VIRY.CZ

Prosím o kontrolu logu. Děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mamka a taťka at 2018-11-03 12:03:59
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 81 GB (55%) free of 147 GB
Total RAM: 2013 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:06:20, on 3.11.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Mamka a taťka\Desktop\Downloads\RSIT (1).exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Mamka a taťka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe" /launch /hide
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype for Desktop] C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ESET Firewall Helper (ekrnEpfw) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

--
End of file - 5722 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 170520]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-06-20 2358584]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2017-11-15 318112]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe [2018-10-07 169616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCInstallQueue"=rundll32 netman.dll,ProcessQueue []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"Skype for Desktop"=C:\Program Files\Microsoft\Skype for Desktop\Skype.exe [2018-08-28 49799184]

C:\Users\Mamka a taťka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2018-10-19 18:47:05 ----D---- C:\Program Files\Microsoft

======List of files/folders modified in the last 1 month======

2018-11-03 12:05:37 ----D---- C:\Windows\Temp
2018-11-03 12:05:20 ----D---- C:\Program Files\trend micro
2018-11-03 11:51:16 ----D---- C:\Windows\system32\config
2018-11-03 11:51:07 ----D---- C:\Windows\SoftwareDistribution
2018-11-03 11:50:39 ----D---- C:\Windows\System32
2018-11-03 11:50:39 ----D---- C:\Windows\inf
2018-11-03 11:50:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-11-03 11:49:45 ----D---- C:\Windows\Prefetch
2018-10-23 20:24:58 ----SHD---- C:\Windows\Installer
2018-10-23 20:23:42 ----D---- C:\Windows
2018-10-19 18:47:30 ----SD---- C:\Users\Mamka a taťka\AppData\Roaming\Microsoft
2018-10-19 18:47:05 ----RD---- C:\Program Files
2018-10-19 18:47:01 ----RD---- C:\Program Files\Skype
2018-10-19 18:47:01 ----D---- C:\Program Files\Common Files
2018-10-19 18:46:47 ----D---- C:\ProgramData\Skype
2018-10-19 13:26:37 ----D---- C:\Users\Mamka a taťka\AppData\Roaming\Skype
2018-10-07 13:40:33 ----D---- C:\Windows\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2018-10-07 123352]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2018-10-07 149192]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2018-10-07 94200]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-11 242240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-08-25 9024512]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-06-20 325432]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 catchme;catchme; \??\C:\Users\MAMKAA~1\AppData\Local\Temp\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2018-10-07 1798200]
R2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-05 144200]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-07-22 754784]
R3 ekrnEpfw;ESET Firewall Helper; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2018-10-07 1798200]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-05 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 102912]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-30 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-11 269504]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-11-05 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Zdravím!
Zkuste tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Je to snad ještě horší. Už to nereagovalo ani ne ctrl-alt-del. Musel jsem restartovat a dostat se na tuto stránku zabralo asi hodinu. Nicméně přikládám log a děkuji předem za pomoc.

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-10-31.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-04-2018
# Duration: 00:00:10
# OS: Windows 7 Professional
# Cleaned: 1
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Deleted MSN Homepage & Bing Search Engine

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1286 octets] - [04/11/2018 17:27:09]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########


# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-10-31.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 11-04-2018
# Duration: 00:00:56
# OS: Windows 7 Professional
# Scanned: 32026
# Detected: 1


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Legacy MSN Homepage & Bing Search Engine

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mamka a taťka at 2018-11-05 17:29:44
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 79 GB (54%) free of 147 GB
Total RAM: 2013 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:30:32, on 5.11.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19155)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\System32\dfrgui.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Mamka a taťka\Desktop\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Mamka a taťka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe" /launch /hide
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ESET Firewall Helper (ekrnEpfw) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

--
End of file - 4963 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 170520]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-06-20 2358584]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2017-11-15 318112]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe [2018-10-07 169616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCInstallQueue"=rundll32 netman.dll,ProcessQueue []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

C:\Users\Mamka a taťka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2018-11-05 03:41:02 ----SHD---- C:\Config.Msi
2018-11-05 03:20:54 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-11-05 03:02:58 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2018-11-04 18:22:44 ----A---- C:\Windows\system32\d3d10level9.dll
2018-11-04 18:22:36 ----A---- C:\Windows\system32\mtxoci.dll
2018-11-04 18:22:36 ----A---- C:\Windows\system32\msorcl32.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-11-04 18:20:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-11-04 18:20:45 ----A---- C:\Windows\system32\msxml3r.dll
2018-11-04 18:20:45 ----A---- C:\Windows\system32\mstext40.dll
2018-11-04 18:20:45 ----A---- C:\Windows\system32\msexch40.dll
2018-11-04 18:20:44 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-11-04 18:20:44 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-11-04 18:20:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\wdigest.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\SearchFilterHost.exe
2018-11-04 18:20:44 ----A---- C:\Windows\system32\pcawrk.exe
2018-11-04 18:20:44 ----A---- C:\Windows\system32\msxml6r.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\mferror.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-11-04 18:20:44 ----A---- C:\Windows\system32\drivers\fastfat.sys
2018-11-04 18:20:44 ----A---- C:\Windows\system32\AudioSes.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\audiodg.exe
2018-11-04 18:20:44 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-11-04 18:20:44 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-11-04 18:20:43 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-11-04 18:20:43 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-11-04 18:20:43 ----A---- C:\Windows\system32\wups.dll
2018-11-04 18:20:43 ----A---- C:\Windows\system32\wfapigp.dll
2018-11-04 18:20:43 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2018-11-04 18:20:43 ----A---- C:\Windows\system32\SearchIndexer.exe
2018-11-04 18:20:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-11-04 18:20:43 ----A---- C:\Windows\system32\mssitlb.dll
2018-11-04 18:20:43 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-11-04 18:20:43 ----A---- C:\Windows\system32\audiosrv.dll
2018-11-04 18:20:43 ----A---- C:\Windows\HelpPane.exe
2018-11-04 18:20:42 ----A---- C:\Windows\system32\winnsi.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\tzres.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\schannel.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\pcalua.exe
2018-11-04 18:20:42 ----A---- C:\Windows\system32\msnetobj.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\drmmgrtn.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\drivers\swenum.sys
2018-11-04 18:20:42 ----A---- C:\Windows\system32\drivers\mssmbios.sys
2018-11-04 18:20:42 ----A---- C:\Windows\system32\drivers\exfat.sys
2018-11-04 18:20:42 ----A---- C:\Windows\system32\dciman32.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\blackbox.dll
2018-11-04 18:20:42 ----A---- C:\Windows\system32\AUDIOKSE.dll
2018-11-04 18:20:41 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-11-04 18:20:41 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\wsmplpxy.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\pnrpsvc.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\msrd2x40.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\icfupgd.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\IcCoinstall.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\dnscacheugc.exe
2018-11-04 18:20:41 ----A---- C:\Windows\system32\cryptbase.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\credssp.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-11-04 18:20:41 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-11-04 18:20:40 ----A---- C:\Windows\system32\wups2.dll
2018-11-04 18:20:40 ----A---- C:\Windows\system32\mssrch.dll
2018-11-04 18:20:40 ----A---- C:\Windows\system32\mssprxy.dll
2018-11-04 18:20:40 ----A---- C:\Windows\system32\msscntrs.dll
2018-11-04 18:20:40 ----A---- C:\Windows\system32\mmcshext.dll
2018-11-04 18:20:40 ----A---- C:\Windows\system32\asycfilt.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\wvc.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\wpnpinst.exe
2018-11-04 18:20:39 ----A---- C:\Windows\system32\wkssvc.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\sscore.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\spoolsv.exe
2018-11-04 18:20:39 ----A---- C:\Windows\system32\samlib.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\rrinstaller.exe
2018-11-04 18:20:39 ----A---- C:\Windows\system32\pcaevts.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\nsisvc.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\netevent.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\msv1_0.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\inetppui.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\icaapi.dll
2018-11-04 18:20:39 ----A---- C:\Windows\system32\apisetschema.dll
2018-11-04 18:20:38 ----A---- C:\Windows\system32\TSpkg.dll
2018-11-04 18:20:38 ----A---- C:\Windows\system32\olepro32.dll
2018-11-04 18:20:38 ----A---- C:\Windows\system32\drmv2clt.dll
2018-11-04 18:20:38 ----A---- C:\Windows\system32\drivers\msrpc.sys
2018-11-04 18:20:37 ----A---- C:\Windows\system32\netbtugc.exe
2018-11-04 18:20:37 ----A---- C:\Windows\system32\ncrypt.dll
2018-11-04 18:20:37 ----A---- C:\Windows\system32\msscp.dll
2018-11-04 18:20:37 ----A---- C:\Windows\system32\mfpmp.exe
2018-11-04 18:20:37 ----A---- C:\Windows\system32\EncDump.dll
2018-11-04 18:20:37 ----A---- C:\Windows\system32\dxmasf.dll
2018-11-04 18:20:37 ----A---- C:\Windows\system32\drivers\ntfs.sys
2018-11-04 18:20:37 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-11-04 18:20:37 ----A---- C:\Windows\system32\comcat.dll
2018-11-04 18:20:37 ----A---- C:\Windows\system32\ci.dll
2018-11-04 18:20:37 ----A---- C:\Windows\system32\bcrypt.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\msrepl40.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\msrd3x40.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\msjtes40.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\msjetoledb40.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\msexcl40.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\MigAutoPlay.exe
2018-11-04 18:20:36 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-11-04 18:20:36 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-11-04 18:20:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-11-04 18:20:35 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-11-04 18:20:35 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\wudriver.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\WcsPlugInService.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\traffic.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\rdpcore.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\msshooks.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\msjint40.dll
2018-11-04 18:20:35 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-11-04 18:20:35 ----A---- C:\Windows\system32\drivers\hidusb.sys
2018-11-04 18:20:35 ----A---- C:\Windows\system32\drivers\errdev.sys
2018-11-04 18:20:35 ----A---- C:\Windows\system32\CscMig.dll
2018-11-04 18:20:34 ----A---- C:\Windows\system32\rpchttp.dll
2018-11-04 18:20:34 ----A---- C:\Windows\system32\P2P.dll
2018-11-04 18:20:34 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2018-11-04 18:20:34 ----A---- C:\Windows\system32\cscdll.dll
2018-11-04 18:20:34 ----A---- C:\Windows\system32\cscapi.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\tquery.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\qdvd.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\msihnd.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\msiexec.exe
2018-11-04 18:20:33 ----A---- C:\Windows\system32\mfps.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\mfmjpegdec.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\evr.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\dnsrslvr.dll
2018-11-04 18:20:33 ----A---- C:\Windows\system32\catsrvut.dll
2018-11-04 18:20:32 ----A---- C:\Windows\system32\schedsvc.dll
2018-11-04 18:20:32 ----A---- C:\Windows\system32\ntprint.dll
2018-11-04 18:20:32 ----A---- C:\Windows\system32\msxml3.dll
2018-11-04 18:20:32 ----A---- C:\Windows\system32\mmc.exe
2018-11-04 18:20:32 ----A---- C:\Windows\system32\inetpp.dll
2018-11-04 18:20:32 ----A---- C:\Windows\system32\cic.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\win32spl.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\UIAnimation.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\srvsvc.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\scesrv.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\samsrv.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\mprdim.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\lsass.exe
2018-11-04 18:20:31 ----A---- C:\Windows\system32\lpk.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\kerberos.dll
2018-11-04 18:20:31 ----A---- C:\Windows\system32\advapi32.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\wsnmp32.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\wintrust.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\WinSCard.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\rpcss.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\rpcrt4.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\oleaut32.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\MPSSVC.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\cryptsvc.dll
2018-11-04 18:20:30 ----A---- C:\Windows\system32\cryptnet.dll
2018-11-04 18:20:29 ----A---- C:\Windows\system32\wmdrmsdk.dll
2018-11-04 18:20:29 ----A---- C:\Windows\system32\TabSvc.dll
2018-11-04 18:20:29 ----A---- C:\Windows\system32\pcadm.dll
2018-11-04 18:20:29 ----A---- C:\Windows\system32\mfplat.dll
2018-11-04 18:20:29 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2018-11-04 18:20:29 ----A---- C:\Windows\system32\davclnt.dll
2018-11-04 18:20:28 ----A---- C:\Windows\system32\drivers\cng.sys
2018-11-04 18:20:27 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\srclient.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\spwmp.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\plasrv.exe
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-11-04 18:20:27 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-11-04 18:20:26 ----A---- C:\Windows\system32\mswstr10.dll
2018-11-04 18:20:26 ----A---- C:\Windows\system32\mspbde40.dll
2018-11-04 18:20:26 ----A---- C:\Windows\system32\msltus40.dll
2018-11-04 18:20:26 ----A---- C:\Windows\system32\msjter40.dll
2018-11-04 18:20:26 ----A---- C:\Windows\system32\msjet40.dll
2018-11-04 18:20:26 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-11-04 18:20:26 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2018-11-04 18:20:26 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-11-04 18:20:25 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-11-04 18:20:25 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-11-04 18:20:25 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-11-04 18:20:25 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-11-04 18:20:25 ----A---- C:\Windows\system32\wuwebv.dll
2018-11-04 18:20:25 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2018-11-04 18:20:25 ----A---- C:\Windows\system32\wshnetbs.dll
2018-11-04 18:20:25 ----A---- C:\Windows\system32\nsi.dll
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\nsiproxy.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\msisadrv.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\intelppm.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\hidclass.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\drivers\amdk8.sys
2018-11-04 18:20:25 ----A---- C:\Windows\system32\appidsvc.dll
2018-11-04 18:20:24 ----A---- C:\Windows\system32\wsmprovhost.exe
2018-11-04 18:20:24 ----A---- C:\Windows\system32\werdiagcontroller.dll
2018-11-04 18:20:24 ----A---- C:\Windows\system32\mssphtb.dll
2018-11-04 18:20:24 ----A---- C:\Windows\system32\iernonce.dll
2018-11-04 18:20:23 ----A---- C:\Windows\system32\p2psvc.dll
2018-11-04 18:20:23 ----A---- C:\Windows\system32\cscsvc.dll
2018-11-04 18:20:21 ----A---- C:\Windows\system32\mscms.dll
2018-11-04 18:20:21 ----A---- C:\Windows\system32\AudioEng.dll
2018-11-04 18:20:20 ----A---- C:\Windows\system32\Query.dll
2018-11-04 18:20:20 ----A---- C:\Windows\system32\comsvcs.dll
2018-11-04 18:20:19 ----A---- C:\Windows\system32\quartz.dll
2018-11-04 18:20:18 ----A---- C:\Windows\system32\dnsapi.dll
2018-11-04 18:20:17 ----A---- C:\Windows\system32\wer.dll
2018-11-04 18:20:17 ----A---- C:\Windows\system32\itss.dll
2018-11-04 18:20:16 ----A---- C:\Windows\system32\Wldap32.dll
2018-11-04 18:20:16 ----A---- C:\Windows\system32\msi.dll
2018-11-04 18:20:14 ----A---- C:\Windows\system32\mmcndmgr.dll
2018-11-04 18:20:14 ----A---- C:\Windows\system32\inetcomm.dll
2018-11-04 18:20:13 ----A---- C:\Windows\system32\msxml6.dll
2018-11-04 18:20:12 ----A---- C:\Windows\system32\localspl.dll
2018-11-04 18:20:11 ----A---- C:\Windows\system32\termsrv.dll
2018-11-04 18:20:09 ----A---- C:\Windows\system32\lsasrv.dll
2018-11-04 18:20:08 ----A---- C:\Windows\system32\pla.dll
2018-11-04 18:20:07 ----A---- C:\Windows\system32\pdh.dll
2018-11-04 18:20:07 ----A---- C:\Windows\system32\ole32.dll
2018-11-04 18:20:06 ----A---- C:\Windows\system32\crypt32.dll
2018-11-04 18:20:05 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-11-04 18:20:05 ----A---- C:\Windows\system32\cdosys.dll
2018-11-04 18:20:04 ----A---- C:\Windows\system32\adsmsext.dll
2018-11-04 18:20:03 ----A---- C:\Windows\system32\wisptis.exe
2018-11-04 18:20:03 ----A---- C:\Windows\system32\MSVidCtl.dll
2018-11-04 18:20:02 ----A---- C:\Windows\system32\WebClnt.dll
2018-11-04 18:20:02 ----A---- C:\Windows\system32\pcasvc.dll
2018-11-04 18:20:01 ----A---- C:\Windows\system32\mf.dll
2018-11-04 18:20:00 ----A---- C:\Windows\system32\srcore.dll
2018-11-04 18:20:00 ----A---- C:\Windows\system32\resmon.exe
2018-11-04 18:20:00 ----A---- C:\Windows\system32\pdhui.dll
2018-11-04 18:20:00 ----A---- C:\Windows\system32\conhost.exe
2018-11-04 18:19:59 ----A---- C:\Windows\system32\vmictimeprovider.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\sspisrv.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\secur32.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\msxbde40.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\mswdat10.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\msmmsp.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2018-11-04 18:19:59 ----A---- C:\Windows\system32\auditpol.exe
2018-11-04 18:19:59 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-11-04 18:19:59 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\srv.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\pacer.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\nwifi.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\netio.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\netbt.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\http.sys
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-11-04 18:19:58 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\halacpi.dll
2018-11-04 18:19:57 ----A---- C:\Windows\system32\hal.dll
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\volmgr.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\vdrvroot.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\termdd.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\tdx.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\processr.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\luafv.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\amdppm.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\drivers\afd.sys
2018-11-04 18:19:57 ----A---- C:\Windows\system32\csrsrv.dll
2018-11-04 18:19:57 ----A---- C:\Windows\system32\cdd.dll
2018-11-04 18:19:57 ----A---- C:\Windows\system32\appidapi.dll
2018-11-04 18:19:56 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-11-04 18:19:56 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-11-04 18:19:56 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-11-04 18:19:56 ----A---- C:\Windows\system32\zipfldr.dll
2018-11-04 18:19:56 ----A---- C:\Windows\system32\wuaueng.dll
2018-11-04 18:19:56 ----A---- C:\Windows\system32\wuapp.exe
2018-11-04 18:19:56 ----A---- C:\Windows\system32\rstrui.exe
2018-11-04 18:19:56 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-11-04 18:19:56 ----A---- C:\Windows\system32\drivers\usbohci.sys
2018-11-04 18:19:55 ----A---- C:\Windows\system32\WsmWmiPl.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\WsmAuto.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2018-11-04 18:19:55 ----A---- C:\Windows\system32\wshqos.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\PeerDistHttpTrans.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\PeerDist.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\appinfo.dll
2018-11-04 18:19:55 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-11-04 18:19:54 ----A---- C:\Windows\system32\wermgr.exe
2018-11-04 18:19:54 ----A---- C:\Windows\system32\sdchange.exe
2018-11-04 18:19:54 ----A---- C:\Windows\system32\mssph.dll
2018-11-04 18:19:54 ----A---- C:\Windows\system32\msrahc.dll
2018-11-04 18:19:54 ----A---- C:\Windows\system32\inseng.dll
2018-11-04 18:19:54 ----A---- C:\Windows\system32\ie4uinit.exe
2018-11-04 18:19:52 ----A---- C:\Windows\system32\wmp.dll
2018-11-04 18:19:47 ----A---- C:\Windows\system32\streamci.dll
2018-11-04 18:19:47 ----A---- C:\Windows\system32\racpldlg.dll
2018-11-04 18:19:47 ----A---- C:\Windows\system32\itircl.dll
2018-11-04 18:19:47 ----A---- C:\Windows\system32\IMJP10K.DLL
2018-11-04 18:19:47 ----A---- C:\Windows\system32\hhsetup.dll
2018-11-04 18:19:47 ----A---- C:\Windows\hh.exe
2018-11-04 18:19:46 ----A---- C:\Windows\system32\winsrv.dll
2018-11-04 18:19:46 ----A---- C:\Windows\system32\perfmon.exe
2018-11-04 18:19:46 ----A---- C:\Windows\system32\msinfo32.exe
2018-11-04 18:19:46 ----A---- C:\Windows\system32\bcdedit.exe
2018-11-04 18:19:44 ----A---- C:\Windows\system32\vmicsvc.exe
2018-11-04 18:19:43 ----A---- C:\Windows\system32\ucrtbase.dll
2018-11-04 18:19:43 ----A---- C:\Windows\system32\sspicli.dll
2018-11-04 18:19:43 ----A---- C:\Windows\system32\drivers\netbios.sys
2018-11-04 18:19:42 ----A---- C:\Windows\system32\clfs.sys
2018-11-04 18:19:41 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-11-04 18:19:41 ----A---- C:\Windows\system32\drivers\rdbss.sys
2018-11-04 18:19:41 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-11-04 18:19:41 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2018-11-04 18:19:41 ----A---- C:\Windows\system32\atmfd.dll
2018-11-04 18:19:40 ----A---- C:\Windows\system32\win32k.sys
2018-11-04 18:19:39 ----A---- C:\Windows\system32\sysmain.dll
2018-11-04 18:19:39 ----A---- C:\Windows\system32\smss.exe
2018-11-04 18:19:39 ----A---- C:\Windows\system32\halmacpi.dll
2018-11-04 18:19:39 ----A---- C:\Windows\system32\drivers\wmiacpi.sys
2018-11-04 18:19:39 ----A---- C:\Windows\system32\drivers\viac7.sys
2018-11-04 18:19:39 ----A---- C:\Windows\system32\drivers\appid.sys
2018-11-04 18:19:38 ----A---- C:\Windows\system32\drivers\pci.sys
2018-11-04 18:19:38 ----A---- C:\Windows\system32\drivers\isapnp.sys
2018-11-04 18:19:37 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-11-04 18:19:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-11-04 18:19:37 ----A---- C:\Windows\system32\UtcResources.dll
2018-11-04 18:19:37 ----A---- C:\Windows\system32\drivers\usbehci.sys
2018-11-04 18:19:31 ----A---- C:\Windows\system32\wuauclt.exe
2018-11-04 18:19:31 ----A---- C:\Windows\system32\wuapi.dll
2018-11-04 18:19:29 ----A---- C:\Windows\system32\PeerDistSvc.dll
2018-11-04 18:19:29 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2018-11-04 18:19:28 ----A---- C:\Windows\system32\WsmSvc.dll
2018-11-04 18:19:26 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-11-04 18:19:20 ----A---- C:\Windows\system32\WinSetupUI.dll
2018-11-04 18:19:20 ----A---- C:\Windows\system32\urlmon.dll
2018-11-04 18:19:20 ----A---- C:\Windows\system32\iedkcs32.dll
2018-11-04 18:19:19 ----A---- C:\Windows\system32\mssvp.dll
2018-11-04 18:19:19 ----A---- C:\Windows\system32\msra.exe
2018-11-04 18:19:18 ----A---- C:\Windows\system32\wmploc.DLL
2018-11-04 18:19:18 ----A---- C:\Windows\system32\PrintBrmUi.exe
2018-11-04 18:19:17 ----A---- C:\Windows\system32\occache.dll
2018-11-04 18:19:16 ----A---- C:\Windows\system32\gpedit.dll
2018-11-04 18:19:15 ----A---- C:\Windows\system32\wdc.dll
2018-11-04 18:19:15 ----A---- C:\Windows\system32\consent.exe
2018-11-04 18:19:15 ----A---- C:\Windows\system32\authui.dll
2018-11-04 18:19:14 ----A---- C:\Windows\system32\rundll32.exe
2018-11-04 18:19:14 ----A---- C:\Windows\system32\ntprint.exe
2018-11-04 18:19:13 ----A---- C:\Windows\system32\user32.dll
2018-11-04 18:19:13 ----A---- C:\Windows\system32\msctf.dll
2018-11-04 18:19:13 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-11-04 18:19:11 ----A---- C:\Windows\system32\drivers\csc.sys
2018-11-04 18:19:11 ----A---- C:\Windows\system32\drivers\bowser.sys
2018-11-04 18:19:10 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-11-04 18:19:10 ----A---- C:\Windows\system32\ntdll.dll
2018-11-04 18:19:10 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-11-04 18:19:10 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-11-04 18:19:10 ----A---- C:\Windows\system32\drivers\ks.sys
2018-11-04 18:19:10 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2018-11-04 18:19:10 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2018-11-04 18:19:09 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2018-11-04 18:19:09 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-11-04 18:19:09 ----A---- C:\Windows\system32\drivers\bthpan.sys
2018-11-04 18:19:09 ----A---- C:\Windows\system32\drivers\acpi.sys
2018-11-04 18:19:08 ----A---- C:\Windows\system32\wlanapi.dll
2018-11-04 18:19:08 ----A---- C:\Windows\system32\vbscript.dll
2018-11-04 18:19:08 ----A---- C:\Windows\system32\rtm.dll
2018-11-04 18:19:08 ----A---- C:\Windows\system32\KernelBase.dll
2018-11-04 18:19:08 ----A---- C:\Windows\system32\iprtprio.dll
2018-11-04 18:19:07 ----A---- C:\Windows\system32\wlansec.dll
2018-11-04 18:19:07 ----A---- C:\Windows\system32\jsproxy.dll
2018-11-04 18:19:07 ----A---- C:\Windows\system32\jscript9diag.dll
2018-11-04 18:19:07 ----A---- C:\Windows\system32\dxtmsft.dll
2018-11-04 18:19:07 ----A---- C:\Windows\system32\diagtrack.dll
2018-11-04 18:19:06 ----A---- C:\Windows\system32\wucltux.dll
2018-11-04 18:19:05 ----A---- C:\Windows\system32\xpsrchvw.exe
2018-11-04 18:19:05 ----A---- C:\Windows\system32\ieapfltr.dll
2018-11-04 18:19:04 ----A---- C:\Windows\system32\msfeeds.dll
2018-11-04 18:19:02 ----A---- C:\Windows\system32\webcheck.dll
2018-11-04 18:19:02 ----A---- C:\Windows\system32\msrating.dll
2018-11-04 18:19:01 ----A---- C:\Windows\system32\iesetup.dll
2018-11-04 18:19:01 ----A---- C:\Windows\system32\cryptui.dll
2018-11-04 18:19:00 ----A---- C:\Windows\system32\shdocvw.dll
2018-11-04 18:19:00 ----A---- C:\Windows\system32\INETRES.dll
2018-11-04 18:18:59 ----A---- C:\Windows\system32\themeui.dll
2018-11-04 18:18:59 ----A---- C:\Windows\system32\shell32.dll
2018-11-04 18:18:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-11-04 18:18:58 ----A---- C:\Windows\system32\mmcbase.dll
2018-11-04 18:18:57 ----A---- C:\Windows\system32\kernel32.dll
2018-11-04 18:18:57 ----A---- C:\Windows\system32\jscript.dll
2018-11-04 18:18:57 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-11-04 18:18:56 ----A---- C:\Windows\system32\wlanmsm.dll
2018-11-04 18:18:56 ----A---- C:\Windows\system32\wlanhlp.dll
2018-11-04 18:18:56 ----A---- C:\Windows\system32\iprtrmgr.dll
2018-11-04 18:18:53 ----A---- C:\Windows\system32\wininet.dll
2018-11-04 18:18:52 ----A---- C:\Windows\system32\dxtrans.dll
2018-11-04 18:18:51 ----A---- C:\Windows\system32\ieui.dll
2018-11-04 18:18:50 ----A---- C:\Windows\system32\ieframe.dll
2018-11-04 18:18:47 ----A---- C:\Windows\system32\mshtmled.dll
2018-11-04 18:18:46 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-11-04 18:18:45 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-11-04 18:18:44 ----A---- C:\Windows\system32\iertutil.dll
2018-11-04 18:18:42 ----A---- C:\Windows\system32\jscript9.dll
2018-11-04 18:18:41 ----A---- C:\Windows\system32\webservices.dll
2018-11-04 18:18:40 ----A---- C:\Windows\system32\wlansvc.dll
2018-11-04 18:18:38 ----A---- C:\Windows\system32\mshtml.dll
2018-11-04 18:18:36 ----A---- C:\Windows\system32\usp10.dll
2018-11-04 18:18:36 ----A---- C:\Windows\system32\icm32.dll
2018-11-04 18:18:36 ----A---- C:\Windows\system32\fontsub.dll
2018-11-04 18:18:36 ----A---- C:\Windows\system32\FntCache.dll
2018-11-04 18:18:36 ----A---- C:\Windows\system32\DWrite.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\t2embed.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\scksp.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\msimg32.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\mf3216.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\hlink.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\gdi32.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\drivers\hidparse.sys
2018-11-04 18:18:35 ----A---- C:\Windows\system32\basecsp.dll
2018-11-04 18:18:35 ----A---- C:\Windows\system32\atmlib.dll
2018-11-04 18:18:34 ----A---- C:\Windows\system32\WindowsCodecs.dll
2018-11-04 18:18:34 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-11-04 18:18:34 ----A---- C:\Windows\system32\aeinv.dll
2018-11-04 18:18:33 ----A---- C:\Windows\system32\scavengeui.dll
2018-11-04 18:18:33 ----A---- C:\Windows\system32\input.dll
2018-11-04 18:18:33 ----A---- C:\Windows\system32\ieUnatt.exe
2018-11-04 18:18:33 ----A---- C:\Windows\system32\cryptsp.dll
2018-11-04 18:18:32 ----A---- C:\Windows\system32\winload.exe
2018-11-04 18:18:31 ----A---- C:\Windows\system32\drivers\usbport.sys
2018-11-04 18:18:31 ----A---- C:\Windows\system32\drivers\usbhub.sys
2018-11-04 18:18:31 ----A---- C:\Windows\system32\drivers\usbd.sys
2018-11-04 18:18:31 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2018-11-04 18:18:30 ----A---- C:\Windows\system32\WsmRes.dll
2018-11-04 18:18:30 ----A---- C:\Windows\system32\oleres.dll
2018-11-04 18:18:30 ----A---- C:\Windows\system32\msimsg.dll
2018-11-04 18:18:30 ----A---- C:\Windows\system32\adtschema.dll
2018-11-04 18:18:29 ----A---- C:\Windows\system32\drivers\VIAAGP.SYS
2018-11-04 18:18:29 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS
2018-11-04 18:18:29 ----A---- C:\Windows\system32\drivers\SISAGP.SYS
2018-11-04 18:18:29 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS
2018-11-04 18:18:29 ----A---- C:\Windows\system32\drivers\AMDAGP.SYS
2018-11-04 18:18:29 ----A---- C:\Windows\system32\drivers\AGP440.sys
2018-11-04 18:18:28 ----A---- C:\Windows\system32\vmicres.dll
2018-11-04 18:18:28 ----A---- C:\Windows\system32\nlsbres.dll
2018-11-04 18:18:28 ----A---- C:\Windows\system32\msobjs.dll
2018-11-04 18:18:28 ----A---- C:\Windows\system32\msaudite.dll
2018-11-04 18:15:41 ----A---- C:\Windows\system32\gpsvc.dll
2018-11-04 18:15:41 ----A---- C:\Windows\system32\gpprefcl.dll
2018-11-04 18:15:40 ----A---- C:\Windows\system32\winipsec.dll
2018-11-04 18:15:40 ----A---- C:\Windows\system32\polstore.dll
2018-11-04 18:15:40 ----A---- C:\Windows\system32\IPSECSVC.DLL
2018-11-04 18:15:40 ----A---- C:\Windows\system32\gpscript.exe
2018-11-04 18:15:40 ----A---- C:\Windows\system32\gpscript.dll
2018-11-04 18:15:40 ----A---- C:\Windows\system32\gpapi.dll
2018-11-04 18:15:40 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2018-11-04 18:15:33 ----A---- C:\Windows\system32\webio.dll
2018-11-04 18:15:32 ----A---- C:\Windows\system32\InkEd.dll
2018-11-04 18:15:21 ----A---- C:\Windows\explorer.exe
2018-11-04 18:15:14 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2018-11-04 18:15:13 ----A---- C:\Windows\system32\drivers\disk.sys
2018-11-04 18:15:00 ----A---- C:\Windows\system32\bcryptprimitives.dll
2018-11-04 18:14:37 ----A---- C:\Windows\system32\tbs.dll
2018-11-04 18:14:37 ----A---- C:\Windows\system32\fveapibase.dll
2018-11-04 18:14:37 ----A---- C:\Windows\system32\fveapi.dll
2018-11-04 18:13:38 ----A---- C:\Windows\system32\ws2_32.dll
2018-11-04 18:13:38 ----A---- C:\Windows\system32\winhttp.dll
2018-11-04 18:13:38 ----A---- C:\Windows\system32\mswsock.dll
2018-11-04 18:10:25 ----A---- C:\Windows\system32\aitstatic.exe
2018-11-04 18:10:24 ----A---- C:\Windows\system32\invagent.dll
2018-11-04 18:10:24 ----A---- C:\Windows\system32\generaltel.dll
2018-11-04 18:10:24 ----A---- C:\Windows\system32\devinv.dll
2018-11-04 18:10:24 ----A---- C:\Windows\system32\centel.dll
2018-11-04 18:10:24 ----A---- C:\Windows\system32\appraiser.dll
2018-11-04 18:10:24 ----A---- C:\Windows\system32\aepic.dll
2018-11-04 18:10:24 ----A---- C:\Windows\system32\acmigration.dll
2018-11-04 17:24:40 ----D---- C:\AdwCleaner
2018-11-03 14:00:27 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2018-11-03 14:00:23 ----A---- C:\Windows\system32\seclogon.dll
2018-11-03 14:00:22 ----A---- C:\Windows\system32\mfds.dll

======List of files/folders modified in the last 1 month======

2018-11-05 17:30:00 ----D---- C:\Windows\Prefetch
2018-11-05 17:29:55 ----D---- C:\Program Files\trend micro
2018-11-05 17:29:50 ----D---- C:\Windows\Temp
2018-11-05 14:29:50 ----D---- C:\Windows\system32\config
2018-11-05 05:22:12 ----D---- C:\Windows\rescache
2018-11-05 05:21:08 ----SHD---- C:\System Volume Information
2018-11-05 04:40:16 ----D---- C:\Windows\winsxs
2018-11-05 04:39:50 ----D---- C:\Windows\Microsoft.NET
2018-11-05 04:36:59 ----RSD---- C:\Windows\assembly
2018-11-05 04:26:06 ----D---- C:\Windows\System32
2018-11-05 04:26:06 ----D---- C:\Windows\inf
2018-11-05 04:26:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-11-05 04:22:02 ----SHD---- C:\Boot
2018-11-05 04:20:46 ----D---- C:\Windows\Logs
2018-11-05 04:13:11 ----D---- C:\Program Files\DVD Maker
2018-11-05 04:13:10 ----D---- C:\Program Files\Windows Media Player
2018-11-05 04:13:10 ----D---- C:\Program Files\Internet Explorer
2018-11-05 04:13:09 ----D---- C:\Windows\system32\migration
2018-11-05 04:13:09 ----D---- C:\Windows\system32\en-US
2018-11-05 04:13:09 ----D---- C:\Windows\PolicyDefinitions
2018-11-05 04:13:09 ----D---- C:\Windows\ehome
2018-11-05 04:13:08 ----D---- C:\Windows\system32\Setup
2018-11-05 04:13:08 ----D---- C:\Windows\system32\cs-CZ
2018-11-05 04:13:06 ----D---- C:\Windows\system32\migwiz
2018-11-05 04:13:06 ----D---- C:\Windows\system32\drivers\en-US
2018-11-05 04:13:06 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-11-05 04:13:06 ----D---- C:\Windows\system32\drivers
2018-11-05 04:13:05 ----D---- C:\Windows\system32\Dism
2018-11-05 04:12:43 ----RSD---- C:\Windows\Fonts
2018-11-05 04:12:43 ----D---- C:\Windows\AppPatch
2018-11-05 04:12:43 ----D---- C:\Windows
2018-11-05 04:12:42 ----D---- C:\Windows\system32\CodeIntegrity
2018-11-05 04:12:42 ----D---- C:\Windows\system32\Boot
2018-11-05 04:12:40 ----RD---- C:\Program Files
2018-11-05 04:12:38 ----D---- C:\Windows\cs-CZ
2018-11-05 04:12:29 ----D---- C:\Windows\system32\wbem
2018-11-05 04:12:28 ----SD---- C:\Windows\system32\CompatTel
2018-11-05 04:12:28 ----D---- C:\Windows\system32\appraiser
2018-11-05 04:12:16 ----D---- C:\Windows\system32\DriverStore
2018-11-05 03:52:18 ----SHD---- C:\Windows\Installer
2018-11-05 03:28:25 ----D---- C:\Windows\system32\MRT
2018-11-05 03:28:00 ----AC---- C:\Windows\system32\MRT.exe
2018-11-05 03:21:17 ----D---- C:\Windows\debug
2018-11-04 18:13:17 ----D---- C:\Windows\system32\catroot2
2018-11-04 17:36:16 ----D---- C:\Windows\system32\Tasks
2018-11-03 11:51:07 ----D---- C:\Windows\SoftwareDistribution
2018-10-19 18:47:30 ----SD---- C:\Users\Mamka a taťka\AppData\Roaming\Microsoft
2018-10-19 18:47:01 ----RD---- C:\Program Files\Skype
2018-10-19 18:47:01 ----D---- C:\Program Files\Common Files
2018-10-19 18:46:47 ----D---- C:\ProgramData\Skype
2018-10-19 13:26:37 ----D---- C:\Users\Mamka a taťka\AppData\Roaming\Skype
2018-10-15 22:48:01 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2018-06-29 389632]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2018-10-07 123352]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2018-10-07 149192]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2018-10-07 94200]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-11 242240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-08-25 9024512]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-06-20 325432]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2018-02-10 52928]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 94208]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 catchme;catchme; \??\C:\Users\MAMKAA~1\AppData\Local\Temp\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2018-02-10 51904]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2018-02-10 52928]
S3 ViaC7;Ovladač procesoru VIA C7; C:\Windows\system32\drivers\viac7.sys [2018-09-09 53248]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2018-10-07 1798200]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-07-22 754784]
R3 ekrnEpfw;ESET Firewall Helper; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2018-10-07 1798200]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2018-03-26 107592]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-05 144200]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-05 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-09-18 104960]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-30 1343400]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-11 269504]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2018-03-26 47200]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Já sice frst nepoužívám, ale předpokládám, že přes rsit ten příkaz fix neudělám. Takže jdu stáhnout a za chvíli to sem hodím.

EDIT: ten OTM tam možnost jen tak uložit ten soubor nemá. Je tam buď move it, clean up a nebo exit. Zvolil jsem tedy move it, něco proběhlo a restartoval se ntb, log to však žádný nevyhodilo. CO dělám špatně, resp. jak mám uložit něco, co tu možnost ani nedává . Děkuji za osvětu.

Pokud ho správně (a dosprávného adresáře) uložíte, není důvod, proč by to nemělo jít.

Já Vám rozumím, ale bohužel jsem negramotný a v tom otm nevidím možnost, jak to uložit jako txt nebo jako cokoliv jiného.Přikládám výstřižek.
Prosím o polopatistické vysvětlení a předem za něj děkuji.

EDIT: zkoušel jsem asi i blbost, a to uložit ten váš příkaz jako txt soubor a rozjet fix pře frst, ale hodilo mi to takovýto log

Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Mamka a taťka (2018-11-05 20:51:24) Run:1
Running from C:\Users\Mamka a taťka\Desktop
Loaded Profiles: Mamka a taťka (Available Profiles: Mamka a taťka)
Boot Mode: Normal

==============================================

fixlist content:
*****************
:commands
[Purity]
[Emptytemp]
[Emptyflash]
*****************

:commands => Error: No automatic fix found for this entry.
[Purity] => Error: No automatic fix found for this entry.
[Emptytemp] => Error: No automatic fix found for this entry.
[Emptyflash] => Error: No automatic fix found for this entry.

==== End of Fixlog 20:51:25 ====.


Takže asi nic.

Jj. Čisto. Pokud se chod nezrychlil, zkusíme zkontrolovat disk. Stáhněte, nainstalujte a spusťte CrystalDiskInfo: https://www.stahuj.cz/utility_a_ostatni ... ldiskinfo/ a přes Úpravy>kopírovat sem dejte log.

Tady je:

----------------------------------------------------------------------------
CrystalDiskInfo 7.8.1 (C) 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x86)
Date : 2018/11/05 21:36:23

-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- HITACHI HTS543216L9SA00 ATA Device
+ ATA Channel 1 (1) [ATA]
- MATSHITA DVD-RAM UJ870A ATA Device
- ATA Channel 4 (4) [ATA]
- ATA Channel 5 (5) [ATA]
- Ricoh xD-Picture Card Controller [ATA]
+ Standardní řadič AHCI 1.0 s rozhraním Serial ATA [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
- ATA Channel 4 (4)
- ATA Channel 5 (5)

-- Disk List ---------------------------------------------------------------
(1) HITACHI HTS543216L9SA00 : 160,0 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) HITACHI HTS543216L9SA00
----------------------------------------------------------------------------
Model : HITACHI HTS543216L9SA00
Firmware : FB2ZC48C
Serial Number : 081126FB2232LCJ83N1A
Disk Size : 160,0 GB (8,4/137,4/160,0/160,0)
Buffer Size : 7114 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 3f
Transfer Mode : ---- | SATA/150
Power On Hours : 4904 hod.
Power On Count : 5141 krát
Temperature : 37 C (98 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 4080h [ON]
AAM Level : ----
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _62 000000000000 Počet chyb čtení
02 108 108 _40 000000001165 Průchodnost disku
03 253 253 _33 000300000000 Čas na roztočení ploten
04 _97 _97 __0 000000001481 Počet spuštění/zastavení
05 100 100 __5 000000000000 Počet přemapovaných sektorů
07 100 100 _67 000000000000 Počet chybných hledání
08 126 126 _40 000000000025 Čas potřebný na vyhledání
09 _89 _89 __0 000000001328 Hodin v činnosti
0A 100 100 _60 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _97 _97 __0 000000001415 Počet cyklů zapnutí zařízení
BF 100 100 __0 000000000000 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 0000909B0063 Počet vypnutí disku
C1 _91 _91 __0 000000016785 Počet cyklů načítání/vymazání
C2 148 148 __0 0037000A0025 Teplota
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
DF 100 100 __0 000000000000 Zatížení budiče magnetických hlav způsobené opakovanými úkony

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3038 3131 3236 4642 3232 3332 4C43 4A38 334E 3141
020: 0003 3795 0004 4642 325A 4334 3843 4849 5441 4348
030: 4920 4854 5335 3433 3231 364C 3953 4130 3020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 0F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0000
060: FFFF 0FFF 0000 0407 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 1702 0000 004C 0040
080: 01FC 0042 346B 7D09 6123 3469 BC09 6123 003F 0021
090: 0022 4080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0000 4000 8848 5000 CCA5
110: 61DF DFAA 0000 0000 0000 0000 0000 0000 0000 4014
120: 4014 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 4005 4000
150: 8000 0000 325A 0000 0000 5465 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0021 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 B5A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 6C 6C 65 11 00 00 00 00 00 03 07 00 FD FD 00
020: 00 00 00 03 00 00 04 12 00 61 61 81 14 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 7E 7E 25
050: 00 00 00 00 00 00 09 12 00 59 59 28 13 00 00 00
060: 00 00 0A 13 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 61 61 15 14 00 00 00 00 00 BF 0A 00 64 64 00
080: 00 00 00 00 00 00 C0 32 00 64 64 63 00 9B 90 00
090: 00 00 C1 12 00 5B 5B 85 67 01 00 00 00 00 C2 02
0A0: 00 94 94 25 00 0A 00 37 00 00 C4 32 00 64 64 00
0B0: 00 00 00 00 00 00 C5 22 00 64 64 00 00 00 00 00
0C0: 00 00 C6 08 00 64 64 00 00 00 00 00 00 00 C7 0A
0D0: 00 C8 C8 00 00 00 00 00 00 00 DF 0A 00 64 64 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 85 02 01 5B
170: 03 00 01 00 02 43 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D1

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 3E 00 00 00 00 00 00 00 00 00 00 02 28
010: 00 00 00 00 00 00 00 00 00 00 03 21 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 28 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DF 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89

Disk je OK. Co předcházelo zpomalení chodu? Nějaká chyba, instalace aplikace, aktualizace apod?

Je to NTB mých rodičů, a proto nemám úplně přesné informace. Ale z toho co vím, tak nestáhli žádný závadný program ani přílohu. Jeden poznatek na který jsem přišel je, že když jsem vypnul skype, tak se systém zrychlil. Zkusil jsem ho odinstalovat a je to alespoň více v normě. Viděl jsem posun k lepšímu i po spuštění toho adwcleaneru. Co se však týče internetu, tam je situace pořád kritická. Přijde mi, že se ten systém strašně kouše. Zkoušel jsem různé prohlížeče, ale situace je obdobná. Ale opět je to asi tím, že už ten NTB nestíhá, nebo?

Spíše to tipuji na nějakou systémovou chybu. Zkuste obnovu systému k datu, kdy korektně fungoval.