Nový log z RSIT
Logfile of random's system information tool 1.16 (written by random/random)
Run by Otakar Vavrečka at 2017-12-16 20:22:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 22 GB (14%) free of 158 GB
Total RAM: 3066 MB (52% free)
X86
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:22:57, on 16.12.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\GLPCCamera\monitorpad.exe
C:\Windows\System32\MSTMON_N.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Otakar Vavrečka\AppData\Local\Seznam.cz\bin\postak.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Otakar Vavrečka\AppData\Local\Viber\Viber.exe
C:\Program Files\Mamemail\Mamemail Postak\Postak.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Otakar Vavrečka\Desktop\RSIT.exe
C:\Program Files\trend micro\Otakar Vavrečka_RSIT.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GLSystray] C:\Program Files\GLPCCamera\monitorpad.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1300WStatusDisplay] C:\Windows\system32\MSTMON_N.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\ecmdS.exe" /launch /hide
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Users\Otakar Vavrečka\AppData\Local\Seznam.cz\bin\postak.exe" -s
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [VycistitPocitac4] "C:\Program Files\VyčistitPočítač4\vp4.exe" /SCHEDULED
O4 - HKCU\..\Run: [Viber] "C:\Users\Otakar Vavrečka\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - Startup: Mámemail Pošťák.lnk = C:\Program Files\Mamemail\Mamemail Postak\Postak.exe
O8 - Extra context menu item: Free YouTube Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone:
http://help.eset.com (HKLM)
O15 - ESC Trusted Zone:
http://help.eset.com (HKLM)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4703 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\DriverCure Startup - C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe -tray
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore1cf6a811f49157b - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA1cf8b84abba174e - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\Replay Media Catcher 5 6c9010b1-62d5-4d93-8351-7c593cf756ca - C:\Program Files\Applian Technologies\Replay Media Catcher 5\jrmcp.exe --task=6c9010b1-62d5-4d93-8351-7c593cf756ca
C:\Windows\system32\tasks\Replay Media Catcher 5 837966d0-c273-42b8-9c4d-973ff1be780e - C:\Program Files\Applian Technologies\Replay Media Catcher 5\jrmcp.exe --task=837966d0-c273-42b8-9c4d-973ff1be780e
C:\Windows\system32\tasks\{0008BE56-C856-44F1-826D-C36F64BB1287} - C:\Windows\system32\pcalua.exe -a "C:\Users\Otakar Vavrečka\Desktop\irfanviewcestina.exe" -d "C:\Users\Otakar Vavrečka\Desktop"
C:\Windows\system32\tasks\{068453C5-3191-4ADA-B908-C38F8F14D343} - C:\Windows\system32\pcalua.exe -a "C:\Users\Otakar Vavrečka\Desktop\irfanview_plugins_437_setup.exe" -d "C:\Users\Otakar Vavrečka\Desktop"
C:\Windows\system32\tasks\{110C381A-5642-470B-A060-54393638CE8D} - C:\Users\Otakar Vavrečka\Desktop\dotNetFx35setup.exe
C:\Windows\system32\tasks\{11AB4839-9909-4AA7-AD14-EA2EAFA4D911} - C:\Program Files\Free Audio Pack\Easy Audio Cutter\AudioCutter.exe
C:\Windows\system32\tasks\{13FBC005-0AF3-4F20-9DF1-36508DE5DFDB} - C:\Users\Otakar Vavrečka\Desktop\MP3SkypeRecorderSetup.exe
C:\Windows\system32\tasks\{142BAA19-9C0E-4940-AD01-37838C9BCCD2} - C:\Windows\system32\pcalua.exe -a "H:\HP ProBook 4710s\Programy\irfanview_lang_czech.exe" -d "H:\HP ProBook 4710s\Programy"
C:\Windows\system32\tasks\{1F3A9C16-7D5A-43D2-B156-63EEC906B679} - C:\Users\Otakar Vavrečka\Desktop\postak-ff-2.5.1.exe
C:\Windows\system32\tasks\{2BB4CBEF-9D48-4749-958E-6EE6D4E39FB8} - C:\Windows\system32\pcalua.exe -a "H:\HP ProBook 4710s\Programy\iview420_setup.exe" -d "H:\HP ProBook 4710s\Programy"
C:\Windows\system32\tasks\{3A84B831-9645-466B-AF28-4E8BC64EBB57} - C:\Program Files\Oracle\VirtualBox\VirtualBox.exe
C:\Windows\system32\tasks\{3DCF8AC0-DA6C-4053-A69A-17CDB994687B} - C:\Windows\system32\pcalua.exe -a "D:\Technické informace\vtrafo_sk.exe" -d C:\Windows\system32
C:\Windows\system32\tasks\{4377EADB-F2F3-4484-B7AB-4681C56FD068} - C:\Users\Otakar Vavrečka\Desktop\dotNetFx35setup.exe
C:\Windows\system32\tasks\{541CA25C-9E68-47EB-92EB-5DA80B6CA7B0} - C:\Windows\system32\pcalua.exe -a D:\Programy-1\irfanview_lang_czech.exe -d C:\Windows\system32
C:\Windows\system32\tasks\{55F4FB0D-4BF7-4555-B96A-4CF6E3A69CA0} - C:\Program Files\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe
C:\Windows\system32\tasks\{61618E6E-6896-40BD-9067-11233F76E6BD} - C:\Windows\system32\pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller Pro"
C:\Windows\system32\tasks\{61B6B0A7-4511-4901-8DB8-333244336D38} - C:\Windows\system32\pcalua.exe -a "C:\Users\Otakar Vavrečka\Desktop\irfanview_plugins_428_setup.exe" -d "C:\Users\Otakar Vavrečka\Desktop"
C:\Windows\system32\tasks\{7478DCFE-FF91-47C5-9F7A-ED2100B4BE61} - C:\Program Files\MP3 Skype Recorder\MP3 Skype Recorder.exe
C:\Windows\system32\tasks\{78E18393-85E9-44A2-8555-42F0B555C029} - C:\Windows\system32\pcalua.exe -a "H:\HP ProBook 4710s\Programy\irfanviewcestina.exe" -d "C:\Program Files\Mozilla Firefox"
C:\Windows\system32\tasks\{8895351E-60C9-4702-A806-956922D6BED9} - C:\Windows\system32\pcalua.exe -a D:\Programy-1\DISK1\instmsiw.exe -d D:\Programy-1\DISK1
C:\Windows\system32\tasks\{908E8E1E-34BB-4E25-AD7D-659690B567CE} - C:\Windows\system32\pcalua.exe -a F:\fscommand\Axesstel_setup.exe -d F:\fscommand
C:\Windows\system32\tasks\{98A70D07-498F-4BC2-AF84-3310688F2CFE} - C:\Program Files\GIMP-2.0\bin\gimp-2.6.exe
C:\Windows\system32\tasks\{9B039347-33BD-49D9-80C0-367F2A397655} - C:\Program Files\GIMP-2.0\bin\gimp-2.6.exe
C:\Windows\system32\tasks\{9D52FDE3-F20B-4686-8DD0-2EBF00DB6704} - C:\Program Files\LibreOffice 3\program\soffice.exe
C:\Windows\system32\tasks\{A69F86CE-B4FE-4FF5-993F-0B71EB47E6DB} - C:\Windows\system32\pcalua.exe -a "D:\Programy-1\irfanview_lang_czech-Pro verzi 4.30.exe" -d D:\Programy-1
C:\Windows\system32\tasks\{B3A2F1D8-3678-4AE8-A095-EB4347B4A183} - C:\Windows\system32\pcalua.exe -a D:\Programy-1\ScreenShots.exe -d D:\Programy-1
C:\Windows\system32\tasks\{B826E4A4-24ED-4F5A-97A7-8F68847BCD73} - C:\Users\Otakar Vavrečka\Desktop\JDownloaderSetup.exe
C:\Windows\system32\tasks\{BD8B9751-91CF-4733-8234-8642163D0119} - C:\Program Files\Skype\\Phone\Skype.exe
C:\Windows\system32\tasks\{C604AE1E-7C34-4608-A678-595AF7F1A99C} - C:\Windows\system32\pcalua.exe -a D:\Programy-1\DISK1.exe -d "C:\Program Files\Mozilla Firefox"
C:\Windows\system32\tasks\{CAE32497-34EF-4452-840C-6F4750A66D63} - C:\Windows\system32\pcalua.exe -a "C:\Users\Otakar Vavrečka\Desktop\irfanview_lang_czech.exe" -d "C:\Users\Otakar Vavrečka\Desktop"
C:\Windows\system32\tasks\{D1CF8CA1-868F-4B6C-921C-972E5CB37228} - C:\Windows\system32\pcalua.exe -a "D:\Programy-1\DISK1(Návrh jednofázových síťových transformátorů).exe" -d D:\Programy-1
C:\Windows\system32\tasks\{DB39F503-5081-4645-94B0-FE40C9C0E720} - D:\Programy-1\MP3SkypeRecorderSetup.exe
C:\Windows\system32\tasks\{E84A7D35-4C89-405E-B541-1ED3B040A08F} - C:\Windows\system32\pcalua.exe -a "C:\Program Files\Alwil Software\Avast5\aswRunDll.exe" -c "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
C:\Windows\system32\tasks\{EDA0F073-4ABE-443A-B014-97165BCDDC37} - C:\Windows\system32\pcalua.exe -a "C:\Users\Otakar Vavrečka\Desktop\iview428_setup.exe" -d "C:\Users\Otakar Vavrečka\Desktop"
C:\Windows\system32\tasks\{F0150743-E3C6-4235-96B0-40D74873D707} - C:\Users\Otakar Vavrečka\Desktop\JDownloaderSetup.exe
C:\Windows\system32\tasks\{F3CE23B2-382B-4090-99F1-EB7797659BA4} - C:\Windows\system32\pcalua.exe -a "H:\HP ProBook 4710s\Programy\iview428_setup.exe" -d "C:\Program Files\Mozilla Firefox"
C:\Windows\system32\tasks\{FF406F8A-6A3E-44F5-95D2-358E780EBEB1} - C:\Program Files\MP3 Skype Recorder\MP3 Skype Recorder.exe
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-505298747-3480647553-2469496864-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup - %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor - %systemroot%\system32\sdclt.exe /CHECKSKIPPED
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\Lpksetup - C:\Windows\System32\lpksetup.exe -v
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\MUI\Mcbuilder - C:\Windows\System32\mcbuilder.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate_scheduled - %SystemRoot%\ehome\mcupdate -crl -hms -pscn 15
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\91phxdze.default-1494695803407
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 22.0.0.209 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/MycameraPlugin]
"Description"=
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.73.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.73.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\91phxdze.default-1494695803407\addons.json
C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\91phxdze.default-1494695803407\extensions.json
Multi-process staged rollout - extension -
e10srollout@mozilla.org - C:\Program Files\Mozilla Firefox\browser\features\
e10srollout@mozilla.org.xpi
Pocket - extension -
firefox@getpocket.com - C:\Program Files\Mozilla Firefox\browser\features\
firefox@getpocket.com.xpi
Firefox Hello - extension -
loop@mozilla.org - C:\Program Files\Mozilla Firefox\browser\features\
loop@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\91phxdze.default-1494695803407\pluginreg.dat
Plugin - Adobe Acrobat - 18.9.20044.55097 - C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
Plugin - VLC Web Plugin - 2.2.6.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll
Plugin - Google Update - 1.3.33.7 - C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll
Plugin - Silverlight Plug-In - 5.1.50907.0 - c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll
Plugin - Java(TM) Platform SE 8 U73 - 11.73.2.2 - C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.730.2 - 11.73.2.2 - C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npdeployJava1.dll
Plugin - Shockwave Flash - 22.0.0.209 - C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll
Plugin - Google Update - 1.3.28.13 - C:\Users\Otakar Vavrečka\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll
Plugin - Google Talk Plugin - 5.41.2.0 - C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
Plugin - Google Talk Plugin Video Renderer - 5.41.2.0 - C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\plugins\npo1d.dll
=========Google Chrome=========
C:\Users\Otakar Vavrečka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Store 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension bgjpfhpjcgdppjbgnpnjllokbmcdllig 1 Seznam pro Chrome - Email 4.0.13
Extension blmojkbhnkkphngknkmgccmlenfaelkd 0 Seznam pro Chrome - Esko- 4.0.13
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Vyhledávání Google 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 1 Adobe Acrobat 15.1.0.6
Extension ennkphjdgehloodpbhlhldgbnhmacadg Settings 0.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 1 Avast Online Security 12.0.296
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension ljjjecfkodpceolgcjgojpaffaehjdhn 0 Fast Music Search 5.0.0
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension ncdfeinlpefandfngbdmdgjgepebkjap 0 IMPI 2.0.0.429
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.5
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension olfeabkoenfaoljndfecamgilllcpiak 0 Seznam pro Chrome - Esko 4.0.13
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh Google Now 1.2.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6317.1002.0.5
Homepage:
http://www.google.com
default_search_provider.search_url:
C:\Users\Otakar Vavrečka\AppData\Local\Google\Chrome\User Data\Default\Preferences
Plugin 11.5.31.137 Shockwave Flash C:\Program Files\Google\Chrome\Application\63.0.3239.84\PepperFlash\pepflashplayer.dll
Plugin Chrome Remote Desktop Viewer internal-remoting-viewer
Plugin Native Client C:\Program Files\Google\Chrome\Application\63.0.3239.84\ppGoogleNaClPluginChrome.dll
Plugin Chrome PDF Viewer C:\Program Files\Google\Chrome\Application\63.0.3239.84\pdf.dll
Plugin 10.1.3.23 Adobe Acrobat C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
Plugin 1.0.0.8 Microsoft Windows Media Player Firefox Plugin C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
Plugin 2.9.10.7526 Google Talk Plugin C:\Users\Otakar Vavreka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
Plugin 0,1,44,15 Google Talk Plugin Video Accelerator C:\Users\Otakar Vavreka\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
Plugin 6.1.0.5001 Google Earth Plugin C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
Plugin 1.3.21.135 Google Update C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
Plugin 10.5.1.255 Java(TM) Platform SE 7 U5 C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
Plugin 11,3,300,257 Shockwave Flash C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_257.dll
Plugin 10.5.1.255 Java Deployment Toolkit 7.0.50.255 C:\Windows\system32\npDeployJava1.dll
Plugin 4.0.60310.0 Silverlight Plug-In c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
Homepage:
default_search_provider.search_url:
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-10 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-10 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GLSystray"=C:\Program Files\GLPCCamera\monitorpad.exe [2014-03-11 69632]
"KONICA MINOLTA PagePro 1300WStatusDisplay"=C:\Windows\system32\MSTMON_N.EXE [2004-11-25 151552]
"egui"=C:\Program Files\ESET\ESET Smart Security\ecmdS.exe [2017-10-21 297592]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Seznam Postak"=C:\Users\Otakar Vavrečka\AppData\Local\Seznam.cz\bin\postak.exe [2012-01-10 491040]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-10-29 4826904]
"VycistitPocitac4"=C:\Program Files\VyčistitPočítač4\vp4.exe [2017-02-22 568376]
"Viber"=C:\Users\Otakar Vavrečka\AppData\Local\Viber\Viber.exe [2017-07-20 31348816]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2014-10-29 4826904]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Otakar Vavrečka\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Otakar Vavrečka\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hppwrsav]
C:\SCANJET\PrecisionScanLT\hppwrsav.exe [1999-06-07 23552]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KONICA MINOLTA PagePro 1300WStatusDisplay]
C:\Windows\system32\MSTMON_N.EXE [2004-11-25 151552]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KONICA MINOLTA PagePro 1400W STD]
C:\Windows\system32\MSTMON_Y.EXE [2006-03-01 184320]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MP3 Skype Recorder]
C:\Users\Otakar Vavrečka\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe [2015-11-13 2216600]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC7302_Monitor]
C:\Windows\PixArt\PAC7302\Monitor.exe [2006-11-03 319488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seznam Postak]
C:\Users\Otakar Vavrečka\AppData\Local\Seznam.cz\bin\postak.exe [2012-01-10 491040]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Viber]
C:\Users\Otakar Vavrečka\AppData\Local\Viber\Viber.exe [2017-07-20 31348816]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ImageBrowser EX Agent.lnk]
C:\PROGRA~1\Canon\IMAGEB~1\MFMANA~1.EXE [2013-01-29 69120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Otakar Vavrečka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Mámemail Pošťák.lnk]
C:\PROGRA~1\Mamemail\MAMEMA~1\Postak.exe [2015-04-13 740352]
C:\Users\Otakar Vavrečka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Mámemail Pošťák.lnk - C:\Program Files\Mamemail\Mamemail Postak\Postak.exe
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath"="C:\Program Files\Google\Chrome\Application\63.0.3239.84\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{A6EADE66-0000-0000-484E-7E8A45000000}]
"StubPath"="C:\Windows\system32\Rundll32.exe" "C:\Program Files\Adobe\Acrobat Reader DC\Esl\AiodLite.dll",CreateReaderUserSettings
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2017-12-16 19:16:23 ----AC---- C:\Windows\ntbtlog.txt
2017-12-16 08:36:28 ----A---- C:\Windows\system32\mshtml.dll
2017-12-16 08:36:26 ----A---- C:\Windows\system32\ieframe.dll
2017-12-16 08:36:25 ----A---- C:\Windows\system32\win32k.sys
2017-12-16 08:36:25 ----A---- C:\Windows\system32\jscript9.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\vbscript.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\urlmon.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\rtm.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-12-16 08:36:24 ----A---- C:\Windows\system32\msfeeds.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\mprdim.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\jscript.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\itss.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\itircl.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\iprtrmgr.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\iedkcs32.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\gpedit.dll
2017-12-16 08:36:24 ----A---- C:\Windows\system32\drivers\rdbss.sys
2017-12-16 08:36:23 ----A---- C:\Windows\system32\wininet.dll
2017-12-16 08:36:23 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-12-16 08:36:23 ----A---- C:\Windows\system32\iprtprio.dll
2017-12-16 08:36:23 ----A---- C:\Windows\system32\iertutil.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\webcheck.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\occache.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\msrating.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\jsproxy.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\jscript9diag.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\ieUnatt.exe
2017-12-16 08:36:22 ----A---- C:\Windows\system32\ieui.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-12-16 08:36:22 ----A---- C:\Windows\system32\ieapfltr.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\tzres.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\mshtmled.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\inseng.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\iesetup.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\iernonce.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-12-16 08:36:16 ----A---- C:\Windows\system32\ie4uinit.exe
2017-12-16 08:36:16 ----A---- C:\Windows\system32\dxtrans.dll
2017-12-16 08:36:16 ----A---- C:\Windows\system32\dxtmsft.dll
2017-12-16 08:36:14 ----A---- C:\Windows\system32\ieetwcollectorres.dll
======List of files/folders modified in the last 1 month======
2017-12-16 20:22:14 ----DC---- C:\Program Files\trend micro
2017-12-16 20:22:13 ----DC---- C:\Windows\temp
2017-12-16 20:18:47 ----DC---- C:\AdwCleaner
2017-12-16 20:17:36 ----DC---- C:\Users\Otakar Vavrečka\AppData\Roaming\ViberPC
2017-12-16 20:16:56 ----DC---- C:\Windows\system32\config
2017-12-16 19:16:23 ----DC---- C:\Windows
2017-12-16 18:40:02 ----DC---- C:\Users\Otakar Vavrečka\AppData\Roaming\uTorrent
2017-12-16 18:37:07 ----DC---- C:\Windows\Prefetch
2017-12-16 17:19:24 ----DC---- C:\Windows\Tasks
2017-12-16 17:19:24 ----DC---- C:\Windows\system32\wfp
2017-12-16 17:19:24 ----DC---- C:\Windows\system32\catroot2
2017-12-16 17:19:24 ----D---- C:\Windows\system32\DriverStore
2017-12-16 17:19:22 ----DC---- C:\Windows\system32\CodeIntegrity
2017-12-16 17:19:22 ----DC---- C:\Windows\inf
2017-12-16 17:19:22 ----D---- C:\Windows\servicing
2017-12-16 17:19:21 ----DC---- C:\Program Files\Common Files\microsoft shared
2017-12-16 17:18:57 ----DC---- C:\Windows\registration
2017-12-16 11:58:52 ----DC---- C:\rsit
2017-12-16 08:50:26 ----D---- C:\Windows\winsxs
2017-12-16 08:47:59 ----DC---- C:\Program Files\Internet Explorer
2017-12-16 08:47:58 ----DC---- C:\Windows\system32\Setup
2017-12-16 08:47:58 ----DC---- C:\Windows\system32\en-US
2017-12-16 08:47:58 ----DC---- C:\Windows\system32\cs-CZ
2017-12-16 08:47:58 ----ADC---- C:\Windows\System32
2017-12-16 08:47:54 ----DC---- C:\Windows\system32\drivers
2017-12-16 08:45:20 ----DC---- C:\Windows\system32\MRT
2017-12-16 08:40:00 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-12-16 08:39:48 ----AC---- C:\Windows\system32\MRT.exe
2017-12-16 08:37:58 ----SHD---- C:\System Volume Information
2017-12-16 08:20:51 ----DC---- C:\Windows\Minidump
2017-12-12 19:08:33 ----DC---- C:\Windows\system32\wbem
2017-12-12 19:08:32 ----DC---- C:\Users\Otakar Vavrečka\AppData\Roaming\vlc
2017-12-12 19:08:32 ----DC---- C:\Users\Otakar Vavrečka\AppData\Roaming\IrfanView
2017-12-12 19:08:13 ----DC---- C:\Users\Otakar Vavrečka\AppData\Roaming\Skype
2017-12-02 18:05:06 ----SHDC---- C:\Windows\Installer
2017-12-01 07:32:12 ----AC---- C:\Windows\system32\PerfStringBackup.INI
2017-11-30 10:52:27 ----D---- C:\Windows\rescache
File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-05-04 90656]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2013-06-03 46096]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2013-05-09 21576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-10-21 113544]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-10-21 141480]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-05-04 69304]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-05-04 52680]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-10-21 87528]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-05-04 43920]
R2 npf;NetGroup Packet Filter Driver; \??\C:\Windows\system32\drivers\npf.sys [2015-08-21 36600]
R3 5U876UVC;HP Webcam [2 MP series]; C:\Windows\system32\DRIVERS\5U876.sys [2009-11-13 114688]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2013-09-26 4268608]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 MLPTDR_N;MLPTDR_N; \??\C:\Windows\system32\MLPTDR_N.SYS [2003-07-18 18848]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 94208]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2016-10-04 96464]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2016-10-04 74864]
S3 glavcam;GL USB2.0 UVC Camera Device; C:\Windows\system32\DRIVERS\glavcam.sys [2017-02-20 1475584]
S3 PAC7302;PAC7302 VGA USB Camera; C:\Windows\system32\DRIVERS\PAC7302.SYS [2007-06-14 457856]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 Ser2plx86;Prolific Serial port WDF driver; C:\Windows\system32\DRIVERS\ser2pl.sys []
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2015-03-02 115672]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2017-10-21 2089176]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-03 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-06-01 317400]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-03 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-12-16 104960]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-23 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-13 270016]
S4 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
S4 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
S4 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
S4 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
S4 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 26168]
S4 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-12-11 89864]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-11 146888]
S4 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
