Prosím o kontrolu logu RSIT
Napsal: 30 kvě 2016 13:05
Zdravím,
v poslednom čase mi ide môj notebook trocha pomalšie ako zvyčajne, a preto by som vás poprosil o kontrolu logu z RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Lukáš Dvorščák at 2016-05-30 13:44:40
Microsoft Windows 8.1
System drive C: has 524 GB (56%) free of 938 GB
Total RAM: 6026 MB (64% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:44:46, on 30. 5. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe
C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\WINDOWS\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera_crashreporter.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\Lukáš Dvorščák.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9.com?type=hp&ts=1450273309&fro ... 0mfcbc2ebt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/#web/result?source=art&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/#web/result?source=art&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE07DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9.com?type=hp&ts=1450273309&fro ... 0mfcbc2ebt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/#web/result?source=art&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/#web/result?source=art&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://v9.com?type=hp&ts=1450273309&fro ... 0mfcbc2ebt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: TSearch - {6E727987-C8EA-44DA-8749-310C0FBE3C3E} - C:\Program Files (x86)\Torrent Search\IEEF\34ctNejChqUk.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [Fastboot] "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BingSvc] C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: TSearch - {03AE1B7B-A9E7-4D5A-9D34-89999C31B659} - C:\Program Files (x86)\Torrent Search\IEEF\34ctNejChqUk.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVControlCenter - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
O23 - Service: @oem36.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Xamarin Bonjour Service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @oem26.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: YAC Service (iSafeService) - Elex do Brasil Participaçoes Ltda - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo QuickSnip Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe
O23 - Service: Lenovo Settings Service - Lenovo Group Limited - C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
O23 - Service: Lenovo AVFramework Camera Privacy Controller (LENOVO.CAMMUTE) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\cammute.exe
O23 - Service: Lenovo AVFramework Microphone Volume Controller and Dolby Interface (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe
O23 - Service: Lenovo AVFramework Virtual Camera Controller Service (LENOVO.TVTVCAM) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LnvMHService (LnvHotSpotSvc) - Lenovo - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
O23 - Service: Location Task Manager (LocationTaskManager) - Unknown owner - C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Lenovo Settings Power Service (Power Manager DBC Service) - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Lenovo QuickControl Master Service (QuickControlMasterSvc) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe
O23 - Service: Lenovo QuickControl Service (QuickControlService) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: ValBioService - Validity Sensors, Inc. - C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe
O23 - Service: @oem25.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @oem25.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Broadcom Corporation - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14663 bytes
======Listing Processes======
wininit.exe
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch
c:\windows\system32\svchost.exe -k rpcss
"dwm.exe"
C:\WINDOWS\system32\ibmpmsvc.exe
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
c:\windows\system32\svchost.exe -k localservicenetworkrestricted
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe"
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe"
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5ab9d944-a186-497a-a201-edb342bbfbd5 -SystemEventPortName:HostProcess-818d5707-05a7-4f5c-9d4a-4f7b17b15e10 -IoCancelEventPortName:HostProcess-9d8ad2c7-eb82-4c58-a5f8-d781b4c772c7 -NonStateChangingEventPortName:HostProcess-c966237e-bb7e-4887-be0c-2d928c9cd959 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:78baaa83-7302-4a8e-a7e3-e781e4c3389f -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-41192cd1-b5eb-4e13-9cd4-e2185291a825 -SystemEventPortName:HostProcess-d0f1937e-0fa4-4e60-a660-27668a22a46f -IoCancelEventPortName:HostProcess-051c709e-b08b-48a8-b375-13ea66d5b1f9 -NonStateChangingEventPortName:HostProcess-09220e70-e13e-4d23-a6c2-f98d8b49f5dd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:930da9f7-dc19-4a0e-a345-599482d67642 -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-db7eab80-062d-4cab-8597-48141bcafec4 -SystemEventPortName:HostProcess-f1e87310-70dd-4bd5-bb62-4ef031c55c69 -IoCancelEventPortName:HostProcess-4b884aab-ef2b-41ec-862e-a5e760a87fa5 -NonStateChangingEventPortName:HostProcess-d6fbad44-56ce-4838-abe2-01fa9c8204b3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:84a8d813-333d-44bd-8750-65b7447574cf -DeviceGroupId:
c:\windows\system32\svchost.exe -k networkservice
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation
c:\windows\system32\svchost.exe -k wbiosvcgroup
c:\windows\system32\svchost.exe -k localservicenonetwork
taskhostex.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Explorer.EXE
taskeng.exe {858AC7F8-491D-4792-BD37-CEF9B79A335C}
"C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe"
"C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
c:\windows\system32\svchost.exe -k utcsvc
dashost.exe {bca49e6d-bcbb-4dba-a65990fbb7eea001}
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
C:\WINDOWS\system32\valWbioSyncSvc.exe
"C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE" "C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\System32\igfxpers.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Lenovo\HOTKEY\extapsup.exe"
"C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe"
C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.MediaKey
"C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe"
C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
"C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe"
"C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe" -default
\??\C:\WINDOWS\system32\conhost.exe 0x4
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\WINDOWS\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe"
"C:\Program Files\lenovo\QuickSnipService\QuickSnipInput.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe"
"C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe"
"C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE"
C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "0x1738_0x17dc_0x6067b8bc"
"C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe"
"C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe"
"C:\Program Files\Lenovo\Communications Utility\cammute.exe"
"C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe"
"C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\37.0.2178.43\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=7900
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=gpu-process --channel="7900.0.828577860\570061293" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,15,20,30,59,78 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3277 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --ignored=" --type=renderer "
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.2.1628077780\1460174105"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.3.1859055637\962982094"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.7.453414353\1505214211"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.9.1383153627\929529106"
"C:\WINDOWS\system32\RunDll32.exe" "C:\WINDOWS\system32\WerConCpl.dll", LaunchErcApp -queuereporting
ctfmon.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe"
"C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe" ytidilav
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Users\Lukáš Dvorščák\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\9yiCGNquQB08HgjV45Fkwb9.job - C:\Users\Luk� Dvor���k\AppData\Roaming\9yiCGNquQB08HgjV45Fkwb9.exe --c=aIr6zqzhQZx1utTdohVLTg8AehuAC+3jkMPcIUnVspoMcLyRGetEmA1tcm3oc/wYsKHMSGZW3BQUPSMYmAaw58C5WsO5KAOlh108UsBgWAmGKWG7wYnLiPbkeeaZ8Ub3EWdrz93RroYtliJRVtgnB22pIOz42+7pP+MD+ZVZ2wyEqwyNLSuL3Nf071+wGxymsmfIYQ5zBn7WYjvGd6WnuvrzZfEq4L1dhzakX0MrHLRwh/8HpBhB55GD+ZO40LjfVicbTyl2Bsau4/XeezWKA79vIVpTnW7W35hPsQl5PPgjNDRmImbcIusSRaO71JYjbpQEy4PlhPiM8Krs8ilgyQ==
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-1.job - C:\Program Files (x86)\Apps Hat\Apps Hat-codedownloader.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-11.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-11.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-4.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-4.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5_user.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-7.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-7.exe /rawdata=uObRDEytw8a8KZlaR76fyAzoXIda29VCP6N+Itz9iooI7zXtQnh7VS70DOUySIkJLeJ9bdwYwjbsI5+cybMaX7dmXdz03m235+KIXqZpnbnuEmIWoM5xdZR5t+bRwW68+Zgh+Y4RkkWQTsJMxTD9AVIo5Au7AbQz+ID1ieCqKoZPig460Fsxn9A5z/6ogODCIzrA8xhuV03DX4SvvZ47DaoXWlkucJhDv/P/4Vd3zUmdFq87pHuo8FnctoONU6X85MpsdTfoTE53r5HwMFM8IemXA5NKg5Z+6ccs9Ypk92GeIbSJIHh/LvBQl1wHzYom6n+UrYkgBWfbANWAJWXQjkH2G7+viUEGQ4MK/vYa5SPAGZ+3hLx2j+tVqLqcQ97dgJas7Xb/hOBur9fHkq9jg8bUKiid2rV+z/hy7XFXSMJebQpEalOkjPUWKRah3jdGpGo6B1yKi+vHzpnS48SLqZgL3KFjtAg4OuexamViRkG3lQsQBcGA8fC56pGiZ6j6sbN3bAMytN79FKWPBHRzX84zccOUP3siSPEjIdYKjKJ56aBnxEYuVE/T3kYfiBINBaBo+mlX9F4/k0C5Z69BzzCzE13h/J9rgDoc6DMVbxk5pYCitmUjke6MqUGI7poXW1StkrXgJW48CnoLwT3wcJr0GoSTF5yiHK1ol05QzS9cBQ3WDUXuk4U5YxYnGcwI/JwbuD/ubf6NQLeMqMarQXIz7+vJXXR4LllrQcpHdZDBRadRwAYy3iHeZt14nKHO0/9CkLIiuDh30N7WoAywfRXleeCq7gPRlDSBwrJS1kaCl7oWK4jkHuOKjdGcrX/cXgITGtMXnqRyCerUfhSx9nnRsEC0KViGV3RvNbYC10X0dRnkUfnuN9qDJvdYoG18nuYyE9bzcPHNWIzYc+Tqr1soGtedUKlaFFg8pZOl9jJJUk6W4Gzm7LH+HiiKmnP5XJQqJ0/K0B07ncSzJ1014VrVC41x8yH0ELodRi7XTBLb1BWABe2q17tHZK9LPPB+mUvMBBZJ4emkNqUU1RrijdmDA04cK/4tst2uc1PIeqGnAoAYau94qVvkL6fm3hkPYlRgTFEksd/4RUOQveU5Jj6wttlMBEoyIPVitwy7rneHK7hMg77cvfmaPCXvse7j5/iklMUvfZRiEpJJZvItPzGeuoavFNsjKfjQUpUt3YexJXCg4odff3Poo8Rkk6WoGkUE9fviS7MzUDjbLCAobNyrYHTjw2gUYBfx82OfKs4khm7T04fRHWoB+OBeBBo/+SCFwSqElpU4ZEPWOpUS01TZUOnugdvaqYQiIN9WWjrhJYDKpw8eIa0uWF//plTkduWuQ2abY9F1Dvy2pZB2EaZd0Xh1rB3dpijZfCjNb5uNQrOUmKicd/P/6K/gr7kFiTMRWG1fJoB6BCuld8eysab+PEQQbvESxLvCEskS2JPaVRMPovkkQ5a3M0+vj0jKzUUuh/K9jXzhPuyMq93yursQLiFJnbQQtEWTIXAyApKsvYTmdswgAwbq5Vi7dZySukPML/fNrvcm9V3q/jo6oaskRq4tM64UBzgZ22aFdIUsiHw3Y5ItUgbvGH5DFfNqmdb0YJbakzA19o5MSRd/xWK/CyjnVCQBVw8ZFsuLcJsKHDVQrYHhIWRZ7aJaldJm4CynhGOcjbj2IbnDN9B5eDOCMsYpngwuD6IlUD63zfs=
C:\WINDOWS\tasks\green_game_notification_service.job - C:\Program Files (x86)\green game\green_game_notification_service.exe /url='http://cdn.selectbestopt.com/notf_sys/index.html' /crregname='green game' /appid='73143' /srcid='2913' /bic='70570d8347eacfa0d43ef900fb705348' /verifier='5c14ae1fdeeacbabfb9584831f3146cc' /installerversion='1.50.3.10' /statsdomain='http://stats.buildomserv.com/data.gif?' /errorsdomain='http://stats.buildomserv.com/data.gif?' /monetizationdomain='http://logs.buildomserv.com/monetization.gif?' /installationtime='1427905915' /runfrom='task' /brwtype='notbg' /postponedhours='6'
C:\WINDOWS\tasks\PED_Torrent_Search.job - C:\ProgramData\Torrent_Search_PED\rundll32.exe ARWOMlQ.dll,#67
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\tmptsk12694.job - C:\WINDOWS\TEMP\48559_updater.exe "/appname=Apps Hat" /appid=48559 /pubid=25286 /srcid=000820 /sdifjobif=tt1231 /minutes=30 /downloadurl=http://update.newstatsdemosrv.com/slp_u ... e-help.exe /close=true /zipfileurl=http://update.newstatsdemosrv.com/slp_u ... _camp__.7z /updaterver=10 /newpubid=30935 /newappid=65759 /runsp=false /notsys=1
C:\WINDOWS\tasks\tmptsk230.job - C:\WINDOWS\TEMP\48559_updater.exe "/appname=Apps Hat" /appid=48559 /pubid=25286 /srcid=000820 /sdifjobif=tt1231 /minutes=30 /downloadurl=http://update.newstatsdemosrv.com/slp_u ... e-help.exe /close=true /zipfileurl=http://update.newstatsdemosrv.com/slp_u ... _camp__.7z /updaterver=10 /newpubid=30935 /newappid=65759 /runsp=false /notsys=1
C:\WINDOWS\tasks\tmptsk427.job - C:\WINDOWS\TEMP\48559_updater.exe "/appname=Apps Hat" /appid=48559 /pubid=25286 /srcid=000820 /sdifjobif=tt1231 /minutes=30 /downloadurl=http://update.newstatsdemosrv.com/slp_u ... e-help.exe /close=true /zipfileurl=http://update.newstatsdemosrv.com/slp_u ... _camp__.7z /updaterver=10 /newpubid=30935 /newappid=65759 /runsp=false /notsys=1
C:\WINDOWS\tasks\Update Service for Torrent Search.job - C:\Program Files (x86)\Torrent Search\izUxoTB.exe
C:\WINDOWS\tasks\Update Service for Torrent Search2.job - C:\Program Files (x86)\Torrent Search\izUxoTB.exe
C:\WINDOWS\tasks\update-S-1-5-21-1278430734-1542720274-53049364-1002.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\WINDOWS\tasks\update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}]
TSearch - C:\Program Files (x86)\Torrent Search\IEEF\7tJrtpRaCnmQ.dll [2016-05-24 565640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-12-15 553896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-05-26 902624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-12-15 211880]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}]
TSearch - C:\Program Files (x86)\Torrent Search\IEEF\34ctNejChqUk.dll [2016-05-24 443600]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-05-26 679680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{31264A33-A653-46C4-AF49-1232C59A7DA5} -
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-08-30 391152]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-08-30 771056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-08-30 769520]
"LenovoOptMouseUpdate"=C:\Program Files\Lenovo\HOTKEY\extapsup.exe [2013-06-21 255480]
"LnvMobHotspotClient"=C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2013-05-29 937976]
"LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2013-06-21 594936]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-06-04 2985712]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"BingSvc"=C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-12-05 144008]
"Spotify Web Helper"=C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-05-26 1525360]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2013-05-14 552960]
"Fastboot"=C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2013-12-25 738032]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2016-03-10 839648]
"Lightshot"=C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [2014-10-16 226560]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-05-26 7400576]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-08-20 622080]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-05-30 13:44:40 ----D---- C:\rsit
2016-05-30 13:44:40 ----D---- C:\Program Files\trend micro
2016-05-30 11:52:31 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\Opera Software
2016-05-30 11:50:35 ----D---- C:\Program Files (x86)\Opera
2016-05-26 21:09:15 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2016-05-26 21:09:00 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-05-26 21:08:36 ----A---- C:\WINDOWS\avastSS.scr
2016-05-24 17:50:46 ----D---- C:\ProgramData\Torrent_Search_PED
2016-05-18 22:06:21 ----A---- C:\WINDOWS\SYSWOW64\vp6vfw.dll
2016-05-11 15:07:10 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-05-11 15:07:09 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-05-11 15:04:22 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-05-11 15:04:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-05-11 15:04:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-05-11 15:04:01 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-05-11 15:03:59 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-05-11 15:03:57 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-05-11 15:03:55 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-05-11 15:03:55 ----A---- C:\WINDOWS\system32\wininet.dll
2016-05-11 15:03:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-05-11 15:03:49 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-05-11 15:03:48 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-05-11 15:03:48 ----A---- C:\WINDOWS\system32\jscript.dll
2016-05-11 15:03:47 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-05-11 15:03:46 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-05-11 15:03:46 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-05-11 15:03:45 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-05-11 15:03:45 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-05-11 15:03:42 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-05-11 15:03:42 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-05-11 15:03:41 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-05-11 15:03:41 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-05-11 15:03:40 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-05-11 15:03:39 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-05-11 15:03:38 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-05-11 15:03:38 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-05-11 15:03:36 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-05-11 15:03:36 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-05-11 15:01:51 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\schannel.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\certcli.dll
2016-05-11 15:01:39 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-05-11 15:01:38 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-05-11 15:01:38 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-11 15:01:13 ----A---- C:\WINDOWS\SYSWOW64\dsparse.dll
2016-05-11 15:01:13 ----A---- C:\WINDOWS\system32\dsparse.dll
2016-05-11 15:01:11 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-05-11 15:01:11 ----A---- C:\WINDOWS\system32\shacct.dll
2016-05-11 15:01:09 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2016-05-11 15:01:09 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-05-11 15:01:07 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-05-11 15:01:07 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-05-11 15:01:07 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2016-05-11 15:00:59 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-05-11 15:00:59 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-05-11 15:00:59 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-05-11 15:00:43 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-05-11 15:00:43 ----A---- C:\WINDOWS\system32\webio.dll
2016-05-11 15:00:43 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-05-11 15:00:42 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2016-05-11 15:00:42 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2016-05-11 15:00:17 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2016-05-11 15:00:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-05-11 15:00:09 ----A---- C:\WINDOWS\system32\win32k.sys
2016-05-02 18:59:15 ----D---- C:\Program Files (x86)\AGEIA Technologies
======List of files/folders modified in the last 1 month======
2016-05-30 13:44:40 ----RD---- C:\Program Files
2016-05-30 13:44:28 ----D---- C:\WINDOWS\Temp
2016-05-30 13:41:51 ----D---- C:\WINDOWS\Microsoft.NET
2016-05-30 13:17:53 ----D---- C:\WINDOWS\Prefetch
2016-05-30 13:05:32 ----D---- C:\WINDOWS\system32\sru
2016-05-30 11:58:36 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-05-30 11:55:51 ----D---- C:\WINDOWS\Inf
2016-05-30 11:55:40 ----D---- C:\ProgramData\Validity
2016-05-30 11:55:20 ----D---- C:\Windows
2016-05-30 11:52:22 ----D---- C:\WINDOWS\system32\Tasks
2016-05-30 11:50:35 ----RD---- C:\Program Files (x86)
2016-05-30 11:46:53 ----D---- C:\WINDOWS\SoftwareDistribution
2016-05-30 11:46:53 ----D---- C:\WINDOWS\Logs
2016-05-30 11:46:53 ----D---- C:\WINDOWS\debug
2016-05-30 11:45:54 ----D---- C:\Program Files (x86)\Google
2016-05-30 11:45:37 ----D---- C:\WINDOWS\Tasks
2016-05-30 11:45:36 ----SHD---- C:\WINDOWS\Installer
2016-05-30 11:45:36 ----SHD---- C:\Config.Msi
2016-05-30 11:40:40 ----D---- C:\Games
2016-05-30 10:44:49 ----D---- C:\WINDOWS\AppReadiness
2016-05-29 19:21:37 ----D---- C:\WINDOWS\system32\config
2016-05-29 19:18:43 ----D---- C:\WINDOWS\system32\DriverStore
2016-05-29 18:36:12 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\Skype
2016-05-28 23:27:14 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\vlc
2016-05-28 17:36:49 ----D---- C:\WINDOWS\WinSxS
2016-05-27 17:54:09 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify
2016-05-27 10:54:32 ----D---- C:\WINDOWS\SysWOW64
2016-05-27 10:16:53 ----D---- C:\WINDOWS\system32\drivers
2016-05-26 21:09:00 ----D---- C:\WINDOWS\System32
2016-05-26 21:08:46 ----D---- C:\ProgramData\AVAST Software
2016-05-26 21:08:24 ----D---- C:\Program Files\AVAST Software
2016-05-26 19:27:56 ----SHD---- C:\System Volume Information
2016-05-26 19:10:58 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2016-05-26 19:10:58 ----SD---- C:\WINDOWS\system32\GWX
2016-05-26 19:10:47 ----D---- C:\WINDOWS\CbsTemp
2016-05-24 17:50:46 ----HD---- C:\ProgramData
2016-05-24 17:50:46 ----D---- C:\Program Files (x86)\Torrent Search
2016-05-23 08:31:23 ----D---- C:\WINDOWS\SYSWOW64\NV
2016-05-23 08:31:23 ----D---- C:\WINDOWS\system32\NV
2016-05-23 08:31:15 ----D---- C:\ProgramData\NVIDIA
2016-05-22 13:15:47 ----D---- C:\WINDOWS\Minidump
2016-05-19 17:33:04 ----HD---- C:\Program Files\WindowsApps
2016-05-16 09:50:49 ----RSD---- C:\WINDOWS\assembly
2016-05-13 11:25:34 ----D---- C:\WINDOWS\rescache
2016-05-13 09:23:07 ----D---- C:\WINDOWS\system32\NDF
2016-05-12 09:54:54 ----D---- C:\WINDOWS\system32\appraiser
2016-05-11 22:57:34 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-05-11 22:57:34 ----D---- C:\WINDOWS\system32\wbem
2016-05-11 22:57:34 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-05-11 22:57:33 ----D---- C:\Program Files\Internet Explorer
2016-05-11 22:57:33 ----D---- C:\Program Files (x86)\Internet Explorer
2016-05-11 22:57:31 ----D---- C:\WINDOWS\system32\cs-CZ
2016-05-11 22:57:29 ----D---- C:\Program Files\Windows Journal
2016-05-11 22:08:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-05-11 15:55:56 ----D---- C:\ProgramData\Microsoft Help
2016-05-11 15:54:33 ----D---- C:\WINDOWS\system32\MRT
2016-05-11 15:43:11 ----A---- C:\WINDOWS\system32\MRT.exe
2016-05-11 15:42:16 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-05-11 14:59:13 ----D---- C:\WINDOWS\system32\catroot2
2016-05-11 14:58:28 ----A---- C:\WINDOWS\system32\winresume.exe
2016-05-11 14:58:28 ----A---- C:\WINDOWS\system32\winload.exe
2016-05-09 15:21:36 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\uTorrent
2016-05-05 11:10:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-03 12:33:36 ----D---- C:\Program Files (x86)\Ubisoft
2016-05-02 18:59:15 ----D---- C:\Program Files (x86)\NVIDIA Corporation
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-05-26 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-05-26 287528]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-07-24 666984]
R0 IntelHSWPcc;IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [2013-05-23 101976]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-05-26 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-05-26 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-05-26 1070904]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-05-26 465792]
R1 dtsoftbus01;@oem24.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-09-27 283064]
R1 iSafeKrnl;YAC Mini-Filter Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [2015-05-14 260856]
R1 iSafeKrnlKit;YAC Kit Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [2016-04-08 110112]
R1 iSafeKrnlMon;YAC Monitor Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [2016-04-08 52440]
R1 iSafeKrnlR3;YAC Ring3 Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [2016-04-08 103904]
R1 iSafeNetFilter;iSafeNetFilter; C:\WINDOWS\system32\DRIVERS\iSafeNetFilter.sys [2015-06-30 52392]
R1 SMIDriver;SMIDriver; C:\WINDOWS\system32\drivers\smi.sys [2014-07-21 19760]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwr64v.sys [2013-07-05 20736]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-05-26 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-05-26 107792]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 bcbtums;@oem36.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BCM42RLY;BCM42RLY; C:\WINDOWS\system32\drivers\BCM42RLY.sys [2013-12-25 23760]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 btwampfl;@oem36.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-09-04 166104]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2013-04-18 44800]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-08-20 4165120]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-08-01 3565528]
R3 iwdbus;@oem35.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-08 26008]
R3 MEIx64;@oem15.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-07-03 64624]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-26 11311392]
R3 RTL8168;@oem13.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-04-10 801864]
R3 SensorsSimulatorDriver;@oem67.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-10-29 226304]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-06-04 33008]
R3 SynTP;@oem22.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-06-04 532720]
S2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-05-26 166432]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-09-24 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 btwaudio;@oem6.inf,%btaudio.SvcDesc%;Bluetooth Audio Device Service; C:\WINDOWS\system32\drivers\btwaudio.sys [2013-04-24 186584]
S3 btwavdt;@oem6.inf,%btwavdt.SvcDesc%;Bluetooth AVDT; C:\WINDOWS\System32\drivers\btwavdt.sys [2013-04-24 228568]
S3 btwl2cap;@oem9.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys [2012-07-27 40248]
S3 btwpanfl;BTW PAN filter driver; \??\C:\WINDOWS\system32\drivers\btwpanfl.sys [2013-01-20 44912]
S3 btwrchid;btwrchid; C:\WINDOWS\System32\drivers\btwrchid.sys [2013-04-24 22744]
S3 dg_ssudbus;@oem62.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\fastboot.sys [2013-12-25 66288]
S3 GemCCID;GemCCID; C:\WINDOWS\system32\DRIVERS\GemCCID.sys [2014-11-10 130944]
S3 intaud_WaveExtensible;@oem34.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-08 39320]
S3 IntcDAud;@oem3.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-08-20 449528]
S3 iSafeKrnlBoot;YAC Boot Driver; C:\WINDOWS\system32\DRIVERS\iSafeKrnlBoot.sys [2016-04-08 55056]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RSUSBSTOR;@oem23.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2013-06-15 262872]
S3 ssudmdm;@oem63.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem64.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-05-26 243296]
R2 Bonjour Service;Xamarin Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [2015-09-30 384512]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2013-05-06 958680]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2013-12-25 140016]
R2 IBMPMSVC;@oem26.inf,%ibm.svcDesc0%;Lenovo PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2013-04-18 61224]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-12 733696]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-07-03 131544]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2015-02-05 22744]
R2 iSafeService;YAC Service; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [2016-04-08 118048]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-07-03 169432]
R2 Lenovo QuickSnip Service;Lenovo QuickSnip Service; C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe [2013-06-06 219976]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [2013-06-06 562504]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2012-08-11 136288]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-07-03 366552]
R2 LnvHotSpotSvc;LnvMHService; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [2013-05-29 465912]
R2 LocationTaskManager;Location Task Manager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [2013-04-19 463352]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-10-29 920864]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2015-10-02 75136]
R2 QuickControlMasterSvc;Lenovo QuickControl Master Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [2013-07-17 59384]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-02-21 134336]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2014-06-10 124400]
R2 ValBioService;ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [2014-07-21 22872]
R2 valWBFPolicyService;@oem25.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service; C:\WINDOWS\system32\valWBFPolicyService.exe [2014-07-21 49040]
R2 valWbioSyncSvc;@oem25.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization; C:\WINDOWS\system32\valWbioSyncSvc.exe [2014-07-21 32256]
R3 AVControlCenter;AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [2013-06-21 148984]
R3 Lenovo Settings Service;Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2013-04-20 2037240]
R3 LENOVO.CAMMUTE;Lenovo AVFramework Camera Privacy Controller; C:\Program Files\Lenovo\Communications Utility\cammute.exe [2013-06-21 511992]
R3 LENOVO.TPKNRSVC;Lenovo AVFramework Microphone Volume Controller and Dolby Interface; C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe [2013-06-21 511992]
R3 LENOVO.TVTVCAM;Lenovo AVFramework Virtual Camera Controller Service; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [2013-06-21 683000]
R3 Power Manager DBC Service;Lenovo Settings Power Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2013-07-05 1668904]
R3 QuickControlService;Lenovo QuickControl Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [2013-07-17 138232]
S2 BcmBtRSupport;@oem36.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-09-04 2252504]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-12-10 51376]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-08-30 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-12 822232]
S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2013-07-26 54976]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [2015-06-08 625648]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2014-10-16 272776]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-04-19 2119688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-03-31 835664]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2014-06-18 24560]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [2015-11-19 137216]
S4 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2014-04-07 110128]
-----------------EOF-----------------
v poslednom čase mi ide môj notebook trocha pomalšie ako zvyčajne, a preto by som vás poprosil o kontrolu logu z RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Lukáš Dvorščák at 2016-05-30 13:44:40
Microsoft Windows 8.1
System drive C: has 524 GB (56%) free of 938 GB
Total RAM: 6026 MB (64% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:44:46, on 30. 5. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe
C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\WINDOWS\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera_crashreporter.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\Lukáš Dvorščák.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9.com?type=hp&ts=1450273309&fro ... 0mfcbc2ebt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/#web/result?source=art&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/#web/result?source=art&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE07DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9.com?type=hp&ts=1450273309&fro ... 0mfcbc2ebt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/#web/result?source=art&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/#web/result?source=art&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://v9.com?type=hp&ts=1450273309&fro ... 0mfcbc2ebt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: TSearch - {6E727987-C8EA-44DA-8749-310C0FBE3C3E} - C:\Program Files (x86)\Torrent Search\IEEF\34ctNejChqUk.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [Fastboot] "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BingSvc] C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: TSearch - {03AE1B7B-A9E7-4D5A-9D34-89999C31B659} - C:\Program Files (x86)\Torrent Search\IEEF\34ctNejChqUk.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVControlCenter - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
O23 - Service: @oem36.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Xamarin Bonjour Service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @oem26.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: YAC Service (iSafeService) - Elex do Brasil Participaçoes Ltda - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo QuickSnip Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe
O23 - Service: Lenovo Settings Service - Lenovo Group Limited - C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe
O23 - Service: Lenovo AVFramework Camera Privacy Controller (LENOVO.CAMMUTE) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\cammute.exe
O23 - Service: Lenovo AVFramework Microphone Volume Controller and Dolby Interface (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe
O23 - Service: Lenovo AVFramework Virtual Camera Controller Service (LENOVO.TVTVCAM) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LnvMHService (LnvHotSpotSvc) - Lenovo - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe
O23 - Service: Location Task Manager (LocationTaskManager) - Unknown owner - C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Lenovo Settings Power Service (Power Manager DBC Service) - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Lenovo QuickControl Master Service (QuickControlMasterSvc) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe
O23 - Service: Lenovo QuickControl Service (QuickControlService) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: ValBioService - Validity Sensors, Inc. - C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe
O23 - Service: @oem25.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @oem25.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Broadcom Corporation - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14663 bytes
======Listing Processes======
wininit.exe
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch
c:\windows\system32\svchost.exe -k rpcss
"dwm.exe"
C:\WINDOWS\system32\ibmpmsvc.exe
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
c:\windows\system32\svchost.exe -k localservicenetworkrestricted
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe"
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe"
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5ab9d944-a186-497a-a201-edb342bbfbd5 -SystemEventPortName:HostProcess-818d5707-05a7-4f5c-9d4a-4f7b17b15e10 -IoCancelEventPortName:HostProcess-9d8ad2c7-eb82-4c58-a5f8-d781b4c772c7 -NonStateChangingEventPortName:HostProcess-c966237e-bb7e-4887-be0c-2d928c9cd959 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:78baaa83-7302-4a8e-a7e3-e781e4c3389f -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-41192cd1-b5eb-4e13-9cd4-e2185291a825 -SystemEventPortName:HostProcess-d0f1937e-0fa4-4e60-a660-27668a22a46f -IoCancelEventPortName:HostProcess-051c709e-b08b-48a8-b375-13ea66d5b1f9 -NonStateChangingEventPortName:HostProcess-09220e70-e13e-4d23-a6c2-f98d8b49f5dd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:930da9f7-dc19-4a0e-a345-599482d67642 -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-db7eab80-062d-4cab-8597-48141bcafec4 -SystemEventPortName:HostProcess-f1e87310-70dd-4bd5-bb62-4ef031c55c69 -IoCancelEventPortName:HostProcess-4b884aab-ef2b-41ec-862e-a5e760a87fa5 -NonStateChangingEventPortName:HostProcess-d6fbad44-56ce-4838-abe2-01fa9c8204b3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:84a8d813-333d-44bd-8750-65b7447574cf -DeviceGroupId:
c:\windows\system32\svchost.exe -k networkservice
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation
c:\windows\system32\svchost.exe -k wbiosvcgroup
c:\windows\system32\svchost.exe -k localservicenonetwork
taskhostex.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Explorer.EXE
taskeng.exe {858AC7F8-491D-4792-BD37-CEF9B79A335C}
"C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe"
"C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
c:\windows\system32\svchost.exe -k utcsvc
dashost.exe {bca49e6d-bcbb-4dba-a65990fbb7eea001}
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
C:\WINDOWS\system32\valWbioSyncSvc.exe
"C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE" "C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\System32\igfxpers.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Lenovo\HOTKEY\extapsup.exe"
"C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe"
C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.MediaKey
"C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe"
C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
"C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe"
"C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe"
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe" -default
\??\C:\WINDOWS\system32\conhost.exe 0x4
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\WINDOWS\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe"
"C:\Program Files\lenovo\QuickSnipService\QuickSnipInput.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe"
"C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe"
"C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE"
C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "0x1738_0x17dc_0x6067b8bc"
"C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe"
"C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe"
"C:\Program Files\Lenovo\Communications Utility\cammute.exe"
"C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe"
"C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\37.0.2178.43\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=7900
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=gpu-process --channel="7900.0.828577860\570061293" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,15,20,30,59,78 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3277 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --ignored=" --type=renderer "
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.2.1628077780\1460174105"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.3.1859055637\962982094"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.7.453414353\1505214211"
"C:\Program Files (x86)\Opera\37.0.2178.43\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --enable-features=DownloadResumption --lang=cs --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=on --crash-reporter-pid=7908 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="7900.9.1383153627\929529106"
"C:\WINDOWS\system32\RunDll32.exe" "C:\WINDOWS\system32\WerConCpl.dll", LaunchErcApp -queuereporting
ctfmon.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe"
"C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe" ytidilav
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Users\Lukáš Dvorščák\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\9yiCGNquQB08HgjV45Fkwb9.job - C:\Users\Luk� Dvor���k\AppData\Roaming\9yiCGNquQB08HgjV45Fkwb9.exe --c=aIr6zqzhQZx1utTdohVLTg8AehuAC+3jkMPcIUnVspoMcLyRGetEmA1tcm3oc/wYsKHMSGZW3BQUPSMYmAaw58C5WsO5KAOlh108UsBgWAmGKWG7wYnLiPbkeeaZ8Ub3EWdrz93RroYtliJRVtgnB22pIOz42+7pP+MD+ZVZ2wyEqwyNLSuL3Nf071+wGxymsmfIYQ5zBn7WYjvGd6WnuvrzZfEq4L1dhzakX0MrHLRwh/8HpBhB55GD+ZO40LjfVicbTyl2Bsau4/XeezWKA79vIVpTnW7W35hPsQl5PPgjNDRmImbcIusSRaO71JYjbpQEy4PlhPiM8Krs8ilgyQ==
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-1.job - C:\Program Files (x86)\Apps Hat\Apps Hat-codedownloader.exe /rawdata=KfmK0yoeXsD1mzF4+RxuVgKScxomlCFjb1o90mYOW2lQX3lXLzwg3gicZIBheCAVLLdqVALAaG4q66SP5mBXKvX4vQaG4fN9L8NGRrRMVC3MqaIcGlpkdBKDM/axrgoY6j5ttlr2XsgncWiydLyvw3erzedesjg337rCZl/Rt1Ox7L+oyqcyFifi8dh5UHB4B9LqNzzbBbNcqYROWopJAEaB8ubuApVv8lxLLtrqQva4428ZAZLdtOqC7uHhRNtCbZ6Qi/UJWkVb48mzSVcUgpkCD7CbcDnPuT9RmNDS2v66WYxr6d3YedFee0/NoX2lHbGZHiH2VkZcOKugJre1rlDp1E4jboGWRa2ogM04DeptOTrKo5jadvJnBUBPfogiRlu29kSqGvDwDCGqTk1NMVSEKWU+vZExMRzuI+fg+GwpvFXA7Jf0VlzJjuzm8PCSZXdib9uZ4eaFGm3AGOWcGX5jNyD8uiVBIR0dhrDaGQm187zoQS16hQClXE17oD1kk8ofySiryLgz7b25jOM/rkG5zQ0MR50Qqo8ID1htwsJ61APd4Z+Li84gMUtfQ+ZiVadEiPjSHp0HGzNHbSNydhKaWhqPAJrs4th2X72mHQrNCGCXITLYZF8zKz5PJdGPldaCtjUHLFTkh87i7JlfymNCCGWevXZnj04uRpwR8UAcEPthlILB6OYZ+EdztrkI0iNOyP9zDvasD/ihsP0EG2F8VkPj8zIXLrIF+J8hjaj+/zHhyUqCdMK9H9wJau+6yLTv44iCrS/9/o0gw3JiCZ2lOyRHa65xRafUyXcDk4cOzZL6qGSQiwTXym0yWavSfP78mucyRmqb8T5wd7nFTXHBcLaN189Zx9czT0Ve9Vn5B0hd2oYBplgSUsfccLM6q8R78AP5V3071Mfvo/mEZzRkvAUVW5UjZJGG7cVk5p/g5HSx5+32o6eQCMt50hd9ooR7M+TIFcVHuNVYVfXqkfDj42wb0LHZCgBwC0WCgAyR0/KcvxrdEi55gCLi6+IhbdO0MyGzr0YJfKgWT3S1w4BKQkzZVnXL9NNi4Zx9tmxrxEW2dkPjHI+HjWbASi8WuYoVoX7pS3abaByUwQnJ0cqxt6go75jMAVRBCdVqMqpQYyETiyWdVmZ3PMpQEcPxaGv0Eo73mrFuNYgLv8jSyhDceEHGvUcVRcUSYgxzhuacTyLw5385kR6nt5yfRNvmCBY2hPmkj1rqBHDL/kU48dmY2RNLfCpRUfMsGKk6qp54d2mn6y1kiv0f+7iqMhKHM0/HFwJ21u9p2g7YKFXi84C2kkqG1s1xJWbVe/BUO56E5Rk7E2MtOdHVM9jHQB+OAUI3Qoyg7VEBAGc7C58H1w==
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-11.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-11.exe /rawdata=FuPZBWiF7K+cz1X0i7mb0KYj6KXYtFrGs806+h2BVG4jIyTD93gFipeOuT4eX8xToQeAnG5b2kuHzQvfWjS2N27tgS1DcTVXYdFFCJJgYski+RhvQxAgQH5/rc+66v70fZpx7/2J8DsurWQIIbpBE2KSLX8Pu5fD0NE20VzU0X/CrvAFmOalOIimwlwRcSzOs9zOpySdLA5TQPmcfLJpV0M7EQ8QNQJIh+cAdNueMDOTrkYOHRHjf7y373AmkY76ImGbS++qTfGAqh68xN6g0w2tSu1ODXb/CoxInNG4PYlCjwfJUNDVadgEUTl3e5/UWY8riCAtmYki2Gghx5RCNLlnOOeUCAk9bhTkuYBpXu72wge4lAF1HRiCBQ56io8TYdRr4sHUTIcEvLXOrJO3hiLP0X4Ix0LY9bNWMVQXS1/oqJ2QM2NxqNfAweoZQtrReTTyJQjIJT6f7thnjsXwNiB1vdk2b/Axk37wuG4KUuZoyOUTAEyPweUz+TQGIKwpg6nn7nyNm3zXzP+W88wMNHxZfQokPkIWJ8KUXGsocA3xPkeylp80lLBvcdDtIbPnxKp9KVMmI78WLSYPCWPO6BrBe8uIyht/KgG4f6NC9iLnw3jaSFW5mNQShNqmoiJ7edGQEm1KcC6GTMgjr6p9f4m2COlhjl33jWENhKqTxYQd5jZebcyCOQRWKZf1DujfVrNtC+/Lyx7UTT8fo8Cg7LkHMslR08hqWnaFNyDBf4N4pP5wi0aO48pORXSxdICglnuIM72TXY4Bj/+4emB6U9ED+APQqz9MMDJS+A2zwk9z49oiZnywEogzrghdyOKPYiq0G9lgWFhZm0yFgkaOjVvDSj5PSEdwThtfA9KoJYfTJFnTKMEfVDPYF3u1SLXEZ7TzglScn7hFqSzSj42fH28g1ikJO6cCeuAesX8bZPV5fg/sP93n8Pyn2x/i0qw3hNZINL6wSUIQFllOc+G8dB9C/xsa6Jh+gSuqK1yN42E4UKp3y6OJJ/x8nSzgMmR6qI8TbQMvqVaRj3J0HHTD4NR2THV1KdrttDV6oU1I3VsOVsX2uXhvP1QINOPFB1IXoGjTuRc5hnIVVyc1dY75AFr/nPpisnkQonpho3x1qEwcC4C0Y21AaJ/cDCW2YKZzrY8Dhcdy9+7iRKhXFodlp3q4URQ9I7icMC7ZDnyOhc+BpKd5HA26/zaCpF90UnLeH0RkdkONekOzHoIRdz3g/JU7V+irQJRGr8K3PWBShivj3vGTJeRu+quYedk0R9h+prcxqjjE2dtT1MXNiegAvjNTTI+K0ksQ8Dy4RyDon8Co2C3oA/9MmCPSZx8JflNPzeJg4E/FZIwVt4aMBwaWh8Z8wpCMwK6pWKKD24QvljfJKcWol//fVRqrAjG4ZfsCpc86VGZcVW1F5QNXapA2+17MjboUZ0sQBH26Wrbvi3C6FsFhyqUDNYOcB4JDflIcdIh01bnOTlNcUOfFVxEb9x25bzsMMy8pbDM2NwnCm5l4hb/WSeqknLnp+d3D7ogML57adQufpJmkCGKr6vlsP+jvrC9eLncNGnmthJW3JF8opxx5eOTuj1bOsF54wO8Bas35Y4w+qDaF5O+c1VCFH5q+BExZiOzVO/ENLL7MubiUQKlMRuxSZWVNWJZjoRsTIPZGT0m7tirEiXmjau99NaLQUim7MxDfLJq0c4vO9Sd2Nkwe8U7Dhhi+Obh+PJd6LHGHSQuQyB3ravkyZPB8ZHR4qFgIQfXCwRSH6etqXhRqtwzrBbh+XQht6ZaQ5Le+IHej4aMw2LWq+klKnME209OOQP/AciY0+aAYldmixrT2Ue7GpuvSZiYkTwoLl1hzfVtyKkTs9WK4rU00Q4yjlL5w6IjV2tRClcXUIT/TdTTUarB8ag8Y+3awm8d1N0rpjxS0H/ZnKv00zvCifWWJynjc2q0e5iOCZu3l/kFoc+NGSHqqkFIzKbKPStRLQaPOfHabYMZHVQRP3mdZ8QHdMfZbcYbBErDDeo+/csUt/X5kCTxh1RgAU3yNod02OGnxXxMt47vgXn1f/DttwvfL6upXVuZxWHLTLxreVjz9NncfkRbLQngPuxATSMuvJArsxcLF9aH3v3gKJTiqtl5oV/ndh1iwzxYVlo4EOBC8rsD8ZJW2rEQKrlZZ746GYSnXP1FWPsjLpUDHzBSIEu5xOw8y/arRonIdpQSCIJXRH10=
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-4.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-4.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5_user.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-5.exe /rawdata=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
C:\WINDOWS\tasks\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-7.job - C:\Program Files (x86)\Apps Hat\a4aaf92a-33e2-41f5-82e9-aab6fb67c8a5-7.exe /rawdata=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
C:\WINDOWS\tasks\green_game_notification_service.job - C:\Program Files (x86)\green game\green_game_notification_service.exe /url='http://cdn.selectbestopt.com/notf_sys/index.html' /crregname='green game' /appid='73143' /srcid='2913' /bic='70570d8347eacfa0d43ef900fb705348' /verifier='5c14ae1fdeeacbabfb9584831f3146cc' /installerversion='1.50.3.10' /statsdomain='http://stats.buildomserv.com/data.gif?' /errorsdomain='http://stats.buildomserv.com/data.gif?' /monetizationdomain='http://logs.buildomserv.com/monetization.gif?' /installationtime='1427905915' /runfrom='task' /brwtype='notbg' /postponedhours='6'
C:\WINDOWS\tasks\PED_Torrent_Search.job - C:\ProgramData\Torrent_Search_PED\rundll32.exe ARWOMlQ.dll,#67
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\tasks\tmptsk12694.job - C:\WINDOWS\TEMP\48559_updater.exe "/appname=Apps Hat" /appid=48559 /pubid=25286 /srcid=000820 /sdifjobif=tt1231 /minutes=30 /downloadurl=http://update.newstatsdemosrv.com/slp_u ... e-help.exe /close=true /zipfileurl=http://update.newstatsdemosrv.com/slp_u ... _camp__.7z /updaterver=10 /newpubid=30935 /newappid=65759 /runsp=false /notsys=1
C:\WINDOWS\tasks\tmptsk230.job - C:\WINDOWS\TEMP\48559_updater.exe "/appname=Apps Hat" /appid=48559 /pubid=25286 /srcid=000820 /sdifjobif=tt1231 /minutes=30 /downloadurl=http://update.newstatsdemosrv.com/slp_u ... e-help.exe /close=true /zipfileurl=http://update.newstatsdemosrv.com/slp_u ... _camp__.7z /updaterver=10 /newpubid=30935 /newappid=65759 /runsp=false /notsys=1
C:\WINDOWS\tasks\tmptsk427.job - C:\WINDOWS\TEMP\48559_updater.exe "/appname=Apps Hat" /appid=48559 /pubid=25286 /srcid=000820 /sdifjobif=tt1231 /minutes=30 /downloadurl=http://update.newstatsdemosrv.com/slp_u ... e-help.exe /close=true /zipfileurl=http://update.newstatsdemosrv.com/slp_u ... _camp__.7z /updaterver=10 /newpubid=30935 /newappid=65759 /runsp=false /notsys=1
C:\WINDOWS\tasks\Update Service for Torrent Search.job - C:\Program Files (x86)\Torrent Search\izUxoTB.exe
C:\WINDOWS\tasks\Update Service for Torrent Search2.job - C:\Program Files (x86)\Torrent Search\izUxoTB.exe
C:\WINDOWS\tasks\update-S-1-5-21-1278430734-1542720274-53049364-1002.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\WINDOWS\tasks\update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}]
TSearch - C:\Program Files (x86)\Torrent Search\IEEF\7tJrtpRaCnmQ.dll [2016-05-24 565640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-12-15 553896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-05-26 902624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-12-15 211880]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}]
TSearch - C:\Program Files (x86)\Torrent Search\IEEF\34ctNejChqUk.dll [2016-05-24 443600]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-05-26 679680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{31264A33-A653-46C4-AF49-1232C59A7DA5} -
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-08-30 391152]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-08-30 771056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-08-30 769520]
"LenovoOptMouseUpdate"=C:\Program Files\Lenovo\HOTKEY\extapsup.exe [2013-06-21 255480]
"LnvMobHotspotClient"=C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2013-05-29 937976]
"LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2013-06-21 594936]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-06-04 2985712]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"BingSvc"=C:\Users\Lukáš Dvorščák\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-12-05 144008]
"Spotify Web Helper"=C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-05-26 1525360]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2013-05-14 552960]
"Fastboot"=C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2013-12-25 738032]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2016-03-10 839648]
"Lightshot"=C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [2014-10-16 226560]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-05-26 7400576]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-08-20 622080]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-05-30 13:44:40 ----D---- C:\rsit
2016-05-30 13:44:40 ----D---- C:\Program Files\trend micro
2016-05-30 11:52:31 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\Opera Software
2016-05-30 11:50:35 ----D---- C:\Program Files (x86)\Opera
2016-05-26 21:09:15 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2016-05-26 21:09:00 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-05-26 21:08:36 ----A---- C:\WINDOWS\avastSS.scr
2016-05-24 17:50:46 ----D---- C:\ProgramData\Torrent_Search_PED
2016-05-18 22:06:21 ----A---- C:\WINDOWS\SYSWOW64\vp6vfw.dll
2016-05-11 15:07:10 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2016-05-11 15:07:09 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2016-05-11 15:04:22 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-05-11 15:04:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-05-11 15:04:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-05-11 15:04:01 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-05-11 15:03:59 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-05-11 15:03:57 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-05-11 15:03:55 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-05-11 15:03:55 ----A---- C:\WINDOWS\system32\wininet.dll
2016-05-11 15:03:51 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-05-11 15:03:49 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-05-11 15:03:48 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-05-11 15:03:48 ----A---- C:\WINDOWS\system32\jscript.dll
2016-05-11 15:03:47 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-05-11 15:03:46 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-05-11 15:03:46 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-05-11 15:03:45 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-05-11 15:03:45 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-05-11 15:03:42 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-05-11 15:03:42 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-05-11 15:03:41 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-05-11 15:03:41 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-05-11 15:03:40 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-05-11 15:03:39 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-05-11 15:03:38 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-05-11 15:03:38 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-05-11 15:03:36 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-05-11 15:03:36 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-05-11 15:01:51 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\schannel.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-05-11 15:01:50 ----A---- C:\WINDOWS\system32\certcli.dll
2016-05-11 15:01:39 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-05-11 15:01:38 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-05-11 15:01:38 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-11 15:01:13 ----A---- C:\WINDOWS\SYSWOW64\dsparse.dll
2016-05-11 15:01:13 ----A---- C:\WINDOWS\system32\dsparse.dll
2016-05-11 15:01:11 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2016-05-11 15:01:11 ----A---- C:\WINDOWS\system32\shacct.dll
2016-05-11 15:01:09 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2016-05-11 15:01:09 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-05-11 15:01:08 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-05-11 15:01:07 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-05-11 15:01:07 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-05-11 15:01:07 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2016-05-11 15:00:59 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-05-11 15:00:59 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-05-11 15:00:59 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-05-11 15:00:43 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-05-11 15:00:43 ----A---- C:\WINDOWS\system32\webio.dll
2016-05-11 15:00:43 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-05-11 15:00:42 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2016-05-11 15:00:42 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2016-05-11 15:00:17 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2016-05-11 15:00:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-05-11 15:00:09 ----A---- C:\WINDOWS\system32\win32k.sys
2016-05-02 18:59:15 ----D---- C:\Program Files (x86)\AGEIA Technologies
======List of files/folders modified in the last 1 month======
2016-05-30 13:44:40 ----RD---- C:\Program Files
2016-05-30 13:44:28 ----D---- C:\WINDOWS\Temp
2016-05-30 13:41:51 ----D---- C:\WINDOWS\Microsoft.NET
2016-05-30 13:17:53 ----D---- C:\WINDOWS\Prefetch
2016-05-30 13:05:32 ----D---- C:\WINDOWS\system32\sru
2016-05-30 11:58:36 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-05-30 11:55:51 ----D---- C:\WINDOWS\Inf
2016-05-30 11:55:40 ----D---- C:\ProgramData\Validity
2016-05-30 11:55:20 ----D---- C:\Windows
2016-05-30 11:52:22 ----D---- C:\WINDOWS\system32\Tasks
2016-05-30 11:50:35 ----RD---- C:\Program Files (x86)
2016-05-30 11:46:53 ----D---- C:\WINDOWS\SoftwareDistribution
2016-05-30 11:46:53 ----D---- C:\WINDOWS\Logs
2016-05-30 11:46:53 ----D---- C:\WINDOWS\debug
2016-05-30 11:45:54 ----D---- C:\Program Files (x86)\Google
2016-05-30 11:45:37 ----D---- C:\WINDOWS\Tasks
2016-05-30 11:45:36 ----SHD---- C:\WINDOWS\Installer
2016-05-30 11:45:36 ----SHD---- C:\Config.Msi
2016-05-30 11:40:40 ----D---- C:\Games
2016-05-30 10:44:49 ----D---- C:\WINDOWS\AppReadiness
2016-05-29 19:21:37 ----D---- C:\WINDOWS\system32\config
2016-05-29 19:18:43 ----D---- C:\WINDOWS\system32\DriverStore
2016-05-29 18:36:12 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\Skype
2016-05-28 23:27:14 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\vlc
2016-05-28 17:36:49 ----D---- C:\WINDOWS\WinSxS
2016-05-27 17:54:09 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\Spotify
2016-05-27 10:54:32 ----D---- C:\WINDOWS\SysWOW64
2016-05-27 10:16:53 ----D---- C:\WINDOWS\system32\drivers
2016-05-26 21:09:00 ----D---- C:\WINDOWS\System32
2016-05-26 21:08:46 ----D---- C:\ProgramData\AVAST Software
2016-05-26 21:08:24 ----D---- C:\Program Files\AVAST Software
2016-05-26 19:27:56 ----SHD---- C:\System Volume Information
2016-05-26 19:10:58 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2016-05-26 19:10:58 ----SD---- C:\WINDOWS\system32\GWX
2016-05-26 19:10:47 ----D---- C:\WINDOWS\CbsTemp
2016-05-24 17:50:46 ----HD---- C:\ProgramData
2016-05-24 17:50:46 ----D---- C:\Program Files (x86)\Torrent Search
2016-05-23 08:31:23 ----D---- C:\WINDOWS\SYSWOW64\NV
2016-05-23 08:31:23 ----D---- C:\WINDOWS\system32\NV
2016-05-23 08:31:15 ----D---- C:\ProgramData\NVIDIA
2016-05-22 13:15:47 ----D---- C:\WINDOWS\Minidump
2016-05-19 17:33:04 ----HD---- C:\Program Files\WindowsApps
2016-05-16 09:50:49 ----RSD---- C:\WINDOWS\assembly
2016-05-13 11:25:34 ----D---- C:\WINDOWS\rescache
2016-05-13 09:23:07 ----D---- C:\WINDOWS\system32\NDF
2016-05-12 09:54:54 ----D---- C:\WINDOWS\system32\appraiser
2016-05-11 22:57:34 ----D---- C:\WINDOWS\SYSWOW64\wbem
2016-05-11 22:57:34 ----D---- C:\WINDOWS\system32\wbem
2016-05-11 22:57:34 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-05-11 22:57:33 ----D---- C:\Program Files\Internet Explorer
2016-05-11 22:57:33 ----D---- C:\Program Files (x86)\Internet Explorer
2016-05-11 22:57:31 ----D---- C:\WINDOWS\system32\cs-CZ
2016-05-11 22:57:29 ----D---- C:\Program Files\Windows Journal
2016-05-11 22:08:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-05-11 15:55:56 ----D---- C:\ProgramData\Microsoft Help
2016-05-11 15:54:33 ----D---- C:\WINDOWS\system32\MRT
2016-05-11 15:43:11 ----A---- C:\WINDOWS\system32\MRT.exe
2016-05-11 15:42:16 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-05-11 14:59:13 ----D---- C:\WINDOWS\system32\catroot2
2016-05-11 14:58:28 ----A---- C:\WINDOWS\system32\winresume.exe
2016-05-11 14:58:28 ----A---- C:\WINDOWS\system32\winload.exe
2016-05-09 15:21:36 ----D---- C:\Users\Lukáš Dvorščák\AppData\Roaming\uTorrent
2016-05-05 11:10:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-05-03 12:33:36 ----D---- C:\Program Files (x86)\Ubisoft
2016-05-02 18:59:15 ----D---- C:\Program Files (x86)\NVIDIA Corporation
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-05-26 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-05-26 287528]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-07-24 666984]
R0 IntelHSWPcc;IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [2013-05-23 101976]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-05-26 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-05-26 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-05-26 1070904]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-05-26 465792]
R1 dtsoftbus01;@oem24.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-09-27 283064]
R1 iSafeKrnl;YAC Mini-Filter Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [2015-05-14 260856]
R1 iSafeKrnlKit;YAC Kit Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [2016-04-08 110112]
R1 iSafeKrnlMon;YAC Monitor Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [2016-04-08 52440]
R1 iSafeKrnlR3;YAC Ring3 Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [2016-04-08 103904]
R1 iSafeNetFilter;iSafeNetFilter; C:\WINDOWS\system32\DRIVERS\iSafeNetFilter.sys [2015-06-30 52392]
R1 SMIDriver;SMIDriver; C:\WINDOWS\system32\drivers\smi.sys [2014-07-21 19760]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwr64v.sys [2013-07-05 20736]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-05-26 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-05-26 107792]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 bcbtums;@oem36.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BCM42RLY;BCM42RLY; C:\WINDOWS\system32\drivers\BCM42RLY.sys [2013-12-25 23760]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2013-07-01 8536752]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 btwampfl;@oem36.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-09-04 166104]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2013-04-18 44800]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-08-20 4165120]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-08-01 3565528]
R3 iwdbus;@oem35.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-08 26008]
R3 MEIx64;@oem15.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-07-03 64624]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-26 11311392]
R3 RTL8168;@oem13.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-04-10 801864]
R3 SensorsSimulatorDriver;@oem67.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-10-29 226304]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-06-04 33008]
R3 SynTP;@oem22.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-06-04 532720]
S2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-05-26 166432]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-09-24 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 btwaudio;@oem6.inf,%btaudio.SvcDesc%;Bluetooth Audio Device Service; C:\WINDOWS\system32\drivers\btwaudio.sys [2013-04-24 186584]
S3 btwavdt;@oem6.inf,%btwavdt.SvcDesc%;Bluetooth AVDT; C:\WINDOWS\System32\drivers\btwavdt.sys [2013-04-24 228568]
S3 btwl2cap;@oem9.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys [2012-07-27 40248]
S3 btwpanfl;BTW PAN filter driver; \??\C:\WINDOWS\system32\drivers\btwpanfl.sys [2013-01-20 44912]
S3 btwrchid;btwrchid; C:\WINDOWS\System32\drivers\btwrchid.sys [2013-04-24 22744]
S3 dg_ssudbus;@oem62.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\fastboot.sys [2013-12-25 66288]
S3 GemCCID;GemCCID; C:\WINDOWS\system32\DRIVERS\GemCCID.sys [2014-11-10 130944]
S3 intaud_WaveExtensible;@oem34.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-08 39320]
S3 IntcDAud;@oem3.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-08-20 449528]
S3 iSafeKrnlBoot;YAC Boot Driver; C:\WINDOWS\system32\DRIVERS\iSafeKrnlBoot.sys [2016-04-08 55056]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RSUSBSTOR;@oem23.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2013-06-15 262872]
S3 ssudmdm;@oem63.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem64.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-05-26 243296]
R2 Bonjour Service;Xamarin Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [2015-09-30 384512]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2013-05-06 958680]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2013-12-25 140016]
R2 IBMPMSVC;@oem26.inf,%ibm.svcDesc0%;Lenovo PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2013-04-18 61224]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-12 733696]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-07-03 131544]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2015-02-05 22744]
R2 iSafeService;YAC Service; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [2016-04-08 118048]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-07-03 169432]
R2 Lenovo QuickSnip Service;Lenovo QuickSnip Service; C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe [2013-06-06 219976]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [2013-06-06 562504]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2012-08-11 136288]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-07-03 366552]
R2 LnvHotSpotSvc;LnvMHService; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [2013-05-29 465912]
R2 LocationTaskManager;Location Task Manager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [2013-04-19 463352]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-10-29 920864]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2015-10-02 75136]
R2 QuickControlMasterSvc;Lenovo QuickControl Master Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [2013-07-17 59384]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-02-21 134336]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2014-06-10 124400]
R2 ValBioService;ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [2014-07-21 22872]
R2 valWBFPolicyService;@oem25.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service; C:\WINDOWS\system32\valWBFPolicyService.exe [2014-07-21 49040]
R2 valWbioSyncSvc;@oem25.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization; C:\WINDOWS\system32\valWbioSyncSvc.exe [2014-07-21 32256]
R3 AVControlCenter;AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [2013-06-21 148984]
R3 Lenovo Settings Service;Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2013-04-20 2037240]
R3 LENOVO.CAMMUTE;Lenovo AVFramework Camera Privacy Controller; C:\Program Files\Lenovo\Communications Utility\cammute.exe [2013-06-21 511992]
R3 LENOVO.TPKNRSVC;Lenovo AVFramework Microphone Volume Controller and Dolby Interface; C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe [2013-06-21 511992]
R3 LENOVO.TVTVCAM;Lenovo AVFramework Virtual Camera Controller Service; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [2013-06-21 683000]
R3 Power Manager DBC Service;Lenovo Settings Power Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2013-07-05 1668904]
R3 QuickControlService;Lenovo QuickControl Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [2013-07-17 138232]
S2 BcmBtRSupport;@oem36.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-09-04 2252504]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-12-10 51376]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-08-30 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-12 822232]
S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2013-07-26 54976]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25 178312]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [2015-06-08 625648]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2014-10-16 272776]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-04-19 2119688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-03-31 835664]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2014-06-18 24560]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [2015-11-19 137216]
S4 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2014-04-07 110128]
-----------------EOF-----------------