWS\ShellNew
2015-12-17 23:12:50 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-17 23:10:05 ----HD---- C:\ProgramData
2015-12-17 22:50:17 ----RD---- C:\Program Files
2015-12-17 22:50:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-17 22:43:17 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-17 22:42:24 ----D---- C:\Program Files\Common Files
2015-12-17 22:41:50 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-17 22:40:15 ----D---- C:\Program Files\Common Files\System
2015-12-17 22:38:57 ----D---- C:\Program Files (x86)\Microsoft Office
2015-12-17 22:27:48 ----D---- C:\WINDOWS\SysWOW64
2015-12-17 22:27:48 ----D---- C:\Program Files (x86)\Common Files
2015-12-17 14:39:35 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-14 11:15:44 ----A---- C:\WINDOWS\BRRBCOM.INI
2015-12-12 13:20:49 ----D---- C:\WINDOWS\rescache
2015-12-12 13:01:19 ----D---- C:\WINDOWS\WinSxS
2015-12-12 12:12:34 ----D---- C:\WINDOWS\system32\drivers
2015-12-12 12:10:36 ----D---- C:\WINDOWS\system32\oobe
2015-12-12 12:10:35 ----D---- C:\Program Files\Internet Explorer
2015-12-12 12:10:35 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-12 12:00:53 ----D---- C:\WINDOWS\CbsTemp
2015-12-12 11:45:21 ----D---- C:\WINDOWS\system32\catroot2
2015-12-12 11:31:10 ----HD---- C:\$WINDOWS.~BT
2015-12-12 11:22:04 ----SD---- C:\ProgramData\Microsoft
2015-12-12 11:22:04 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-12 11:22:02 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-12 11:22:01 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-12-12 11:22:01 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\spool
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\NDF
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\InputMethod
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\en-US
2015-12-12 11:21:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-12 11:21:59 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-12 11:21:59 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-12 11:21:58 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-12 11:21:58 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-12 11:21:53 ----D---- C:\WINDOWS\InputMethod
2015-12-12 11:21:53 ----D---- C:\WINDOWS\Help
2015-12-12 11:21:52 ----RD---- C:\Users
2015-12-12 11:21:52 ----D---- C:\ProgramData\USOPrivate
2015-12-12 11:21:49 ----D---- C:\Program Files\Intel
2015-12-12 11:21:49 ----D---- C:\Program Files\AMD
2015-12-12 11:21:47 ----D---- C:\WINDOWS\Tasks
2015-12-12 11:21:47 ----D---- C:\WINDOWS\system32\Recovery
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-09 01:18:29 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-09 01:18:29 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-08 20:38:40 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-07 16:25:01 ----D---- C:\WINDOWS\registration
2015-12-07 16:20:32 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-12-07 15:38:22 ----DC---- C:\WINDOWS\Panther
2015-12-04 01:09:19 ----D---- C:\WINDOWS\debug
2015-12-01 01:32:22 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-11-23 01:07:06 ----D---- C:\WINDOWS\ModemLogs
2015-11-20 00:00:41 ----D---- C:\WINDOWS\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem12.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2014-07-21 36096]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-30 644968]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-12-01 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-06-23 21612032]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-06-23 663552]
R3 athr;@oem48.inf,%ATHR.Service.DispName%;Dell Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw10x.sys [2015-09-11 4318760]
R3 BTATH_BUS;@oem25.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2013-09-04 34384]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-03-09 599240]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 DellRbtn;@oem5.inf,%DellRbtn%;Airplane Mode Switch; C:\WINDOWS\System32\drivers\DellRbtn.sys [2013-01-24 10752]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-20 6415272]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-09-11 4518136]
R3 iwdbus;@oem3.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-03-04 30512]
R3 MEIx64;@oem13.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-12-11 100312]
R3 rt640x64;@oem53.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-09-11 896744]
R3 RTSUER;@oem39.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-08-23 34544]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 12800]
R3 SynTP;@oem7.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-08-23 529648]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 DFX11_1;DFX Audio Enhancer 11.1; C:\WINDOWS\system32\drivers\dfx11_1x64.sys [2012-12-13 28008]
S3 dg_ssudbus;@oem56.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-10-10 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-03-04 42288]
S3 IntcDAud;@oem61.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-08 473864]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MiraDispKmd;@miradisp.inf,%MiraDispKmd%;Kernel Mode Miracast Filter Driver; C:\WINDOWS\System32\drivers\MiraDispKmd.sys [2015-07-10 23552]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 nmwcd;@oem29.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem4.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 RTL8168;@oem17.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2013-06-21 816344]
S3 ssudmdm;@oem59.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-10-10 206080]
S3 ssudserd;@oem58.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2015-10-10 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-06-23 245760]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-30 15720]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-20 359848]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-11 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-12-11 390616]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-09-11 312056]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session23;Hostitel synchronizace_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-13 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-10-26 282112]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-20 291752]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-19 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session23;Data kontaktů_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session23;Úložiště uživatelských dat_Session23; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#7 Příspěvek od jindra.paryzek »

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default.migrated

User: Guest

User: Jindra
->Temp folder emptied: 16507802423 bytes
->Temporary Internet Files folder emptied: 9189561 bytes
->FireFox cache emptied: 308879423 bytes
->Flash cache emptied: 1396 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 289660 bytes
RecycleBin emptied: 50688 bytes

Total Files Cleaned = 16 047,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default

User: Default User

User: Default.migrated

User: Guest

User: Jindra
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12192015_122247

Files moved on Reboot...
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\zh-TW\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\zh-CN\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\tr-TR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\th-TH\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\sv-SE\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\sl-SI\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\sk-SK\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\ru-RU\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\ro-RO\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\pt-PT\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\pt-BR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\pl-PL\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\nl-NL\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\nb-NO\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\ko-KR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\ja-JP\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\it-IT\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\hu-HU\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\hr-HR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\he-IL\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\fr-FR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\fi-FI\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\es-ES\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\en-US\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\el-GR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\de-DE\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\da-DK\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\cs-CZ\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{F9A30B1D-7B72-4130-A172-F0FE0140E61F}\Lang\ar-SA\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\zh-TW\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\zh-TW\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\zh-CN\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\zh-CN\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\tr-TR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\tr-TR\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\th-TH\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\th-TH\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\sv-SE\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\sv-SE\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\sl-SI\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\sl-SI\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\sk-SK\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\sk-SK\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ru-RU\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ru-RU\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ro-RO\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ro-RO\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\pt-PT\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\pt-PT\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\pt-BR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\pt-BR\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\pl-PL\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\pl-PL\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\nl-NL\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\nl-NL\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\nb-NO\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\nb-NO\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ko-KR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ko-KR\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ja-JP\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ja-JP\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\it-IT\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\it-IT\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\hu-HU\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\hu-HU\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\hr-HR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\hr-HR\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\he-IL\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\he-IL\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\fr-FR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\fr-FR\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\fi-FI\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\fi-FI\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\es-ES\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\es-ES\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\en-US\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\en-US\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\el-GR\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\el-GR\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\de-DE\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\de-DE\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\da-DK\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\da-DK\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\cs-CZ\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\cs-CZ\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ar-SA\license.txt scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Temp\dmiwu\{A9864FBF-2A41-4FA4-A67B-00104F33199F}\Lang\ar-SA\setup.exe.mui scheduled to be moved on reboot.
File move failed. C:\Users\Jindra\AppData\Local\Microsoft\Windows\INetCache\counters.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#8 Příspěvek od jindra.paryzek »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jindra at 2015-12-19 12:32:27
Microsoft Windows 10 Home
System drive C: has 903 GB (95%) free of 953 GB
Total RAM: 3977 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:32:32, on 19. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16603)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Jindra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9621 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\igfxCUIService.exe
atieclxx
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel

dashost.exe {350a63c8-aee3-4037-97ae687507b9c120}
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE

C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM

"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4P1
"C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe"
taskeng.exe {953EA26A-8776-4BA7-A2A5-F9856BBB3C88}
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
taskhostw.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\WINDOWS\system32\PrintIsolationHost.exe -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup

"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey C08CD1DC-2DBF-03CB-3BCB-7052D8C90532 -Reinvoke

"C:\Users\Jindra\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\9989mys1.default-1436779391318

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\9989mys1.default-1436779391318\searchplugins\
google-default.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2013-11-02 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-11-02 1727176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-30 36352]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-10-20 405416]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-23 2779376]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-09-11 8512760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-09-11 1411320]
"WavesSvc"=C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [2015-05-21 611248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-06-22 767176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableCAD"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-19 12:22:47 ----D---- C:\_OTM
2015-12-19 10:40:30 ----D---- C:\rsit
2015-12-19 10:29:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-17 23:14:01 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-12-17 23:10:05 ----D---- C:\ProgramData\Microsoft Toolkit
2015-12-17 22:50:17 ----D---- C:\Program Files\Microsoft.NET
2015-12-17 22:42:24 ----D---- C:\Program Files\Common Files\DESIGNER
2015-12-17 22:42:06 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2015-12-17 22:41:01 ----D---- C:\WINDOWS\PCHEALTH
2015-12-17 22:41:01 ----D---- C:\Program Files\Microsoft SQL Server
2015-12-17 22:39:05 ----D---- C:\Program Files\Microsoft Analysis Services
2015-12-17 22:39:05 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2015-12-17 22:38:55 ----D---- C:\Program Files\Microsoft Office
2015-12-17 22:38:54 ----D---- C:\ProgramData\Microsoft Help
2015-12-17 22:38:46 ----RHD---- C:\MSOCache
2015-12-12 11:54:13 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-12-12 11:54:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-12 11:54:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-12 11:54:06 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-12-12 11:54:04 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-12 11:54:03 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-12 11:54:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-12 11:54:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-12 11:54:00 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-12 11:54:00 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-12 11:53:59 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-12 11:53:57 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-12-12 11:53:57 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-12 11:53:56 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-12 11:53:55 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-12 11:53:54 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-12 11:53:54 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-12 11:53:51 ----A---- C:\WINDOWS\system32\Magnify.exe
2015-12-12 11:53:50 ----A---- C:\WINDOWS\SYSWOW64\Magnify.exe
2015-12-12 11:53:49 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-12-12 11:53:49 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-12-12 11:53:48 ----A---- C:\WINDOWS\system32\ninput.dll
2015-12-12 11:53:48 ----A---- C:\WINDOWS\system32\duser.dll
2015-12-12 11:53:47 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-12 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2015-12-12 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-12-12 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-12 11:53:44 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-12 11:53:43 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-12 11:53:42 ----A---- C:\WINDOWS\system32\dot3mm.dll
2015-12-12 11:53:42 ----A---- C:\WINDOWS\system32\DAMM.dll
2015-12-12 11:53:42 ----A---- C:\WINDOWS\explorer.exe
2015-12-12 11:53:41 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-12-12 11:53:40 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-12 11:53:40 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-12-12 11:53:39 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-12 11:53:38 ----A---- C:\WINDOWS\system32\DAMediaManager.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\NetworkUXBroker.exe
2015-12-12 11:53:37 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-12-12 11:53:36 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-12 11:53:36 ----A---- C:\WINDOWS\system32\EthernetMediaManager.dll
2015-12-12 11:53:35 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2015-12-12 11:53:34 ----A---- C:\WINDOWS\system32\userenv.dll
2015-12-12 11:53:34 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2015-12-12 11:53:33 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-12-12 11:53:33 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\KBDAZE.DLL
2015-12-12 11:53:32 ----A---- C:\WINDOWS\system32\drivers\gpuenergydrv.sys
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\kbdgeoqw.dll
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZST.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZEL.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\KBDAZE.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\system32\KBDAZST.DLL
2015-12-12 11:53:31 ----A---- C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-12 11:53:29 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2015-12-12 11:53:29 ----A---- C:\WINDOWS\system32\profext.dll
2015-12-12 11:53:29 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-12-12 11:53:25 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-12 11:53:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-12 11:29:45 ----ASH---- C:\swapfile.sys
2015-12-12 11:29:45 ----ASH---- C:\pagefile.sys
2015-12-12 11:29:40 ----ASH---- C:\hiberfil.sys
2015-12-12 11:19:04 ----D---- C:\$SysReset
2015-12-07 19:38:11 ----D---- C:\temp
2015-12-07 15:58:06 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2015-12-19 12:32:29 ----D---- C:\Program Files\trend micro
2015-12-19 12:32:18 ----D---- C:\WINDOWS\Temp
2015-12-19 12:31:04 ----D---- C:\WINDOWS\Prefetch
2015-12-19 12:30:15 ----D---- C:\WINDOWS\System32
2015-12-19 12:30:15 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-19 12:29:18 ----D---- C:\WINDOWS
2015-12-19 12:29:18 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-19 12:29:01 ----D---- C:\WINDOWS\system32\sru
2015-12-19 11:59:41 ----D---- C:\WINDOWS\AppReadiness
2015-12-19 11:43:13 ----D---- C:\WINDOWS\INF
2015-12-19 11:43:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-19 11:39:32 ----RD---- C:\Program Files (x86)
2015-12-19 11:36:43 ----D---- C:\WINDOWS\system32\Tasks
2015-12-19 10:57:13 ----SHD---- C:\WINDOWS\Installer
2015-12-19 10:53:52 ----RD---- C:\WINDOWS\assembly
2015-12-19 10:50:40 ----A---- C:\WINDOWS\win.ini
2015-12-19 10:43:42 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-19 10:42:56 ----RSD---- C:\WINDOWS\Fonts
2015-12-19 10:34:22 ----SHD---- C:\System Volume Information
2015-12-19 10:31:07 ----HD---- C:\Program Files\WindowsApps
2015-12-18 12:29:00 ----D---- C:\WINDOWS\system32\config
2015-12-18 11:01:20 ----SD---- C:\Users\Jindra\AppData\Roaming\Microsoft
2015-12-17 23:13:08 ----D---- C:\WINDOWS\ShellNew
2015-12-17 23:12:50 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-17 23:10:05 ----HD---- C:\ProgramData
2015-12-17 22:50:17 ----RD---- C:\Program Files
2015-12-17 22:50:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-17 22:43:17 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-17 22:42:24 ----D---- C:\Program Files\Common Files
2015-12-17 22:41:50 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-17 22:40:15 ----D---- C:\Program Files\Common Files\System
2015-12-17 22:38:57 ----D---- C:\Program Files (x86)\Microsoft Office
2015-12-17 22:27:48 ----D---- C:\WINDOWS\SysWOW64
2015-12-17 22:27:48 ----D---- C:\Program Files (x86)\Common Files
2015-12-17 14:39:35 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-14 11:15:44 ----A---- C:\WINDOWS\BRRBCOM.INI
2015-12-12 13:20:49 ----D---- C:\WINDOWS\rescache
2015-12-12 13:01:19 ----D---- C:\WINDOWS\WinSxS
2015-12-12 12:12:34 ----D---- C:\WINDOWS\system32\drivers
2015-12-12 12:10:36 ----D---- C:\WINDOWS\system32\oobe
2015-12-12 12:10:35 ----D---- C:\Program Files\Internet Explorer
2015-12-12 12:10:35 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-12 12:00:53 ----D---- C:\WINDOWS\CbsTemp
2015-12-12 11:45:21 ----D---- C:\WINDOWS\system32\catroot2
2015-12-12 11:31:10 ----HD---- C:\$WINDOWS.~BT
2015-12-12 11:22:04 ----SD---- C:\ProgramData\Microsoft
2015-12-12 11:22:04 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-12 11:22:02 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-12 11:22:01 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-12-12 11:22:01 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\spool
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\NDF
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\InputMethod
2015-12-12 11:22:00 ----D---- C:\WINDOWS\system32\en-US
2015-12-12 11:21:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-12 11:21:59 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-12 11:21:59 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-12 11:21:58 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-12 11:21:58 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-12 11:21:53 ----D---- C:\WINDOWS\InputMethod
2015-12-12 11:21:53 ----D---- C:\WINDOWS\Help
2015-12-12 11:21:52 ----RD---- C:\Users
2015-12-12 11:21:52 ----D---- C:\ProgramData\USOPrivate
2015-12-12 11:21:49 ----D---- C:\Program Files\Intel
2015-12-12 11:21:49 ----D---- C:\Program Files\AMD
2015-12-12 11:21:47 ----D---- C:\WINDOWS\Tasks
2015-12-12 11:21:47 ----D---- C:\WINDOWS\system32\Recovery
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-09 01:18:29 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-09 01:18:29 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-08 20:38:40 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-07 16:25:01 ----D---- C:\WINDOWS\registration
2015-12-07 16:20:32 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-12-07 15:38:22 ----DC---- C:\WINDOWS\Panther
2015-12-04 01:09:19 ----D---- C:\WINDOWS\debug
2015-12-01 01:32:22 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-11-23 01:07:06 ----D---- C:\WINDOWS\ModemLogs
2015-11-20 00:00:41 ----D---- C:\WINDOWS\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem12.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2014-07-21 36096]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-30 644968]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-12-01 8192]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-06-23 21612032]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-06-23 663552]
R3 athr;@oem48.inf,%ATHR.Service.DispName%;Dell Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw10x.sys [2015-09-11 4318760]
R3 BTATH_BUS;@oem25.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2013-09-04 34384]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-03-09 599240]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 DellRbtn;@oem5.inf,%DellRbtn%;Airplane Mode Switch; C:\WINDOWS\System32\drivers\DellRbtn.sys [2013-01-24 10752]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-20 6415272]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-09-11 4518136]
R3 iwdbus;@oem3.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-03-04 30512]
R3 MEIx64;@oem13.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-12-11 100312]
R3 rt640x64;@oem53.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-09-11 896744]
R3 RTSUER;@oem39.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-08-23 34544]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 12800]
R3 SynTP;@oem7.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-08-23 529648]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 DFX11_1;DFX Audio Enhancer 11.1; C:\WINDOWS\system32\drivers\dfx11_1x64.sys [2012-12-13 28008]
S3 dg_ssudbus;@oem56.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-10-10 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-03-04 42288]
S3 IntcDAud;@oem61.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-08 473864]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 MiraDispKmd;@miradisp.inf,%MiraDispKmd%;Kernel Mode Miracast Filter Driver; C:\WINDOWS\System32\drivers\MiraDispKmd.sys [2015-07-10 23552]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 nmwcd;@oem29.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem4.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 RTL8168;@oem17.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2013-06-21 816344]
S3 ssudmdm;@oem59.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-10-10 206080]
S3 ssudserd;@oem58.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2015-10-10 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-06-23 245760]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-30 15720]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-20 359848]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-11 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-12-11 390616]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-09-11 312056]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session23;Hostitel synchronizace_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-13 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-10-26 282112]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-20 291752]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-19 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session23;Data kontaktů_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session23;Úložiště uživatelských dat_Session23; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#9 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna? Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#10 Příspěvek od jindra.paryzek »

Pc je stále nějaké pomalé :o
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#11 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#12 Příspěvek od jindra.paryzek »

Přestala mě fungovat nabídka START..

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 19. 12. 2015
Čas skenování: 18:27
Protokol: a.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.19.03
Databáze rootkitů: v2015.12.18.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: Jindra

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 405844
Uplynulý čas: 20 min, 58 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 2
PUP.Optional.MyStartToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${IEUTILSLIGHTELEVATIONPOLICYID}, , [44ab089e3f4c39fdeda2822a51b231cf],
PUP.Optional.YahooVNM, HKU\S-1-5-21-790963611-2055800212-2272835107-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}, , [4aa5347293f8c76f27f6f9ce05fe02fe],

Hodnoty registru: 2
PUP.Optional.MyStartToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${IEUTILSLIGHTELEVATIONPOLICYID}|AppPath, C:\Program Files (x86)\mystarttb, , [44ab089e3f4c39fdeda2822a51b231cf]
PUP.Optional.YahooVNM, HKU\S-1-5-21-790963611-2055800212-2272835107-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}|URL, https://search.yahoo.com/search?fr=vmn& ... earchTerms}, , [4aa5347293f8c76f27f6f9ce05fe02fe]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#13 Příspěvek od Rudy »

Všechny nálezy smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 led 2007 12:37
Bydliště: Louny

Re: Zničeho nic se pc velmi zpomalilo a seká se

#14 Příspěvek od jindra.paryzek »

Smazáno, ale stále mi nefunguje nabídka START na spodní liště vlevo..
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zničeho nic se pc velmi zpomalilo a seká se

#15 Příspěvek od Rudy »

Desítky toto dělají. Zkuste obnovu systému k datu, kdy korektně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“