VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by adminlukas at 2018-06-07 21:42:57
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 333 GB (48%) free of 692 GB
Total RAM: 3980 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:43:04, on 7.6.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18525)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\windows\CCM\SCNotification.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2launcher.exe
C:\Program Files\trend micro\adminlukas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [89274] wscript.exe //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 89274.tmp.vbs
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\PROGRA~2\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Poslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Poslat do On&eNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CCS\Services\Tcpip\..\{9223D93B-7400-441E-A964-CBCFA36AD5D5}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 16131 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\Hpservice.exe
C:\windows\system32\vcsFPService.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 23812848
\??\C:\windows\system32\conhost.exe "-591228445-17563992991618499192391469845-6003177381345039870-1683638332-699397256
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1cad76e3-e02e-49e2-a90a-da6cd8b7a8dc -SystemEventPortName:HostProcess-8339c8e0-85f8-4469-9634-41cc441738b5 -IoCancelEventPortName:HostProcess-923c6eb9-d34a-48ee-ba3c-8f070d0fb63d -NonStateChangingEventPortName:HostProcess-102accd7-dbc3-46ea-9e26-0ec216dc21ab -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ae7ce029-e846-40df-a27b-b903c96f0dc9 -DeviceGroupId:
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\CCM\CcmExec.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Windows\System32\wscript.exe" //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\windows\CCM\SCNotification.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files (x86)\Java\jre1.8.0_51" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlMS44LjBfNTFcbGliXGRlcGxveS5qYXIALURqYXZhLnNlY3VyaXR5LnBvbGljeT1maWxlOkM6XFByb2dyYW0gRmlsZXMgKHg4NilcSmF2YVxqcmUxLjguMF81MVxsaWJcc2VjdXJpdHlcamF2YXdzLnBvbGljeQAtRHRydXN0UHJveHk9dHJ1ZQAtWHZlcmlmeTpyZW1vdGUALURqbmxweC5ob21lPUM6XFByb2dyYW0gRmlsZXMgKHg4NilcSmF2YVxqcmUxLjguMF81MVxiaW4ALURqYXZhLnNlY3VyaXR5Lm1hbmFnZXIALURzdW4uYXd0Lndhcm11cD10cnVlAC1YYm9vdGNsYXNzcGF0aC9hOkM6XFByb2dyYW0gRmlsZXMgKHg4NilcSmF2YVxqcmUxLjguMF81MVxsaWJcamF2YXdzLmphcjtDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlMS44LjBfNTFcbGliXGRlcGxveS5qYXI7QzpcUHJvZ3JhbSBGaWxlcyAoeDg2KVxKYXZhXGpyZTEuOC4wXzUxXGxpYlxwbHVnaW4uamFyAC1Eam5scHguanZtPUM6XFByb2dyYW0gRmlsZXMgKHg4NilcSmF2YVxqcmUxLjguMF81MVxiaW5camF2YXcuZXhl -ma LVNTVkJhc2VsaW5lVXBkYXRlAC1ub3RXZWJKYXZh
C:\windows\servicing\TrustedInstaller.exe
taskeng.exe {335C73D1-B420-49B3-8A35-956E9E615673}
taskeng.exe {461BAFB4-46BC-4721-B78F-A8C96F798D3B}

C:\windows\system32\DllHost.exe /Processid:{A79DB36D-6218-48E6-9EC9-DCBA9A39BF00}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="2576.0.1141931850\1842389352" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\adminlukas\AppData\LocalLow\Mozilla\Temp-{5d720d74-b15b-44ba-9362-09acacfa1207}" 2576 "\\.\pipe\gecko-crash-server-pipe.2576" 1232 gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="2576.3.450671364\1373955825" -childID 1 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 2576 "\\.\pipe\gecko-crash-server-pipe.2576" 1584 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="2576.12.131697896\959813353" -childID 2 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 2576 "\\.\pipe\gecko-crash-server-pipe.2576" 1800 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="2576.20.1080292384\1021883683" -childID 3 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 2576 "\\.\pipe\gecko-crash-server-pipe.2576" 2952 tab
taskhost.exe $(Arg0)
"C:\AVG\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\HPCeeScheduleForadminlukas.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForadminlukas (null)
C:\windows\tasks\HPCeeScheduleForlukass.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForlukass (null)
C:\windows\tasks\PremiumSustainer-S-1662075334.job - c:\programdata\trusted publisher\softwareprovider\PremiumSustainer.exe /schedule /profile "c:\programdata\trusted publisher\softwareprovider\1662075334.ini"

=========Mozilla firefox=========

ProfilePath - C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default

prefs.js - "browser.startup.homepage" - "https://www.google.cz/"
prefs.js - "keyword.URL" - "https://duckduckgo.com/?q={searchTerms}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Skype for Business Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default\extensions\
vjpvchdmsnsxgvdrj_d@jnhszdttblwlqf.net

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-12-13 236744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 580312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 2179376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31 161448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-15 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 403672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 1524016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-15 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-03-09 2887440]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-04-02 398616]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-04-02 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-03-05 1425408]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"GalaxyClient"= []
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-01-05 3139872]
"89274"=wscript.exe //B C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2012-01-19 800416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-01-19 1016992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager]
c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2012-03-16 184704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPPowerAssistant]
C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2012-03-14 15232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QLBController]
C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-03-14 319360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\qttask.exe [2012-09-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-03-14 27545048]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"DTRun"=c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [2010-11-24 517456]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-03-01 56088]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]
"Aimersoft Helper Compact.exe"=C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2012-02-28 1667072]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2018-02-01 1194048]

C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
89274.tmp.vbs

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-03-27 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-06-07 21:42:57 ----D---- C:\rsit
2018-06-07 21:42:57 ----D---- C:\Program Files\trend micro
2018-06-07 06:14:26 ----A---- C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs
2018-05-16 20:01:56 ----D---- C:\Users\adminlukas\AppData\Roaming\AnyMeeting
2018-05-09 13:13:37 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2018-06-07 21:43:04 ----D---- C:\windows\Prefetch
2018-06-07 21:42:57 ----RD---- C:\Program Files
2018-06-07 21:42:35 ----RD---- C:\AVG
2018-06-07 21:42:15 ----D---- C:\windows\System32
2018-06-07 21:42:15 ----D---- C:\windows\inf
2018-06-07 21:42:15 ----A---- C:\windows\system32\PerfStringBackup.INI
2018-06-07 21:39:09 ----D---- C:\windows\Temp
2018-06-07 18:58:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-06-07 07:00:07 ----SHD---- C:\System Volume Information
2018-06-07 06:58:19 ----D---- C:\windows\system32\config
2018-06-07 06:18:14 ----D---- C:\AdwCleaner
2018-06-07 06:11:05 ----A---- C:\windows\SYSWOW64\log.txt
2018-06-07 06:09:37 ----A---- C:\windows\SMSCFG.ini
2018-06-07 06:08:49 ----D---- C:\ProgramData\PDFC
2018-06-07 06:08:32 ----D---- C:\Program Files (x86)\Hi-Rez Studios
2018-06-05 23:58:45 ----D---- C:\CD
2018-06-05 06:03:13 ----SHD---- C:\windows\Installer
2018-06-05 06:02:34 ----D---- C:\Program Files (x86)\Media Update
2018-06-05 06:02:33 ----D---- C:\windows\system32\Tasks
2018-06-05 06:02:24 ----D---- C:\ProgramData\Supreme AdBlocker
2018-06-03 22:25:31 ----RD---- C:\Hudební alba 3
2018-06-02 19:12:27 ----D---- C:\windows\Tasks
2018-05-27 14:30:12 ----SHD---- C:\Config.Msi
2018-05-26 16:35:01 ----RD---- C:\Hudební alba 2. (2014-15)
2018-05-26 16:34:44 ----RD---- C:\Hudební alba 1. (2012-13)
2018-05-26 16:34:09 ----RD---- C:\My Disc
2018-05-26 16:31:24 ----RD---- C:\Users
2018-05-26 16:30:52 ----RD---- C:\Program Files (x86)
2018-05-26 16:30:05 ----D---- C:\Program Files (x86)\Common Files
2018-05-26 16:29:50 ----D---- C:\windows\system32\appmgmt
2018-05-22 06:04:39 ----RD---- C:\Deska
2018-05-18 22:44:51 ----D---- C:\Users\adminlukas\AppData\Roaming\Skype
2018-05-17 07:55:49 ----D---- C:\windows\SysWOW64
2018-05-15 07:14:02 ----D---- C:\windows\system32\FxsTmp
2018-05-14 21:53:29 ----D---- C:\windows\system32\Macromed
2018-05-13 22:20:35 ----D---- C:\windows\system32\NDF
2018-05-09 16:25:46 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2018-05-09 13:13:38 ----D---- C:\windows\SYSWOW64\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-03-16 30488]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2012-02-02 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 MpKslc5110cf0;MpKslc5110cf0; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{949BE5EA-DA7E-4DA2-8A5B-0AE64B5E1F2D}\MpKslc5110cf0.sys [2018-06-07 58120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-03-16 43800]
R3 Afc;PPdus ASPI Shell; C:\windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2012-02-03 42816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2012-03-21 2808832]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\windows\system32\DRIVERS\btath_bus.sys [2012-01-19 30368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2011-07-18 25912]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-03-27 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2012-02-28 173656]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\HECIx64.sys [2011-11-09 60184]
R3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-24 648808]
R3 SPUVCbv;SPUVCb Driver Service; C:\windows\System32\Drivers\SPUVCbv_x64.sys [2012-03-26 2891512]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\windows\system32\DRIVERS\stwrt64.sys [2012-03-05 536064]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-03-09 425232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2012-01-19 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2012-01-19 339616]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\windows\system32\drivers\btath_avdt.sys [2012-01-19 110752]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\windows\system32\DRIVERS\btath_hcrp.sys [2012-01-19 167584]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2012-01-19 68256]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\windows\system32\DRIVERS\btath_rcp.sys [2012-01-19 280992]
S3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2012-01-19 550560]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2012-04-16 80384]
S3 cpuz134;cpuz134; \??\C:\Users\lukass.CZ\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2012-09-19 102368]
S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-27 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 prepdrvr;SMS Process Event Driver; C:\windows\system32\DRIVERS\prepdrv.sys [2012-11-21 26984]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SndTAudio;SndTAudio; C:\windows\system32\drivers\SndTAudio.sys [2014-07-28 36064]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2013-10-28 204568]
S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 vmbus;vmbus; C:\windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-01-19 106144]
R2 CcmExec;SMS Agent Host; C:\windows\CCM\CcmExec.exe [2017-07-13 1799072]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2017-03-28 9728]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-03-14 365440]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2012-03-16 33560]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-03-01 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-03-07 629984]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-28 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-28 165144]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-28 277784]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2018-02-01 1795136]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2012-03-05 314880]
R2 uArcCapture;ArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [2012-02-03 498352]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-28 363800]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2012-03-20 2694224]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-01 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-01 124088]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-02-27 317400]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-09 272384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-01 50864]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2018-03-28 7013384]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-03-28 774272]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-12-26 7184440]
S3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2012-03-16 1420160]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2016-10-27 114688]
S3 lpasvc;Microsoft Policy Platform Local Authority; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 lppsvc;Microsoft Policy Platform Processor; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-23 148080]
S3 OnePointDomainAdminService;Active Directory Migration Agent; C:\windows\OnePointDomainAgent\DCTAgentService.exe [2014-05-19 91648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-13 253128]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-07-30 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 smstsmgr;ConfigMgr Task Sequence Agent; C:\windows\CCM\TSManager.exe [2017-07-13 333728]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-08-20 1255736]
S4 CmRcService;Configuration Manager Remote Control; C:\windows\CCM\RemCtrl\CmRcService.exe [2017-07-13 699808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 7.2.0.0
# -------------------------------
# Build: 06-05-2018
# Database: 2018-06-07.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-07-2018
# Duration: 00:00:18
# OS: Windows 7 Professional
# Scanned: 41201
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [1249 octets] - [21/04/2018 11:40:10]
AdwCleaner[S01].txt - [1249 octets] - [29/04/2018 11:03:31]
AdwCleaner[S02].txt - [1249 octets] - [13/05/2018 14:20:32]
AdwCleaner[S03].txt - [1249 octets] - [18/05/2018 23:31:55]
AdwCleaner[S04].txt - [1249 octets] - [26/05/2018 16:21:11]
AdwCleaner[S05].txt - [1249 octets] - [04/06/2018 21:29:23]
AdwCleaner[S06].txt - [1615 octets] - [07/06/2018 06:18:58]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S07].txt ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs
C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\89274.tmp.vbs

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"89274"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by adminlukas at 2018-06-08 17:20:46
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 343 GB (50%) free of 692 GB
Total RAM: 3980 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:20:55, on 8.6.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18525)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\windows\CCM\SCNotification.exe
C:\Program Files\trend micro\adminlukas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [89274] wscript.exe //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 89274.tmp.vbs
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\PROGRA~2\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Poslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Poslat do On&eNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CCS\Services\Tcpip\..\{9223D93B-7400-441E-A964-CBCFA36AD5D5}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 15831 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\Hpservice.exe
C:\windows\system32\vcsFPService.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 12643872
\??\C:\windows\system32\conhost.exe "469366819-699114349-179341724018982934531440526524826538018744801651947028514
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {D394CA31-1D04-4E69-93F3-939E123B8B35}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
"taskhost.exe"
C:\windows\Explorer.EXE
"C:\windows\system32\Dwm.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\CCM\CcmExec.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-899b0f28-1b95-4368-9712-d37cb063ca50 -SystemEventPortName:HostProcess-bc158444-d637-422c-9967-ea72d49ad0a2 -IoCancelEventPortName:HostProcess-53880f67-7f6d-4352-a830-b050c84b7b0c -NonStateChangingEventPortName:HostProcess-fb80cc53-4e84-42d8-99e1-a5cc2cd4125f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e50dad5c-0526-4004-899f-a8e52df9aeac -DeviceGroupId:
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\msiexec.exe /V
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\notepad.exe" C:\_OTM\MovedFiles\06082018_170805.log
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Windows\System32\wscript.exe" //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
C:\windows\system32\wbem\wmiprvse.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\windows\system32\sppsvc.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Microsoft Policy Platform\policyHost.exe" /service
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="1896.0.221293635\983344615" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\adminlukas\AppData\LocalLow\Mozilla\Temp-{5d720d74-b15b-44ba-9362-09acacfa1207}" 1896 "\\.\pipe\gecko-crash-server-pipe.1896" 1132 gpu
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\windows\CCM\SCNotification.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="1896.3.1665084149\2099775408" -childID 1 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 1896 "\\.\pipe\gecko-crash-server-pipe.1896" 1700 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="1896.13.530219358\1758906632" -childID 2 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 1896 "\\.\pipe\gecko-crash-server-pipe.1896" 1932 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="1896.20.1350955177\1032138126" -childID 3 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 1896 "\\.\pipe\gecko-crash-server-pipe.1896" 2600 tab
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="1896.27.324166821\490185657" -childID 4 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 1896 "\\.\pipe\gecko-crash-server-pipe.1896" 2972 tab
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="1896.34.2090044783\1631291150" -childID 5 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 1896 "\\.\pipe\gecko-crash-server-pipe.1896" 3500 tab
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
C:\windows\system32\wbem\WmiApSrv.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {7C7D545B-90D6-4607-9169-FD0C0EC73618}
"C:\AVG\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\windows\tasks\HPCeeScheduleForadminlukas.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForadminlukas (null)
C:\windows\tasks\HPCeeScheduleForlukass.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForlukass (null)
C:\windows\tasks\PremiumSustainer-S-1662075334.job - c:\programdata\trusted publisher\softwareprovider\PremiumSustainer.exe /schedule /profile "c:\programdata\trusted publisher\softwareprovider\1662075334.ini"

=========Mozilla firefox=========

ProfilePath - C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default

prefs.js - "browser.startup.homepage" - "https://www.google.cz/"
prefs.js - "keyword.URL" - "https://duckduckgo.com/?q={searchTerms}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Skype for Business Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default\extensions\
vjpvchdmsnsxgvdrj_d@jnhszdttblwlqf.net

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-12-13 236744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 580312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 2179376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31 161448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-15 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 403672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 1524016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-15 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-03-09 2887440]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-04-02 398616]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-04-02 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-03-05 1425408]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"GalaxyClient"= []
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-01-05 3139872]
"89274"=wscript.exe //B C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2012-01-19 800416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-01-19 1016992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager]
c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2012-03-16 184704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPPowerAssistant]
C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2012-03-14 15232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QLBController]
C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-03-14 319360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\qttask.exe [2012-09-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-03-14 27545048]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"DTRun"=c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [2010-11-24 517456]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-03-01 56088]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]
"Aimersoft Helper Compact.exe"=C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2012-02-28 1667072]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2018-02-01 1194048]

C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
89274.tmp.vbs

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-03-27 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-06-08 17:16:30 ----A---- C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs
2018-06-08 17:08:05 ----D---- C:\_OTM
2018-06-07 21:42:57 ----D---- C:\rsit
2018-06-07 21:42:57 ----D---- C:\Program Files\trend micro
2018-05-16 20:01:56 ----D---- C:\Users\adminlukas\AppData\Roaming\AnyMeeting
2018-05-09 13:13:37 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2018-06-08 17:19:58 ----D---- C:\windows\Temp
2018-06-08 17:18:18 ----A---- C:\windows\SYSWOW64\log.txt
2018-06-08 17:16:53 ----D---- C:\windows\Prefetch
2018-06-08 17:16:40 ----A---- C:\windows\SMSCFG.ini
2018-06-08 17:15:38 ----D---- C:\windows\system32\config
2018-06-08 17:15:35 ----D---- C:\ProgramData\PDFC
2018-06-08 17:15:12 ----D---- C:\Program Files (x86)\Hi-Rez Studios
2018-06-08 17:13:17 ----D---- C:\Windows
2018-06-08 17:07:02 ----D---- C:\windows\System32
2018-06-08 17:07:02 ----D---- C:\windows\inf
2018-06-08 17:07:02 ----A---- C:\windows\system32\PerfStringBackup.INI
2018-06-08 17:06:48 ----RD---- C:\AVG
2018-06-08 07:21:58 ----SHD---- C:\System Volume Information
2018-06-07 22:02:44 ----RD---- C:\Deska
2018-06-07 21:42:57 ----RD---- C:\Program Files
2018-06-07 18:58:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-06-07 06:18:14 ----D---- C:\AdwCleaner
2018-06-05 23:58:45 ----D---- C:\CD
2018-06-05 06:03:13 ----SHD---- C:\windows\Installer
2018-06-05 06:02:34 ----D---- C:\Program Files (x86)\Media Update
2018-06-05 06:02:33 ----D---- C:\windows\system32\Tasks
2018-06-05 06:02:24 ----D---- C:\ProgramData\Supreme AdBlocker
2018-06-03 22:25:31 ----RD---- C:\Hudební alba 3
2018-06-02 19:12:27 ----D---- C:\windows\Tasks
2018-05-27 14:30:12 ----SHD---- C:\Config.Msi
2018-05-26 16:35:01 ----RD---- C:\Hudební alba 2. (2014-15)
2018-05-26 16:34:44 ----RD---- C:\Hudební alba 1. (2012-13)
2018-05-26 16:34:09 ----RD---- C:\My Disc
2018-05-26 16:31:24 ----RD---- C:\Users
2018-05-26 16:30:52 ----RD---- C:\Program Files (x86)
2018-05-26 16:30:05 ----D---- C:\Program Files (x86)\Common Files
2018-05-26 16:29:50 ----D---- C:\windows\system32\appmgmt
2018-05-18 22:44:51 ----D---- C:\Users\adminlukas\AppData\Roaming\Skype
2018-05-17 07:55:49 ----D---- C:\windows\SysWOW64
2018-05-15 07:14:02 ----D---- C:\windows\system32\FxsTmp
2018-05-14 21:53:29 ----D---- C:\windows\system32\Macromed
2018-05-13 22:20:35 ----D---- C:\windows\system32\NDF
2018-05-09 16:25:46 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2018-05-09 13:13:38 ----D---- C:\windows\SYSWOW64\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-03-16 30488]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2012-02-02 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-03-16 43800]
R3 Afc;PPdus ASPI Shell; C:\windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2012-02-03 42816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2012-03-21 2808832]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\windows\system32\DRIVERS\btath_bus.sys [2012-01-19 30368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2011-07-18 25912]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-03-27 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2012-02-28 173656]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\HECIx64.sys [2011-11-09 60184]
R3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-24 648808]
R3 SPUVCbv;SPUVCb Driver Service; C:\windows\System32\Drivers\SPUVCbv_x64.sys [2012-03-26 2891512]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\windows\system32\DRIVERS\stwrt64.sys [2012-03-05 536064]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-03-09 425232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2012-01-19 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2012-01-19 339616]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\windows\system32\drivers\btath_avdt.sys [2012-01-19 110752]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\windows\system32\DRIVERS\btath_hcrp.sys [2012-01-19 167584]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2012-01-19 68256]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\windows\system32\DRIVERS\btath_rcp.sys [2012-01-19 280992]
S3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2012-01-19 550560]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2012-04-16 80384]
S3 cpuz134;cpuz134; \??\C:\Users\lukass.CZ\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2012-09-19 102368]
S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-27 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 prepdrvr;SMS Process Event Driver; C:\windows\system32\DRIVERS\prepdrv.sys [2012-11-21 26984]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SndTAudio;SndTAudio; C:\windows\system32\drivers\SndTAudio.sys [2014-07-28 36064]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2013-10-28 204568]
S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 vmbus;vmbus; C:\windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-01-19 106144]
R2 CcmExec;SMS Agent Host; C:\windows\CCM\CcmExec.exe [2017-07-13 1799072]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2017-03-28 9728]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-03-14 365440]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2012-03-16 33560]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-03-01 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-03-07 629984]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-28 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-28 165144]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-28 277784]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2018-02-01 1795136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2012-03-05 314880]
R2 uArcCapture;ArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [2012-02-03 498352]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-28 363800]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2012-03-20 2694224]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 lpasvc;Microsoft Policy Platform Local Authority; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-01 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-01 124088]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-02-27 317400]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-09 272384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-01 50864]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2018-03-28 7013384]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-03-28 774272]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-12-26 7184440]
S3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2012-03-16 1420160]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2016-10-27 114688]
S3 lppsvc;Microsoft Policy Platform Processor; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-23 148080]
S3 OnePointDomainAdminService;Active Directory Migration Agent; C:\windows\OnePointDomainAgent\DCTAgentService.exe [2014-05-19 91648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-13 253128]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-07-30 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 smstsmgr;ConfigMgr Task Sequence Agent; C:\windows\CCM\TSManager.exe [2017-07-13 333728]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-08-20 1255736]
S4 CmRcService;Configuration Manager Remote Control; C:\windows\CCM\RemCtrl\CmRcService.exe [2017-07-13 699808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552]

-----------------EOF-----------------

Je to tam pořád. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Logfile of random's system information tool 1.10 (written by random/random)
Run by adminlukas at 2018-06-08 20:54:59
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 343 GB (50%) free of 692 GB
Total RAM: 3980 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:55:06, on 8.6.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18525)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files\trend micro\adminlukas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [89274] wscript.exe //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 89274.tmp.vbs
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\PROGRA~2\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Poslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Poslat do On&eNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CCS\Services\Tcpip\..\{9223D93B-7400-441E-A964-CBCFA36AD5D5}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 15981 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\Hpservice.exe
C:\windows\system32\vcsFPService.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 20304400
\??\C:\windows\system32\conhost.exe "12761945871888101972-264276981141424321512718512115323793281324880044-1725535554
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {69C55637-10CB-4D85-8A41-C860B42491DA}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Windows\System32\wscript.exe" //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3324.0.34058429\268034231" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\adminlukas\AppData\LocalLow\Mozilla\Temp-{5d720d74-b15b-44ba-9362-09acacfa1207}" 3324 "\\.\pipe\gecko-crash-server-pipe.3324" 1168 gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3324.3.78464387\851524319" -childID 1 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3324 "\\.\pipe\gecko-crash-server-pipe.3324" 1620 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3324.13.1422578162\190143202" -childID 2 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3324 "\\.\pipe\gecko-crash-server-pipe.3324" 1860 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3324.27.1431845695\990307194" -childID 4 -isForBrowser -boolPrefs 237:1|299:0| -stringPrefs 285:38;{5d720d74-b15b-44ba-9362-09acacfa1207}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3324 "\\.\pipe\gecko-crash-server-pipe.3324" 2596 tab
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f15f7a91-1c9d-4c7d-9621-d984e1fcdb41 -SystemEventPortName:HostProcess-1c4716b6-b028-4ed0-b38f-8a264822df29 -IoCancelEventPortName:HostProcess-9d731982-d8ed-4329-b658-a4cbdd559651 -NonStateChangingEventPortName:HostProcess-c9746357-866c-4a77-896d-7d9e2a871577 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0852e02d-5071-486b-87e9-66468dbc4d09 -DeviceGroupId:
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\servicing\TrustedInstaller.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\windows\CCM\CcmExec.exe
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
C:\windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\system32\sppsvc.exe
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
taskeng.exe {BB5E3333-B12D-4DC9-A866-0A70233A5E40}
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\WmiApSrv.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
"C:\AVG\RSITx64.exe"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
wmiadap.exe /F /T

======Scheduled tasks folder======

C:\windows\tasks\HPCeeScheduleForadminlukas.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForadminlukas (null)
C:\windows\tasks\HPCeeScheduleForlukass.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForlukass (null)
C:\windows\tasks\PremiumSustainer-S-1662075334.job - c:\programdata\trusted publisher\softwareprovider\PremiumSustainer.exe /schedule /profile "c:\programdata\trusted publisher\softwareprovider\1662075334.ini"

=========Mozilla firefox=========

ProfilePath - C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default

prefs.js - "browser.startup.homepage" - "https://www.google.cz/"
prefs.js - "keyword.URL" - "https://duckduckgo.com/?q={searchTerms}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Skype for Business Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default\extensions\
vjpvchdmsnsxgvdrj_d@jnhszdttblwlqf.net

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-12-13 236744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 580312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 2179376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31 161448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-15 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 403672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 1524016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-15 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-03-09 2887440]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-04-02 398616]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-04-02 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-03-05 1425408]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"GalaxyClient"= []
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-01-05 3139872]
"89274"=wscript.exe //B C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2012-01-19 800416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-01-19 1016992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager]
c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2012-03-16 184704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPPowerAssistant]
C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2012-03-14 15232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QLBController]
C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-03-14 319360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\qttask.exe [2012-09-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-03-14 27545048]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"DTRun"=c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [2010-11-24 517456]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-03-01 56088]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]
"Aimersoft Helper Compact.exe"=C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2012-02-28 1667072]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2018-02-01 1194048]

C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
89274.tmp.vbs

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-03-27 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-06-08 20:02:20 ----A---- C:\windows\system32\drivers\mbam.sys
2018-06-08 20:02:15 ----A---- C:\windows\system32\drivers\farflt.sys
2018-06-08 20:02:14 ----A---- C:\windows\system32\drivers\mwac.sys
2018-06-08 20:02:13 ----A---- C:\windows\system32\drivers\MbamChameleon.sys
2018-06-08 20:02:04 ----A---- C:\windows\system32\drivers\mbamswissarmy.sys
2018-06-08 20:01:44 ----A---- C:\windows\system32\drivers\mbae64.sys
2018-06-08 20:01:39 ----D---- C:\ProgramData\Malwarebytes
2018-06-08 20:01:39 ----D---- C:\Program Files\Malwarebytes
2018-06-08 17:16:30 ----A---- C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs
2018-06-08 17:08:05 ----D---- C:\_OTM
2018-06-07 21:42:57 ----D---- C:\rsit
2018-06-07 21:42:57 ----D---- C:\Program Files\trend micro
2018-05-16 20:01:56 ----D---- C:\Users\adminlukas\AppData\Roaming\AnyMeeting
2018-05-09 13:13:37 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2018-06-08 20:54:55 ----A---- C:\windows\SMSCFG.ini
2018-06-08 20:54:48 ----D---- C:\windows\Temp
2018-06-08 20:53:51 ----A---- C:\windows\SYSWOW64\log.txt
2018-06-08 20:53:27 ----D---- C:\windows\Prefetch
2018-06-08 20:52:52 ----D---- C:\windows\system32\drivers
2018-06-08 20:52:32 ----D---- C:\windows\system32\config
2018-06-08 20:52:18 ----D---- C:\ProgramData\PDFC
2018-06-08 20:50:45 ----D---- C:\Program Files (x86)\Hi-Rez Studios
2018-06-08 20:48:09 ----HD---- C:\ProgramData
2018-06-08 20:48:07 ----D---- C:\ProgramData\Fighters
2018-06-08 20:01:51 ----D---- C:\Windows
2018-06-08 20:01:39 ----RD---- C:\Program Files
2018-06-08 20:01:07 ----RD---- C:\AVG
2018-06-08 20:00:05 ----D---- C:\windows\System32
2018-06-08 20:00:05 ----A---- C:\windows\system32\PerfStringBackup.INI
2018-06-08 20:00:04 ----D---- C:\windows\inf
2018-06-08 18:36:23 ----SHD---- C:\System Volume Information
2018-06-07 22:02:44 ----RD---- C:\Deska
2018-06-07 18:58:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-06-07 06:18:14 ----D---- C:\AdwCleaner
2018-06-05 23:58:45 ----D---- C:\CD
2018-06-05 06:03:13 ----SHD---- C:\windows\Installer
2018-06-05 06:02:34 ----D---- C:\Program Files (x86)\Media Update
2018-06-05 06:02:33 ----D---- C:\windows\system32\Tasks
2018-06-03 22:25:31 ----RD---- C:\Hudební alba 3
2018-06-02 19:12:27 ----D---- C:\windows\Tasks
2018-05-27 14:30:12 ----SHD---- C:\Config.Msi
2018-05-26 16:35:01 ----RD---- C:\Hudební alba 2. (2014-15)
2018-05-26 16:34:44 ----RD---- C:\Hudební alba 1. (2012-13)
2018-05-26 16:34:09 ----RD---- C:\My Disc
2018-05-26 16:31:24 ----RD---- C:\Users
2018-05-26 16:30:52 ----RD---- C:\Program Files (x86)
2018-05-26 16:30:05 ----D---- C:\Program Files (x86)\Common Files
2018-05-26 16:29:50 ----D---- C:\windows\system32\appmgmt
2018-05-18 22:44:51 ----D---- C:\Users\adminlukas\AppData\Roaming\Skype
2018-05-17 07:55:49 ----D---- C:\windows\SysWOW64
2018-05-15 07:14:02 ----D---- C:\windows\system32\FxsTmp
2018-05-14 21:53:29 ----D---- C:\windows\system32\Macromed
2018-05-13 22:20:35 ----D---- C:\windows\system32\NDF
2018-05-09 16:25:46 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2018-05-09 13:13:38 ----D---- C:\windows\SYSWOW64\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-03-16 30488]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2012-02-02 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 ESProtectionDriver;Malwarebytes Anti-Exploit; \??\C:\windows\system32\drivers\mbae64.sys [2018-05-24 152184]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 MBAMChameleon;MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [2018-06-08 190696]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-03-16 43800]
R3 Afc;PPdus ASPI Shell; C:\windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2012-02-03 42816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2012-03-21 2808832]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\windows\system32\DRIVERS\btath_bus.sys [2012-01-19 30368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2011-07-18 25912]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-03-27 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2012-02-28 173656]
R3 MBAMFarflt;MBAMFarflt; C:\windows\system32\DRIVERS\farflt.sys [2018-06-08 112872]
R3 MBAMProtection;MBAMProtection; C:\windows\system32\DRIVERS\mbam.sys [2018-06-08 44768]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [2018-06-08 253664]
R3 MBAMWebProtection;MBAMWebProtection; C:\windows\system32\DRIVERS\mwac.sys [2018-06-08 94840]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\HECIx64.sys [2011-11-09 60184]
R3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-24 648808]
R3 SPUVCbv;SPUVCb Driver Service; C:\windows\System32\Drivers\SPUVCbv_x64.sys [2012-03-26 2891512]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\windows\system32\DRIVERS\stwrt64.sys [2012-03-05 536064]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-03-09 425232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 MpKsld3068007;MpKsld3068007; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{949BE5EA-DA7E-4DA2-8A5B-0AE64B5E1F2D}\MpKsld3068007.sys []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2012-01-19 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2012-01-19 339616]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\windows\system32\drivers\btath_avdt.sys [2012-01-19 110752]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\windows\system32\DRIVERS\btath_hcrp.sys [2012-01-19 167584]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2012-01-19 68256]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\windows\system32\DRIVERS\btath_rcp.sys [2012-01-19 280992]
S3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2012-01-19 550560]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2012-04-16 80384]
S3 cpuz134;cpuz134; \??\C:\Users\lukass.CZ\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2012-09-19 102368]
S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-27 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 prepdrvr;SMS Process Event Driver; C:\windows\system32\DRIVERS\prepdrv.sys [2012-11-21 26984]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SndTAudio;SndTAudio; C:\windows\system32\drivers\SndTAudio.sys [2014-07-28 36064]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2013-10-28 204568]
S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 vmbus;vmbus; C:\windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-01-19 106144]
R2 CcmExec;SMS Agent Host; C:\windows\CCM\CcmExec.exe [2017-07-13 1799072]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2017-03-28 9728]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-03-14 365440]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2012-03-16 33560]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-03-01 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-03-07 629984]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-28 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-28 165144]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-28 277784]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-05-09 6541008]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2018-02-01 1795136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2012-03-05 314880]
R2 uArcCapture;ArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [2012-02-03 498352]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-28 363800]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2012-03-20 2694224]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-01 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-01 124088]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-02-27 317400]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-09 272384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-01 50864]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2018-03-28 7013384]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-03-28 774272]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-12-26 7184440]
S3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2012-03-16 1420160]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2016-10-27 114688]
S3 lpasvc;Microsoft Policy Platform Local Authority; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 lppsvc;Microsoft Policy Platform Processor; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-23 148080]
S3 OnePointDomainAdminService;Active Directory Migration Agent; C:\windows\OnePointDomainAgent\DCTAgentService.exe [2014-05-19 91648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-13 253128]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-07-30 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 smstsmgr;ConfigMgr Task Sequence Agent; C:\windows\CCM\TSManager.exe [2017-07-13 333728]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S4 CmRcService;Configuration Manager Remote Control; C:\windows\CCM\RemCtrl\CmRcService.exe [2017-07-13 699808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552]

-----------------EOF-----------------

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 08.06.18
Čas skenování: 20:03
Logovací soubor: 302ceb26-6b46-11e8-8beb-b4b52f71a5e1.json
Správce: Ano

-Informace o softwaru-
Verze: 3.5.1.2522
Verze komponentů: 1.0.374
Aktualizovat verzi balíku komponent: 1.0.5404
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: System

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 305719
Zjištěné hrozby: 439
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 41 min, 35 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 5
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, Žádná uživatelská akce, [7321], [252393],1.0.5404
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{478472F9-9E09-492A-BDAB-42EE595EF1AD}, Žádná uživatelská akce, [70], [187416],1.0.5404
Adware.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, Žádná uživatelská akce, [3264], [445717],1.0.5404
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, Žádná uživatelská akce, [7321], [252393],1.0.5404
PUP.Optional.GoSearchMe, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}, Žádná uživatelská akce, [5719], [238866],1.0.5404

Hodnota v registru: 3
PUP.Optional.SLOWPCfighter, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FILEASSOCIATION\NOSTARTPAGEAPPUSERMODELIDS|FIGHTERS.SLOW-PCFIGHTER.UNINSTALL, Žádná uživatelská akce, [957], [405390],1.0.5404
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DISABLEAUTOUPDATECHECKSCHECKBOXVALUE, Žádná uživatelská akce, [7321], [252393],1.0.5404
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DISABLEAUTOUPDATECHECKSCHECKBOXVALUE, Žádná uživatelská akce, [7321], [252393],1.0.5404

Data registrů: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DEFAULTSCOPE, Žádná uživatelská akce, [5369], [292819],1.0.5404

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 25
PUP.Optional.SupremeAdblocker, C:\PROGRAMDATA\SUPREME ADBLOCKER, Žádná uživatelská akce, [1494], [179896],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\reverse_repair, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\purchase, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Documents, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\x64, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\PROGRAM FILES (X86)\FIGHTERS\SLOW-PCFIGHTER, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\WhiteList, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Logs, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\PROGRAMDATA\FIGHTERS\SLOW-PCFIGHTER, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Users\adminlukas\AppData\Roaming\Fighters\SLOW-PCfighter\Logs, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\USERS\ADMINLUKAS\APPDATA\ROAMING\FIGHTERS\SLOW-PCFIGHTER, Žádná uživatelská akce, [957], [397076],1.0.5404

Soubor: 405
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Documents\LicenseEN.rtf, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_details.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_mypage.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_pro.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_productkey.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_renew.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_tabicon_account.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\account\account_tabicon_accountsettings.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\about.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\add_productkey.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\arrow.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\arrow_up.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\bg_gradient.gif, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\bg_stretch.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\bg_stretch_small.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\buy_full_version.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\check.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\close.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\col.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\connect_server.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\download.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\error.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\expired.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\expired_big.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\frameimage.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\help.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\id_card.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\ignore.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\ignore_off.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\list_bg.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\logo.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\moneyback.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\mspartner.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\pro.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\register_bg_arrow.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\risk_bar_bg.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\risk_bar_indicator.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\risk_bar_indicator_l.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\risk_bar_overlay.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\SLPC_box.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\softpedia.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\star.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\star_large.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\support.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_ar.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_bg.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_cs.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_de.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_el.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_en.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_es.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_fi.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_fr.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_hr.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_hu.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_id.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_it.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_ja.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_nl.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_no.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_pl.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_pt.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_ro.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_ru.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_th.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_tr.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_tw.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_vi.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_zh.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_pro_da.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_pro_en.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\trial.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\trustpilot.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\unipb.gif, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\update.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\warning_44x40.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\no.jpg, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\steps_arrow.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_da.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\global\top_buy_sv.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\01.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\02.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\03.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\04.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\05.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\06.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\07.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\navbg.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\nav\navbg_current.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\last_scan.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\legend_overview_01.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\legend_overview_01_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\pc_health_fair.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\pc_health_good.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\pc_health_poor.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\pc_health_unknown.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\pc_health_verygood.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\report.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\scanning_icon_overview.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\overview\tip_curl.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\purchase\legend_purchase_01.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\purchase\legend_purchase_01_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\05_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\01_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\01_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\02_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\02_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\03_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\03_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\04_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\04_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\05_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\06_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\06_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\07_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\07_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\08_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\08_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\09_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\09_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\10_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\10_category_icon.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\registry\registry_complete.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\reverse_repair\legend_reverse_repair_01.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\reverse_repair\legend_reverse_repair_01_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\reverse_repair\reverse_repair.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\01_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\01_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\02_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\02_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\03_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\03_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\04_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\04_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\05_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\05_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\06_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\06_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\07_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\07_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\08_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\08_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\09_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\09_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\10_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\10_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\11_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\11_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\12_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\12_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\13_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\13_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\14_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\14_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\15_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\15_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\16_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\16_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\17_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\17_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\18_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\18_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\19_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\19_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\20_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\20_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\21_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\21_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\22_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\22_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\23_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\23_select_category.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_01.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_01_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_02.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_02_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_03.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_03_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_04.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\legend_scan_04_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\scan_icon2.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\optionlist_bg.gif, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\pc_health_fair_small.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\pc_health_good_small.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\pc_health_poor_small.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\pc_health_unknown_small.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\pc_health_verygood_small.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\prog.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\scan_icon1.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\scan_icon3.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\scan_icon4.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\scan_icon5.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\seperator.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\seperator_color.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_cs.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_da.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_de.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_el.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_en.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_es.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_fi.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_fr.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_hu.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_id.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_it.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_ja.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_nl.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_no.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_pl.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_pt.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_ro.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_ru.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_sv.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_th.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_tr.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_tw.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\scan\stamp_zh.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_default.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_general.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_language.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_schedule.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_schedule_days.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_schedule_scanning.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_schedule_time.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_tabicon_general.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_tabicon_ignorelist.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_tabicon_logfiles.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_tabicon_scansettings.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_tabicon_schedule.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\settings\settings_update.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\folder.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_01.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_01_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_02.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_02_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_03.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_03_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_04.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\legend_utilities_04_active.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\oem_logo.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\reboot.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\registry.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\spinner.gif, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\startup_manager.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\utilities_defragment.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\utilities_startup.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\gfx\utilities\warning.png, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\about_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\account.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\account.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\buynow_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\buynow_small_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\framework.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\global.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\layout.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\msg_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\msg_lightbox_single_btn.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\overview.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\overview.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\progress_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\purchase.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\purchase.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\register_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\repairerror_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\reverse_repair.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\reverse_repair.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\scan.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\scan.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\settings.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\settings.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\trial_lightbox.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\update_lightbox.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\utilities.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\utilities.html, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\HTML\whitelabel.css, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_EN-US.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_CS.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_DA.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_DE.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_EL.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_EN.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_ES.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_FI.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_FR.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_HU.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_ID.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_IT.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_JA.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_NL.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_NO.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_PT.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_RO.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_RU.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_SV.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_TH.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_TR.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_TW.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Languages\Language_ZH.xml, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\x64\ElevationSDK.dll, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\x64\RegistryCleanerSDK.dll, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\x64\RegistryDefragSDK.dll, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\x64\Service.exe, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\x64\StartupMgrSDK.dll, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Program Files (x86)\Fighters\SLOW-PCfighter\Uninstall.exe, Žádná uživatelská akce, [957], [397074],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\16OPWCNR.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\18IIBJ08.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\1SM86GZN.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\498Y48ZH.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\6RCJKFHZ.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\DTIIMJ7A.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\E35RM0RC.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\ETP6ZU6C.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\GQOC89DB.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\K2X9T13W.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\LX81BBKK.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\O7OHD4R2.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\P4HCTSWQ.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\P7BGRV8X.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\PBLLFV3H.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\PI4P802I.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\PKROMJGQ.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\S324I064.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\SLFS57G9.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\X2SXZQ3I.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Backups\ZTX9AWOP.blf, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Logs\Installer.log.txt, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_05_28_10_21_21.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_03_17_07_08.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_03_17_23_31.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_03_17_25_02.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_03_17_31_50.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_03_17_42_19.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_03_18_08_14.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_04_18_13_56.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_03_31_21_06_42.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_04_15_07_06_53.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_04_27_20_35_54.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_04_27_20_37_41.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_05_05_20_04_01.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_05_28_21_10_59.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_05_29_19_56_49.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_03_06_01_57.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_06_08_40_31.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_09_07_59_46.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_15_15_50_57.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_18_22_49_39.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_29_15_22_32.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_06_30_15_14_50.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_07_01_17_35_12.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_07_05_19_10_42.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_07_13_17_48_19.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_07_15_08_53_30.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_07_29_15_45_12.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_08_02_08_38_57.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_08_10_07_20_43.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_08_12_12_05_28.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_08_19_22_23_57.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_04_14_50_24.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_06_06_44_30.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_06_12_34_05.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_08_16_58_55.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_08_21_02_24.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_09_18_02_00.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_13_19_27_47.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_18_14_07_42.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2015_09_21_06_53_41.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2016_01_28_15_10_11.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2016_08_06_07_05_21.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2016_09_16_22_19_40.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2017_03_04_17_40_15.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2017_04_07_17_22_52.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Scan Logs\2017_04_07_17_27_48.log, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_ES.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_BG.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_CS.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipofDay_DA.XML, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipofDay_DE.XML, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_EL.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipofDay_EN.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_FI.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_FR.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_HR.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_HU.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_IT.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_JA.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_KO.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipofDay_NL.XML, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_NO.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_PL.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_PT.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_RU.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_SV.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_TH.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_TR.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_TW.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_VI.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\Tips\TipOfDay_ZH.xml, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\ProgramData\Fighters\SLOW-PCfighter\suite.cfg, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Users\adminlukas\AppData\Roaming\Fighters\SLOW-PCfighter\Logs\SLOW-PCfighter.log.txt, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.SLOWPCfighter, C:\Users\adminlukas\AppData\Roaming\Fighters\SLOW-PCfighter\Logs\SLOW-PCfighterDbg.log.txt, Žádná uživatelská akce, [957], [397076],1.0.5404
PUP.Optional.MultiPlug, C:\DOCUMENTS AND SETTINGS\ALL USERS\NTUSER.POL, Žádná uživatelská akce, [70], [-1],0.0.0
PUP.Optional.MultiPlug, C:\PROGRAMDATA\NTUSER.POL, Žádná uživatelská akce, [70], [-1],0.0.0
PUP.Optional.MultiPlug, C:\USERS\ADMINLUKAS\NTUSER.POL, Žádná uživatelská akce, [70], [-1],0.0.0
PUP.Optional.MultiPlug, C:\USERS\LUKASS\NTUSER.POL, Žádná uživatelská akce, [70], [-1],0.0.0
PUP.Optional.MultiPlug, C:\WINDOWS\SYSTEM32\GROUPPOLICY\MACHINE\REGISTRY.POL, Žádná uživatelská akce, [70], [-1],0.0.0

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Je to tam stále. Smažte vše, co MBAM nalezl a dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

ComboFix 18-05-17.01 - adminlukas 08.06.2018 21:09:56.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3980.1655 [GMT 2:00]
Spuštěný z: C:\Users\adminlukas\Desktop\ComboFix.exe
AV: Malwarebytes *Enabled/Updated* {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: System Center Endpoint Protection *Enabled/Updated* {71A27EC9-3DA6-45FC-60A7-004F623C6189}
SP: Malwarebytes *Enabled/Updated* {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: System Center Endpoint Protection *Enabled/Updated* {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))


C:\ProgramData\HPQLOG
C:\ProgramData\HPQLOG\PTLOGS.xml
C:\ProgramData\HPQLOG\PTPolicy.xml
C:\Users\lukass\AppData\Local\assembly\tmp
C:\windows\IsUn0405.exe
C:\windows\security\Database\tmp.edb
C:\windows\security\logs\scecomp.log
C:\windows\wininit.ini


((((((((((((((((((((((((( Soubory vytvořené od 2018-05-08 do 2018-06-08 )))))))))))))))))))))))))))))))


2018-06-08 19:24:00 . 2018-06-08 19:24:00 -------- d-----w- C:\Users\lukass\AppData\Local\temp
2018-06-08 19:24:00 . 2018-06-08 19:24:00 -------- d-----w- C:\Users\Default\AppData\Local\temp
2018-06-08 19:05:50 . 2018-06-08 19:05:50 58120 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{949BE5EA-DA7E-4DA2-8A5B-0AE64B5E1F2D}\MpKslbb5523ee.sys
2018-06-08 18:02:20 . 2018-06-08 18:52:52 44768 ----a-w- C:\windows\system32\drivers\mbam.sys
2018-06-08 18:02:15 . 2018-06-08 18:52:46 112872 ----a-w- C:\windows\system32\drivers\farflt.sys
2018-06-08 18:02:14 . 2018-06-08 18:52:43 94840 ----a-w- C:\windows\system32\drivers\mwac.sys
2018-06-08 18:02:13 . 2018-06-08 18:02:13 190696 ----a-w- C:\windows\system32\drivers\MbamChameleon.sys
2018-06-08 18:02:04 . 2018-06-08 18:52:36 253664 ----a-w- C:\windows\system32\drivers\mbamswissarmy.sys
2018-06-08 18:01:44 . 2018-05-24 04:55:42 152184 ----a-w- C:\windows\system32\drivers\mbae64.sys
2018-06-08 18:01:39 . 2018-06-08 18:01:39 -------- d-----w- C:\ProgramData\Malwarebytes
2018-06-08 18:01:39 . 2018-06-08 18:01:39 -------- d-----w- C:\Program Files\Malwarebytes
2018-06-08 15:16:30 . 2018-01-01 21:10:24 30130 ----a-w- C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs
2018-06-08 15:08:32 . 2018-01-01 21:10:24 30130 ----a-w- C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\89274.tmp.vbs
2018-06-08 15:08:05 . 2018-06-08 15:08:05 -------- d-----w- C:\_OTM
2018-06-07 19:42:57 . 2018-06-08 18:55:04 -------- d-----w- C:\Program Files\trend micro
2018-06-07 19:42:57 . 2018-06-07 19:43:05 -------- d-----w- C:\rsit
2018-06-07 15:12:45 . 2018-06-07 15:12:45 75888 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{949BE5EA-DA7E-4DA2-8A5B-0AE64B5E1F2D}\offreg.972.dll
2018-06-05 14:50:05 . 2018-05-15 19:10:09 14600328 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{949BE5EA-DA7E-4DA2-8A5B-0AE64B5E1F2D}\mpengine.dll
2018-06-04 19:58:39 . 2018-06-05 14:30:53 -------- d-----w- C:\Users\adminlukas\AppData\Local\ESET
2018-05-30 16:25:09 . 2018-05-15 19:10:09 14600328 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2018-05-19 14:51:08 . 2018-05-19 14:51:08 -------- d-----w- C:\Users\lukass\AppData\Local\Hewlett-Packard
2018-05-19 14:49:46 . 2018-05-19 14:49:46 -------- d-----w- C:\Users\lukass\AppData\Roaming\Hewlett-Packard
2018-05-16 18:01:56 . 2018-05-23 18:08:59 -------- d-----w- C:\Users\adminlukas\AppData\Roaming\AnyMeeting
2018-05-16 18:01:44 . 2018-05-16 18:02:03 -------- d-----w- C:\Users\adminlukas\AppData\Local\AnyMeeting
2018-05-16 18:01:39 . 2018-05-16 18:02:03 -------- d-----w- C:\Users\adminlukas\AppData\Local\SquirrelTemp
2018-05-10 23:12:10 . 2018-05-10 23:12:10 244208 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll
.


(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))

2018-05-09 14:25:46 . 2014-12-01 19:09:37 804864 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2018-05-09 14:25:46 . 2014-12-01 19:09:37 144896 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2018-05-09 11:13:37 . 2018-05-09 11:13:37 6084096 ----a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe
2018-03-23 19:50:52 . 2018-03-23 19:50:54 1094320 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{18B52F6A-5043-4797-A29C-47073B44BB02}\gapaengine.dll


(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))


*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2017-07-11 05:04:56 1524016 ----a-w- C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2017-07-11 05:04:56 1524016 ----a-w- C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2017-07-11 05:04:56 1524016 ----a-w- C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2010-11-21 03:24:51 1475584]
"World of Tanks"="C:\Games\World_of_Tanks\WargamingGameUpdater.exe" [2018-01-05 13:31:13 3139872]
"89274"="wscript.exe" [2013-10-12 01:15:48 141824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-03-27 09:14:26 291608]
"DTRun"="c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe" [2010-11-24 18:00:06 517456]
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-03-01 02:06:44 56088]
"SDTray"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2014-06-24 08:42:12 4101576]
"Aimersoft Helper Compact.exe"="C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe" [2012-02-28 13:43:10 1667072]
"PDF Complete"="C:\Program Files (x86)\PDF Complete\pdfsty.exe" [2018-02-01 19:42:04 1194048]

C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
89274.tmp.vbs [2018-1-1 30130]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-3697993826-1712495499-1262403601-1121\Scripts\Logon\0\0]
"Script"=pushprinterconnections.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-3697993826-1712495499-1262403601-1121\Scripts\Logon\0\1]
"Script"=logonall.bat

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;C:\windows\system32\DRIVERS\btath_flt.sys;C:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 BEService;BattlEye Service;C:\Program Files (x86)\Common Files\BattlEye\BEService.exe;C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;C:\windows\system32\drivers\btath_a2dp.sys;C:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 btath_avdt;Atheros Bluetooth AVDT Service;C:\windows\system32\drivers\btath_avdt.sys;C:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;C:\windows\system32\DRIVERS\btath_hcrp.sys;C:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;C:\windows\system32\DRIVERS\btath_lwflt.sys;C:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;C:\windows\system32\DRIVERS\btath_rcp.sys;C:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;C:\windows\system32\DRIVERS\btfilter.sys;C:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 c2wts;Claims to Windows Token Service;C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe;C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [x]
R3 cpuz134;cpuz134;C:\Users\lukass.CZ\AppData\Local\Temp\cpuz134\cpuz134_x64.sys;C:\Users\lukass.CZ\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\windows\system32\DRIVERS\ssudbus.sys;C:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;C:\windows\system32\drivers\dmvsc.sys;C:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 EasyAntiCheat;EasyAntiCheat;C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe;C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [x]
R3 GalaxyCommunication;GalaxyCommunication;C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe;C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [x]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe;c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\windows\system32\IEEtwCollector.exe;C:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 lpasvc;Microsoft Policy Platform Local Authority;C:\Program Files\Microsoft Policy Platform\policyHost.exe;C:\Program Files\Microsoft Policy Platform\policyHost.exe [x]
R3 lppsvc;Microsoft Policy Platform Processor;C:\Program Files\Microsoft Policy Platform\policyHost.exe;C:\Program Files\Microsoft Policy Platform\policyHost.exe [x]
R4 CmRcService;Configuration Manager Remote Control;C:\windows\CCM\RemCtrl\CmRcService.exe;C:\windows\CCM\RemCtrl\CmRcService.exe [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\windows\system32\DRIVERS\iusb3hcs.sys;C:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 ESProtectionDriver;Malwarebytes Anti-Exploit;C:\windows\system32\drivers\mbae64.sys;C:\windows\SYSNATIVE\drivers\mbae64.sys [x]
S2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Bluetooth Suite\adminservice.exe;C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;C:\windows\System32\svchost.exe;C:\windows\SYSNATIVE\svchost.exe [x]
S2 HP Power Assistant Service;HP Power Assistant Service;C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;C:\windows\system32\Hpservice.exe;C:\windows\SYSNATIVE\Hpservice.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\Program Files\Intel\iCLS Client\HeciServer.exe;c:\Program Files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMService;Malwarebytes Service;C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe;C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [x]
S3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver;C:\windows\system32\DRIVERS\ArcSoftVCapture.sys;C:\windows\SYSNATIVE\DRIVERS\ArcSoftVCapture.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;C:\windows\system32\DRIVERS\btath_bus.sys;C:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 IntcDAud;Intel(R) Display Audio;C:\windows\system32\DRIVERS\IntcDAud.sys;C:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\windows\system32\DRIVERS\iusb3hub.sys;C:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\windows\system32\DRIVERS\iusb3xhc.sys;C:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 JMCR;JMCR;C:\windows\system32\DRIVERS\jmcr.sys;C:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]


--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - MBAMFARFLT
*NewlyCreated* - MPKSLBB5523EE

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-08-15 10:18:05 995144 ----a-w- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.155\Installer\chrmstp.exe

Obsah adresáře 'Naplánované úlohy'

2018-06-06 C:\windows\Tasks\HPCeeScheduleForadminlukas.job
- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 11:43:00 . 2011-07-15 11:43:00]

2018-06-08 C:\windows\Tasks\HPCeeScheduleForlukass.job
- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 11:43:00 . 2011-07-15 11:43:00]


--------- X64 Entries -----------


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2017-07-11 05:03:50 2179376 ----a-w- C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2017-07-11 05:03:50 2179376 ----a-w- C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2017-07-11 05:03:50 2179376 ----a-w- C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\windows\system32\igfxtray.exe" [2012-04-02 08:30:00 170264]
"HotKeysCmds"="C:\windows\system32\hkcmd.exe" [2012-04-02 08:29:50 398616]
"Persistence"="C:\windows\system32\igfxpers.exe" [2012-04-02 08:29:54 439064]
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe" [2012-03-05 15:04:18 1425408]
"MSC"="c:\Program Files\Microsoft Security Client\msseces.exe" [2016-11-14 19:57:26 1353680]

------- Doplňkový sken -------

uStart Page = hxxp://www.google.cz/
uLocal Page = C:\windows\system32\blank.htm
mLocal Page = C:\Windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: E&xportovat do Microsoft Excelu - C:\PROGRA~2\MICROS~1\Office16\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Poslat do On&eNotu - C:\PROGRA~2\MICROS~1\Office16\ONBttnIE.dll/105
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files\TRANSLAT\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: Interfaces\{9223D93B-7400-441E-A964-CBCFA36AD5D5}: NameServer = 8.8.8.8,8.8.4.4
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
FF - ProfilePath - C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default\
FF - prefs.js: browser.search.selectedEngine - DuckDuckGo
FF - prefs.js: browser.startup.homepage - hxxps://www.google.cz/
FF - prefs.js: keyword.URL - hxxps://duckduckgo.com/?q={searchTerms}

- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Wow6432Node-HKCU-Run-GalaxyClient - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Notify-SDWinLogon - SDWinLogon.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM_Wow6432Node-ActiveSetup-{438363A8-F486-4C37-834C-4955773CB3D3} - msiexec
HKLM-Run-SynTPEnh - C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-fotoknihyMCL_fotoknihyMCL - C:\windows\system32\fotoknihyMCL_fotoknihyMCL_uninstaller.exe
AddRemove-FOTOKNIHY_FOTOKNIHY - C:\windows\system32\FOTOKNIHY_FOTOKNIHY_uninstaller.exe
AddRemove-StormWare Prodict 2002 Anglický velký slovník - C:\windows\IsUn0405.exe

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\89274.tmp.vbs

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"89274"=-

Reglock::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

ClearJavaCache::

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej uchopte myší a přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by adminlukas at 2018-06-08 23:06:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 342 GB (49%) free of 692 GB
Total RAM: 3980 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:06:23, on 8.6.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18525)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files\trend micro\adminlukas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [89274] wscript.exe //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
O4 - Startup: 89274.tmp.vbs
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\PROGRA~2\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Poslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Poslat do On&eNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Program Files\TRANSLAT\WEBIE.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CCS\Services\Tcpip\..\{9223D93B-7400-441E-A964-CBCFA36AD5D5}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BEJO.LOCAL
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 15294 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\Hpservice.exe
C:\windows\system32\vcsFPService.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 25416288
\??\C:\windows\system32\conhost.exe "-551255450-279997755-2078166288-914006152138508165189734740534786429-475103544
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {098887FD-D49A-4A5D-B39E-E18E738D247F}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\windows\System32\svchost.exe -k HPZ12
"C:\windows\system32\Dwm.exe"
"taskhost.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\windows\Explorer.EXE
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Windows\System32\wscript.exe" //B "C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\servicing\TrustedInstaller.exe
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4063930a-f827-47a3-80a6-48d7a15e69a9 -SystemEventPortName:HostProcess-2313f19b-6f35-48ad-b4c9-806384ad260b -IoCancelEventPortName:HostProcess-74a60093-c5d1-4562-b16a-39a3fc094349 -NonStateChangingEventPortName:HostProcess-6bad9d6c-fa0d-407d-8e57-b3a3dd4deaa6 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:caba5671-4e47-4002-9772-9126f502ed16 -DeviceGroupId:
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"C:\AVG\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\windows\tasks\HPCeeScheduleForadminlukas.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForadminlukas (null)
C:\windows\tasks\HPCeeScheduleForlukass.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForlukass (null)

=========Mozilla firefox=========

ProfilePath - C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default

prefs.js - "browser.startup.homepage" - "https://www.google.cz/"
prefs.js - "keyword.URL" - "https://duckduckgo.com/?q={searchTerms}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Skype for Business Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Users\adminlukas\AppData\Roaming\Mozilla\Firefox\Profiles\m9vzb57n.default\extensions\
vjpvchdmsnsxgvdrj_d@jnhszdttblwlqf.net

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-12-13 236744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 580312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 2179376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31 161448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-15 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office16\URLREDIR.DLL [2015-07-31 403672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2017-07-11 1524016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-15 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-03-09 2887440]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-04-02 398616]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-04-02 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-03-05 1425408]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-01-05 3139872]
"89274"=wscript.exe //B C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2012-01-19 800416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-01-19 1016992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager]
c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2012-03-16 184704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPPowerAssistant]
C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2012-03-14 15232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QLBController]
C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-03-14 319360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\qttask.exe [2012-09-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-03-14 27545048]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"DTRun"=c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [2010-11-24 517456]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-03-01 56088]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]
"Aimersoft Helper Compact.exe"=C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2012-02-28 1667072]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2018-02-01 1194048]

C:\Users\adminlukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
89274.tmp.vbs

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-03-27 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2018-06-08 22:22:57 ----SHD---- C:\$RECYCLE.BIN
2018-06-08 22:19:53 ----SD---- C:\32788R22FWJFW
2018-06-08 21:29:04 ----D---- C:\windows\temp
2018-06-08 21:28:53 ----A---- C:\ComboFix.txt
2018-06-08 21:06:49 ----A---- C:\windows\zip.exe
2018-06-08 21:06:49 ----A---- C:\windows\SWSC.exe
2018-06-08 21:06:49 ----A---- C:\windows\SWREG.exe
2018-06-08 21:06:49 ----A---- C:\windows\sed.exe
2018-06-08 21:06:49 ----A---- C:\windows\PEV.exe
2018-06-08 21:06:49 ----A---- C:\windows\NIRCMD.exe
2018-06-08 21:06:49 ----A---- C:\windows\MBR.exe
2018-06-08 21:06:49 ----A---- C:\windows\grep.exe
2018-06-08 21:06:41 ----D---- C:\ComboFix
2018-06-08 21:05:44 ----D---- C:\Qoobox
2018-06-08 21:05:13 ----D---- C:\windows\erdnt
2018-06-08 20:02:20 ----A---- C:\windows\system32\drivers\mbam.sys
2018-06-08 20:02:15 ----A---- C:\windows\system32\drivers\farflt.sys
2018-06-08 20:02:14 ----A---- C:\windows\system32\drivers\mwac.sys
2018-06-08 20:02:13 ----A---- C:\windows\system32\drivers\MbamChameleon.sys
2018-06-08 20:02:04 ----A---- C:\windows\system32\drivers\mbamswissarmy.sys
2018-06-08 20:01:44 ----A---- C:\windows\system32\drivers\mbae64.sys
2018-06-08 20:01:39 ----D---- C:\ProgramData\Malwarebytes
2018-06-08 20:01:39 ----D---- C:\Program Files\Malwarebytes
2018-06-08 17:16:30 ----A---- C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs
2018-06-08 17:08:05 ----D---- C:\_OTM
2018-06-07 21:42:57 ----D---- C:\rsit
2018-06-07 21:42:57 ----D---- C:\Program Files\trend micro
2018-05-16 20:01:56 ----D---- C:\Users\adminlukas\AppData\Roaming\AnyMeeting
2018-05-09 13:13:37 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2018-06-08 23:06:23 ----D---- C:\windows\Prefetch
2018-06-08 23:05:47 ----D---- C:\windows\system32\drivers
2018-06-08 23:05:42 ----D---- C:\windows\system32\config
2018-06-08 23:05:22 ----D---- C:\ProgramData\PDFC
2018-06-08 23:04:30 ----D---- C:\Program Files (x86)\Hi-Rez Studios
2018-06-08 22:26:14 ----A---- C:\windows\SYSWOW64\log.txt
2018-06-08 21:59:31 ----RD---- C:\Deska
2018-06-08 21:29:04 ----D---- C:\Windows
2018-06-08 21:26:35 ----D---- C:\windows\system32\Tasks
2018-06-08 21:26:34 ----D---- C:\windows\Tasks
2018-06-08 21:24:10 ----A---- C:\windows\system.ini
2018-06-08 21:24:02 ----D---- C:\windows\system32\drivers\etc
2018-06-08 21:23:06 ----D---- C:\ProgramData
2018-06-08 21:17:08 ----D---- C:\windows\SYSWOW64\drivers
2018-06-08 21:17:08 ----D---- C:\windows\SysWOW64
2018-06-08 21:17:08 ----D---- C:\windows\AppPatch
2018-06-08 21:17:07 ----D---- C:\Program Files (x86)\Common Files
2018-06-08 21:07:40 ----SHD---- C:\System Volume Information
2018-06-08 21:04:46 ----RD---- C:\AVG
2018-06-08 20:54:55 ----A---- C:\windows\SMSCFG.ini
2018-06-08 20:48:07 ----D---- C:\ProgramData\Fighters
2018-06-08 20:01:39 ----RD---- C:\Program Files
2018-06-08 20:00:05 ----D---- C:\windows\System32
2018-06-08 20:00:05 ----A---- C:\windows\system32\PerfStringBackup.INI
2018-06-08 20:00:04 ----D---- C:\windows\inf
2018-06-07 18:58:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2018-06-07 06:18:14 ----D---- C:\AdwCleaner
2018-06-05 23:58:45 ----D---- C:\CD
2018-06-05 06:03:13 ----SHD---- C:\windows\Installer
2018-06-05 06:02:34 ----D---- C:\Program Files (x86)\Media Update
2018-06-03 22:25:31 ----RD---- C:\Hudební alba 3
2018-05-27 14:30:12 ----D---- C:\Config.Msi
2018-05-26 16:35:01 ----RD---- C:\Hudební alba 2. (2014-15)
2018-05-26 16:34:44 ----RD---- C:\Hudební alba 1. (2012-13)
2018-05-26 16:34:09 ----RD---- C:\My Disc
2018-05-26 16:31:24 ----RD---- C:\Users
2018-05-26 16:30:52 ----RD---- C:\Program Files (x86)
2018-05-26 16:29:50 ----D---- C:\windows\system32\appmgmt
2018-05-18 22:44:51 ----D---- C:\Users\adminlukas\AppData\Roaming\Skype
2018-05-15 07:14:02 ----D---- C:\windows\system32\FxsTmp
2018-05-14 21:53:29 ----D---- C:\windows\system32\Macromed
2018-05-13 22:20:35 ----D---- C:\windows\system32\NDF
2018-05-09 16:25:46 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2018-05-09 13:13:38 ----D---- C:\windows\SYSWOW64\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-03-16 30488]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2012-02-02 568600]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 ESProtectionDriver;Malwarebytes Anti-Exploit; \??\C:\windows\system32\drivers\mbae64.sys [2018-05-24 152184]
R1 MpKslbb5523ee;MpKslbb5523ee; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{949BE5EA-DA7E-4DA2-8A5B-0AE64B5E1F2D}\MpKslbb5523ee.sys [2018-06-08 58120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 MBAMChameleon;MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [2018-06-08 190696]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-03-16 43800]
R3 Afc;PPdus ASPI Shell; C:\windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2012-02-03 42816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2012-03-21 2808832]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\windows\system32\DRIVERS\btath_bus.sys [2012-01-19 30368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2011-07-18 25912]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-03-27 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2012-02-28 173656]
R3 MBAMFarflt;MBAMFarflt; C:\windows\system32\DRIVERS\farflt.sys [2018-06-08 112872]
R3 MBAMProtection;MBAMProtection; C:\windows\system32\DRIVERS\mbam.sys [2018-06-08 44768]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [2018-06-08 253664]
R3 MBAMWebProtection;MBAMWebProtection; C:\windows\system32\DRIVERS\mwac.sys [2018-06-08 94840]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\HECIx64.sys [2011-11-09 60184]
R3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-24 648808]
R3 SPUVCbv;SPUVCb Driver Service; C:\windows\System32\Drivers\SPUVCbv_x64.sys [2012-03-26 2891512]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\windows\system32\DRIVERS\stwrt64.sys [2012-03-05 536064]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2012-03-09 425232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\windows\system32\DRIVERS\btath_flt.sys [2012-01-19 36000]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\windows\system32\drivers\btath_a2dp.sys [2012-01-19 339616]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\windows\system32\drivers\btath_avdt.sys [2012-01-19 110752]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\windows\system32\DRIVERS\btath_hcrp.sys [2012-01-19 167584]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\windows\system32\DRIVERS\btath_lwflt.sys [2012-01-19 68256]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\windows\system32\DRIVERS\btath_rcp.sys [2012-01-19 280992]
S3 BtFilter;BtFilter; C:\windows\system32\DRIVERS\btfilter.sys [2012-01-19 550560]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2012-04-16 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz134;cpuz134; \??\C:\Users\lukass.CZ\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2012-09-19 102368]
S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-27 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 prepdrvr;SMS Process Event Driver; C:\windows\system32\DRIVERS\prepdrv.sys [2012-11-21 26984]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SndTAudio;SndTAudio; C:\windows\system32\drivers\SndTAudio.sys [2014-07-28 36064]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2013-10-28 204568]
S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 vmbus;vmbus; C:\windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-01-19 106144]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2017-03-28 9728]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-03-14 365440]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2012-03-16 33560]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-03-07 629984]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-03-28 165144]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-05-09 6541008]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2018-02-01 1795136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-02-27 317400]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2012-03-05 314880]
R2 uArcCapture;ArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [2012-02-03 498352]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2012-03-20 2694224]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 CcmExec;SMS Agent Host; C:\windows\CCM\CcmExec.exe [2017-07-13 1799072]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-01 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-01 124088]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
S2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992]
S2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-03-01 13592]
S2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-03-28 128280]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-03-28 277784]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-03-28 363800]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-09 272384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-01 50864]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2018-03-28 7013384]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-03-28 774272]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-12-26 7184440]
S3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2012-03-16 1420160]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2016-10-27 114688]
S3 lpasvc;Microsoft Policy Platform Local Authority; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 lppsvc;Microsoft Policy Platform Processor; C:\Program Files\Microsoft Policy Platform\policyHost.exe [2016-09-18 50360]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-23 148080]
S3 OnePointDomainAdminService;Active Directory Migration Agent; C:\windows\OnePointDomainAgent\DCTAgentService.exe [2014-05-19 91648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-13 253128]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-07-30 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 smstsmgr;ConfigMgr Task Sequence Agent; C:\windows\CCM\TSManager.exe [2017-07-13 333728]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S4 CmRcService;Configuration Manager Remote Control; C:\windows\CCM\RemCtrl\CmRcService.exe [2017-07-13 699808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-01 139944]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552]

-----------------EOF-----------------

Chtěl jsem sice po vás log ComboFix po mazání. Drží se to tam stále a nevím proč. Zkuste ručně odmazat toto:

C:\Users\adminlukas\AppData\Roaming\89274.tmp.vbs

a tuto hodnotu klíče:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"89274"=

Návod k mazání v registry najdete zde: https://forum.viry.cz/viewtopic.php?f=46&t=2791 .

Soubor mi smazat nejde. Windows nedovolí.

V Registru mi ([HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"89274"=) smazat jde. Ale po restartu je to tam znovu na stejném místě.

Lukáš

Musí to být tím červem:
Worm:VBS/Jenxcus!lnk co mi říká SCEP, ale to je jasný