Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu - podezření na havěť

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Terka2
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 09 úno 2006 19:04
Bydliště: Praha

Prosím o kontrolu - podezření na havěť

#1 Příspěvek od Terka2 »

Dobrý den,
prosím o kontrolu logu, Mbam po kontrole odstranil cca 19 podezřelých souborů, chtěla bych se ujistit, že je počítač již v pořádku. Dnes jsme odinstalovali NODa, kterému končila lience a zakoupili jsme Premium verzi Avastu, ale ráda bych jej nainstalovala na čistý kkomp.

Díky moc. :-)

Log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kateřina at 2015-12-22 17:57:58
Microsoft Windows 10 Home
System drive C: has 261 GB (57%) free of 460 GB
Total RAM: 3987 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:58:09, on 22.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe
C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Users\Kateřina\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe
C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe
C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Kateřina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com/?pc=LNJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [Fastboot] "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Kateřina\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Norton Download Manager{NIS2250400-SHPD-FSD51083}] C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe /m (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Norton Download Manager{NIS2250400-SHPD-FSD51083}] C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe /m (User 'Default user')
O4 - Global Startup: ThinkPad OneLink Dock Management.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.webcompanion.com
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @oem20.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LavasoftTcpService - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: lnvDiscoveryWinSvc - Lenovo - C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Lenovo Settings Power Service (Power Manager DBC Service) - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Lenovo QuickControl Master Service (QuickControlMasterSvc) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe
O23 - Service: Lenovo QuickControl Service (QuickControlService) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
O23 - Service: IE Search Set (SearchProtectionService) - Unknown owner - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Smart Sense Service (SSSvc) - Lenovo - C:\Program Files (x86)\SmartSense\SSSvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\WINDOWS\System32\TPHDEXLG64.exe (file missing)
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @oem16.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13466 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\ibmpmsvc.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ad0fc176-3154-4a08-9e4c-74b13b3aa994 -SystemEventPortName:HostProcess-9e419b30-03e6-454d-a980-7ff8d9ea382f -IoCancelEventPortName:HostProcess-c3ffe8d7-431e-436e-820e-a32b9f64f469 -NonStateChangingEventPortName:HostProcess-889edb08-f70a-48ba-bb51-192e181c6550 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:664dac95-6e5e-42ae-affa-474f6a7ab641 -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fa7c82fa-df88-48a5-943b-fb60879c8bd9 -SystemEventPortName:HostProcess-e2a5af61-fb3a-481a-bab9-ff2cf5495afc -IoCancelEventPortName:HostProcess-cc780cfb-79b3-40ef-80b2-9d48318d08f8 -NonStateChangingEventPortName:HostProcess-a21f1c12-3adf-4516-b7ab-59c286b9ac79 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:40d7695a-fe7e-4e5f-9ef9-f1f3323c1b81 -DeviceGroupId:
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
C:\WINDOWS\system32\svchost.exe -k appmodel

"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
"C:\WINDOWS\system32\CxAudMsg64.exe"
"C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe"
"C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe"
dashost.exe {4ed0441d-4523-4ecc-ab0f726ed194a197}
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\WINDOWS\SysWOW64\PnkBstrB.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding

C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
sihost.exe
C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe"
igfxEM.exe
igfxHK.exe
"C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
igfxTray.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Users\Kateřina\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe" /LOGON
C:\WINDOWS\system32\rundll32.exe "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.dll",PwrMgrBkGndMonitor
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\CONEXANT\ForteConfig\fmapp.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Windows\System32\TpShocks.exe"
"C:\Program Files\Lenovo\Password Manager\password_manager.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
"C:\Users\Kateřina\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe" 1.08.25
"C:\Program Files\Windows Defender\MSASCui.exe" -Recover
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_metro.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\WINDOWS\System32\NetworkUXBroker.exe" -ServerName:Windows.Networking.UX
"C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe"
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 8EA87F6E-2E4F-54C4-41DB-28F51A678757 -Reinvoke
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE"
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoCameraPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
-name da1f76ab-1a03-48fe-9bc9-3137b37f7bca -runas
-name 221b65e3-b29a-408f-8ff0-f8823eb0fdea -runas
"C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe" -name a909960e-7fb5-43a3-890f-a17fa1b56327 -runas SYSTEM
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 640 644 652 8192 648
taskeng.exe {B5235BE7-55F4-418D-9052-6F43DEE0FFD8}

"C:\Users\Kateřina\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK

=========Mozilla firefox=========

ProfilePath - C:\Users\Kateřina\AppData\Roaming\Mozilla\Firefox\Profiles\r6ywl0ma.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll


C:\Users\Kateřina\AppData\Roaming\Mozilla\Firefox\Profiles\r6ywl0ma.default\extensions\
{2d3fbcf7-be69-4433-8858-c621a8d0e58d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-12 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-31 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-12 881880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-12 2333400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-31 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-12 707800]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2014-11-25 935104]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2014-04-10 1830616]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2014-02-18 384344]
"PasswordManager"=C:\Program Files\Lenovo\Password Manager\password_manager.exe [2014-10-21 1792800]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2015-07-17 396688]
"SynLenovoHelper"=C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [2015-11-24 163960]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2013-05-21 7830328]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-11-10 3011152]
"OneDrive"=C:\Users\Kateřina\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-14 551112]
"Web Companion"=C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [2015-11-24 1409296]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-11-16 8591272]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2013-05-14 552960]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2013-09-16 134616]
"Fastboot"=C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2014-09-03 750320]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
ThinkPad OneLink Dock Management.lnk - C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-22 17:57:59 ----D---- C:\Program Files\trend micro
2015-12-22 17:57:58 ----D---- C:\rsit
2015-12-22 17:35:28 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-22 17:14:07 ----HD---- C:\OneDriveTemp
2015-12-19 07:15:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-17 21:01:54 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-17 21:01:50 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-17 21:01:49 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-17 21:01:45 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2015-12-17 21:01:44 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2015-12-17 21:01:44 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-17 21:01:44 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-12-17 21:01:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-12-17 21:01:42 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-12-17 21:01:42 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-17 21:01:42 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-12-17 21:01:41 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2015-12-17 21:01:41 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-17 21:01:41 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-17 21:01:40 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-12-17 21:01:40 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-17 21:01:39 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-17 21:01:39 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2015-12-17 21:01:39 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-17 21:01:39 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-17 21:01:38 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-12-17 21:01:38 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-12-17 21:01:37 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-12-17 21:01:37 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-17 21:01:37 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-17 21:01:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-12-17 21:01:35 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-17 21:01:35 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-17 21:01:35 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-12-17 21:01:35 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-17 21:01:35 ----A---- C:\WINDOWS\system32\mfds.dll
2015-12-17 21:01:34 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2015-12-17 21:01:34 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2015-12-17 21:01:34 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-12-17 21:01:34 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-12-17 21:01:34 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-17 21:01:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-17 21:01:33 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-12-17 21:01:33 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-17 21:01:33 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-17 21:01:32 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-12-17 21:01:32 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-12-17 21:01:32 ----A---- C:\WINDOWS\system32\provengine.dll
2015-12-17 21:01:32 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2015-12-17 21:01:32 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-12-17 21:01:32 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-17 21:01:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2015-12-17 21:01:31 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-12-17 21:01:31 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-17 21:01:31 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\system32\mfps.dll
2015-12-17 21:01:30 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-17 21:01:29 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-12-17 21:01:28 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2015-12-17 21:01:28 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2015-12-17 21:01:28 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2015-12-17 21:01:28 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-12-17 21:01:28 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-12-17 21:01:28 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-12-17 21:01:28 ----A---- C:\WINDOWS\system32\dialserver.dll
2015-12-17 21:01:27 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2015-12-17 21:01:27 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2015-12-17 21:01:27 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2015-12-17 21:01:27 ----A---- C:\WINDOWS\system32\wifitask.exe
2015-12-17 21:01:27 ----A---- C:\WINDOWS\system32\qdvd.dll
2015-12-17 21:01:27 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2015-12-17 21:01:27 ----A---- C:\WINDOWS\system32\MDEServer.exe
2015-12-17 21:01:26 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2015-12-17 21:01:26 ----A---- C:\WINDOWS\system32\provtool.exe
2015-12-17 21:01:26 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-12-17 21:01:26 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-12-17 21:01:26 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2015-12-17 21:01:25 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-17 21:01:25 ----A---- C:\WINDOWS\system32\StorSvc.dll
2015-12-17 21:01:25 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-17 21:01:25 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-12-17 21:01:25 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-12-17 21:01:24 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-17 21:01:24 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-12-17 21:01:24 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-17 21:01:24 ----A---- C:\WINDOWS\system32\moshostcore.dll
2015-12-17 21:01:24 ----A---- C:\WINDOWS\system32\moshost.dll
2015-12-17 21:01:24 ----A---- C:\WINDOWS\system32\fveapibase.dll
2015-12-17 21:01:23 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-12-17 21:01:23 ----A---- C:\WINDOWS\system32\mos.dll
2015-12-17 21:01:22 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-12-17 21:01:21 ----A---- C:\WINDOWS\SYSWOW64\BackgroundTransferHost.exe
2015-12-17 21:01:21 ----A---- C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-17 21:01:21 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2015-12-17 21:01:21 ----A---- C:\WINDOWS\system32\StorageUsage.dll
2015-12-17 21:01:21 ----A---- C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-16 21:33:12 ----AD---- C:\Program Files\CCleaner
2015-12-16 20:21:09 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2015-12-16 20:20:40 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2015-12-16 20:20:40 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-12-16 20:20:39 ----D---- C:\ProgramData\Malwarebytes
2015-12-16 20:20:39 ----AD---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-16 20:20:39 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-12-15 22:16:14 ----D---- C:\ProgramData\firebird
2015-12-15 22:15:32 ----D---- C:\Users\Kateřina\AppData\Roaming\Exec
2015-12-10 19:06:15 ----D---- C:\WINDOWS\system32\SleepStudy
2015-12-09 22:04:40 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-12-09 22:04:36 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-09 22:04:35 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-12-09 22:04:35 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-09 22:04:33 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-09 22:04:33 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-09 22:04:33 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-09 22:04:32 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-09 22:04:32 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-09 22:04:32 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-09 22:04:32 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-09 22:04:32 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-09 22:04:31 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-09 22:04:31 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 22:04:31 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-09 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-09 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-09 22:04:30 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-09 22:04:29 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-09 22:04:29 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-09 22:04:29 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-09 22:04:29 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-09 22:04:28 ----A---- C:\WINDOWS\system32\wshrm.dll
2015-12-09 22:04:28 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-09 22:04:26 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-12-08 20:17:29 ----A---- C:\WINDOWS\system32\RtNicProp64.dll
2015-12-08 20:17:29 ----A---- C:\WINDOWS\system32\drivers\Rt630x64.sys
2015-12-08 20:15:27 ----A---- C:\WINDOWS\system32\tpinspm.dll
2015-12-08 20:15:26 ----A---- C:\WINDOWS\system32\ibmpmsvc.exe
2015-12-08 20:15:26 ----A---- C:\WINDOWS\system32\ibmpmctl.exe
2015-12-08 20:00:53 ----AD---- C:\Program Files (x86)\SmartSense
2015-12-08 19:59:31 ----D---- C:\Program Files (x86)\ThinkPad
2015-12-08 19:04:20 ----ASH---- C:\hiberfil.sys
2015-12-08 18:56:39 ----SD---- C:\Users\Kateřina\AppData\Roaming\Microsoft
2015-12-08 18:53:01 ----D---- C:\Program Files (x86)\USB Camera
2015-12-08 18:52:01 ----D---- C:\ProgramData\Validity
2015-12-08 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\SASrv.exe
2015-12-08 18:51:25 ----A---- C:\WINDOWS\system32\drivers\CxSfPt.dat
2015-12-08 18:51:20 ----A---- C:\WINDOWS\system32\CxAudMsg64.exe
2015-12-08 18:51:15 ----A---- C:\WINDOWS\system32\drivers\SamSfPa.dat
2015-12-08 18:51:11 ----AD---- C:\Program Files\Dolby Digital Plus
2015-12-08 18:51:03 ----HD---- C:\Program Files\Uninstall Information
2015-12-08 18:50:44 ----D---- C:\ProgramData\Conexant
2015-12-08 18:50:41 ----D---- C:\Program Files\CONEXANT
2015-12-08 18:50:39 ----D---- C:\WINDOWS\SYSWOW64\sda
2015-12-08 18:50:39 ----AD---- C:\Program Files\Synaptics
2015-12-08 18:50:36 ----D---- C:\ProgramData\Lenovo
2015-12-08 18:50:34 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-12-08 18:50:34 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-12-08 18:50:27 ----A---- C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-08 18:50:27 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-08 18:49:52 ----D---- C:\Program Files\Intel
2015-12-08 18:47:44 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-12-08 18:45:58 ----AS---- C:\WINDOWS\bootstat.dat
2015-12-08 18:45:21 ----D---- C:\WINDOWS\Prefetch
2015-12-08 18:44:47 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-08 18:43:45 ----SHD---- C:\Recovery
2015-12-08 18:43:37 ----DC---- C:\WINDOWS\Panther
2015-12-08 18:39:59 ----D---- C:\Windows.old
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.proxy.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\iesetup.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\iernonce.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-08 18:39:13 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\wwapi.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\mssign32.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\lpk.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-12-08 18:39:07 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wwapi.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wsplib.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wininetlui.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\twinui.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\shell32.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\services.exe
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\rilproxy.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\provops.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\mssign32.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\jsproxy.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-08 18:39:06 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\XblAuthManagerProxy.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCoreRes.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\NmaDirect.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MosResource.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosTrace.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosHost.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MapControls.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MapControlStringsRes.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\ETWCoreUIComponentsResources.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\NMAA.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\nativemap.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MosStorage.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MosResource.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\mf.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\InputService.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\d3d11.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\cryptngc.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\cdp.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-08 18:39:00 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-12-08 18:29:15 ----D---- C:\WINDOWS\system32\Microsoft
2015-12-08 18:26:25 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2015-12-08 18:26:23 ----D---- C:\Program Files\Reference Assemblies
2015-12-08 18:26:23 ----D---- C:\Program Files\MSBuild
2015-12-08 18:26:23 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-12-08 18:26:23 ----D---- C:\Program Files (x86)\MSBuild
2015-12-08 18:25:42 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-12-08 18:25:42 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-12-08 18:25:42 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-08 18:25:38 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-08 18:25:38 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-08 18:25:37 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-11-27 15:01:07 ----A---- C:\WINDOWS\system32\iMDriverHelper.dll
2015-11-24 14:36:11 ----D---- C:\Program Files (x86)\Company
2015-11-24 14:15:16 ----D---- C:\Users\Kateřina\AppData\Roaming\.minecraft
2015-11-24 11:23:38 ----D---- C:\Users\Kateřina\AppData\Roaming\Spore
2015-11-24 11:02:03 ----A---- C:\WINDOWS\SYSWOW64\SynCom.dll
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\SynTPCo34-4.dll
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\SynCOM.dll
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\drivers\SynRMIHID_Aux.sys
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\drivers\Smb_driver_Intel_Aux.sys
2015-11-24 11:02:03 ----A---- C:\WINDOWS\system32\drivers\Smb_driver_AMDASF_Aux.sys
2015-11-24 07:59:05 ----D---- C:\Users\Kateřina\AppData\Roaming\Lavasoft
2015-11-24 07:58:42 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpServiceOff.ini
2015-11-24 07:58:42 ----A---- C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2015-11-24 07:58:17 ----A---- C:\WINDOWS\system32\LavasoftTcpService64.dll
2015-11-24 07:57:55 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.dll
2015-11-24 07:57:29 ----D---- C:\Program Files (x86)\Lavasoft
2015-11-24 07:57:08 ----D---- C:\ProgramData\Lavasoft
2015-11-24 07:55:31 ----D---- C:\Users\Kateřina\AppData\Roaming\Opera Software
2015-11-24 07:53:32 ----AD---- C:\Program Files (x86)\Opera
2015-11-24 07:52:48 ----D---- C:\Users\Kateřina\AppData\Roaming\RPEng
2015-11-24 07:51:10 ----D---- C:\Users\Kateřina\AppData\Roaming\uTorrent

======List of files/folders modified in the last 1 month======

2015-12-22 17:57:59 ----RD---- C:\Program Files
2015-12-22 17:57:11 ----D---- C:\WINDOWS\Temp
2015-12-22 17:46:07 ----D---- C:\WINDOWS\AppReadiness
2015-12-22 17:45:42 ----D---- C:\Windows
2015-12-22 17:43:39 ----D---- C:\WINDOWS\debug
2015-12-22 17:35:28 ----AD---- C:\WINDOWS\System32
2015-12-22 17:21:00 ----D---- C:\WINDOWS\system32\sru
2015-12-22 17:11:27 ----RD---- C:\Program Files (x86)
2015-12-22 17:11:26 ----SHD---- C:\System Volume Information
2015-12-22 17:11:26 ----D---- C:\WINDOWS\system32\drivers
2015-12-22 17:11:26 ----D---- C:\ProgramData\Norton
2015-12-22 17:09:28 ----D---- C:\Program Files\Common Files
2015-12-22 17:09:27 ----D---- C:\WINDOWS\system32\Tasks
2015-12-22 09:17:34 ----HD---- C:\Program Files\WindowsApps
2015-12-21 21:05:17 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-21 12:38:08 ----D---- C:\WINDOWS\INF
2015-12-21 12:31:50 ----D---- C:\WINDOWS\system32\WDI
2015-12-21 12:26:54 ----SHDC---- C:\WINDOWS\Installer
2015-12-21 12:22:54 ----D---- C:\WINDOWS\Tasks
2015-12-21 12:15:43 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-21 12:15:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-18 19:19:08 ----D---- C:\WINDOWS\system32\config
2015-12-18 19:12:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-18 19:11:25 ----D---- C:\WINDOWS\WinSxS
2015-12-18 19:07:40 ----D---- C:\WINDOWS\SysWOW64
2015-12-18 19:07:33 ----D---- C:\WINDOWS\system32\appraiser
2015-12-18 19:07:32 ----D---- C:\WINDOWS\Provisioning
2015-12-18 19:07:31 ----D---- C:\WINDOWS\bcastdvr
2015-12-18 19:07:30 ----D---- C:\WINDOWS\AppPatch
2015-12-18 16:03:28 ----D---- C:\WINDOWS\CbsTemp
2015-12-17 22:42:55 ----D---- C:\ProgramData\Package Cache
2015-12-17 22:42:08 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-17 20:54:29 ----D---- C:\WINDOWS\system32\catroot2
2015-12-17 14:56:22 ----AD---- C:\Program Files (x86)\Heroes of the Storm
2015-12-17 14:48:23 ----AD---- C:\Program Files (x86)\StarCraft II
2015-12-17 14:47:03 ----AD---- C:\Program Files (x86)\Battle.net
2015-12-16 21:36:10 ----D---- C:\Program Files (x86)\Steam
2015-12-16 20:20:39 ----HD---- C:\ProgramData
2015-12-16 17:21:46 ----D---- C:\WINDOWS\OCR
2015-12-14 12:26:29 ----RSD---- C:\WINDOWS\assembly
2015-12-14 12:26:12 ----D---- C:\Program Files\Lenovo
2015-12-14 12:25:23 ----D---- C:\WINDOWS\Downloaded Installations
2015-12-14 03:35:25 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-14 03:34:14 ----D---- C:\WINDOWS\system32\oobe
2015-12-13 13:53:17 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-13 10:22:24 ----D---- C:\WINDOWS\Logs
2015-12-10 14:52:14 ----D---- C:\WINDOWS\system32\MRT
2015-12-10 06:39:51 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 21:11:46 ----RSD---- C:\WINDOWS\Media
2015-12-09 21:09:49 ----D---- C:\DRIVERS
2015-12-09 21:00:00 ----D---- C:\WINDOWS\appcompat
2015-12-08 20:31:07 ----D---- C:\WINDOWS\system32\LogFiles
2015-12-08 20:17:29 ----D---- C:\Program Files (x86)\Realtek
2015-12-08 20:06:17 ----D---- C:\Program Files (x86)\Lenovo
2015-12-08 19:55:42 ----D---- C:\WINDOWS\system32\restore
2015-12-08 19:40:47 ----RD---- C:\WINDOWS\DevicesFlow
2015-12-08 19:29:01 ----D---- C:\Users\Kateřina\AppData\Roaming\LSC
2015-12-08 19:25:05 ----D---- C:\WINDOWS\rescache
2015-12-08 19:22:56 ----RD---- C:\WINDOWS\PrintDialog
2015-12-08 19:22:55 ----RD---- C:\WINDOWS\MiracastView
2015-12-08 19:22:38 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-12-08 19:18:39 ----D---- C:\Program Files\Windows NT
2015-12-08 19:14:11 ----D---- C:\WINDOWS\Registration
2015-12-08 19:14:05 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-08 19:09:26 ----D---- C:\WINDOWS\system32\wbem
2015-12-08 19:08:34 ----SD---- C:\ProgramData\Microsoft
2015-12-08 19:08:12 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-08 19:03:45 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-12-08 19:03:41 ----RSD---- C:\WINDOWS\Fonts
2015-12-08 19:03:37 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-08 19:00:53 ----D---- C:\WINDOWS\SYSWOW64\Lenovo
2015-12-08 19:00:52 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-12-08 19:00:52 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-08 19:00:49 ----HD---- C:\WINDOWS\system32\WLANProfiles
2015-12-08 19:00:48 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-08 19:00:48 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-08 19:00:47 ----D---- C:\WINDOWS\system32\spool
2015-12-08 19:00:45 ----D---- C:\WINDOWS\system32\Lenovo
2015-12-08 19:00:45 ----D---- C:\WINDOWS\system32\InputMethod
2015-12-08 19:00:45 ----D---- C:\WINDOWS\system32\en-US
2015-12-08 19:00:43 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-08 18:59:53 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-08 18:59:52 ----D---- C:\WINDOWS\LiveKernelReports
2015-12-08 18:59:51 ----D---- C:\WINDOWS\InputMethod
2015-12-08 18:59:49 ----D---- C:\WINDOWS\Help
2015-12-08 18:59:48 ----HD---- C:\WINDOWS\ELAMBKUP
2015-12-08 18:59:48 ----D---- C:\WINDOWS\ADFS
2015-12-08 18:59:47 ----RD---- C:\Users
2015-12-08 18:58:51 ----D---- C:\ProgramData\USOPrivate
2015-12-08 18:58:48 ----D---- C:\Program Files (x86)\Windows Mail
2015-12-08 18:58:47 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-08 18:58:47 ----D---- C:\Program Files (x86)\Common Files
2015-12-08 18:58:46 ----D---- C:\Program Files\Windows Mail
2015-12-08 18:58:44 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-08 18:58:09 ----D---- C:\WINDOWS\system32\Recovery
2015-12-08 18:56:04 ----D---- C:\WINDOWS\system32\Sysprep
2015-12-08 18:55:06 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-12-08 18:53:01 ----D---- C:\WINDOWS\twain_32
2015-12-08 18:53:00 ----D---- C:\WINDOWS\System
2015-12-08 18:52:01 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-12-08 18:45:01 ----D---- C:\WINDOWS\ServiceProfiles
2015-12-08 18:39:42 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-12-08 18:39:42 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-12-08 18:39:41 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-12-08 18:39:41 ----D---- C:\WINDOWS\system32\migration
2015-12-08 18:39:41 ----D---- C:\WINDOWS\system32\Dism
2015-12-08 18:35:42 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-12-08 18:35:42 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2015-12-08 18:35:42 ----SD---- C:\WINDOWS\system32\F12
2015-12-08 18:35:42 ----D---- C:\WINDOWS\SYSWOW64\winrm
2015-12-08 18:35:42 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-12-08 18:35:42 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-12-08 18:35:42 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2015-12-08 18:35:42 ----D---- C:\WINDOWS\SYSWOW64\en
2015-12-08 18:35:42 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-12-08 18:35:42 ----D---- C:\WINDOWS\system32\winrm
2015-12-08 18:35:42 ----D---- C:\WINDOWS\system32\WCN
2015-12-08 18:35:42 ----D---- C:\WINDOWS\system32\slmgr
2015-12-08 18:35:42 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2015-12-08 18:35:42 ----D---- C:\WINDOWS\system32\migwiz
2015-12-08 18:35:39 ----SD---- C:\WINDOWS\system32\DiagSvcs
2015-12-08 18:35:39 ----D---- C:\WINDOWS\system32\en
2015-12-08 18:35:39 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-12-08 18:35:39 ----D---- C:\WINDOWS\system32\Boot
2015-12-08 18:35:39 ----D---- C:\WINDOWS\servicing
2015-12-08 18:35:38 ----D---- C:\WINDOWS\en-US
2015-12-08 18:35:38 ----D---- C:\Program Files\Windows Photo Viewer
2015-12-08 18:35:38 ----D---- C:\Program Files\Windows Media Player
2015-12-08 18:35:38 ----D---- C:\Program Files\Windows Journal
2015-12-08 18:35:38 ----D---- C:\Program Files\Windows Defender
2015-12-08 18:35:38 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-12-08 18:35:38 ----D---- C:\Program Files (x86)\Windows Media Player
2015-12-08 18:35:38 ----D---- C:\Program Files (x86)\Windows Defender
2015-12-08 18:26:25 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-12-08 18:26:25 ----D---- C:\WINDOWS\system32\MUI
2015-12-08 18:26:23 ----D---- C:\Program Files\Internet Explorer
2015-12-08 18:26:23 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-08 18:26:18 ----A---- C:\WINDOWS\SYSWOW64\dpwsockx.dll
2015-12-08 18:26:18 ----A---- C:\WINDOWS\SYSWOW64\dpmodemx.dll
2015-12-08 18:26:18 ----A---- C:\WINDOWS\SYSWOW64\dplayx.dll
2015-12-08 18:26:18 ----A---- C:\WINDOWS\SYSWOW64\dplaysvr.exe
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll
2015-12-08 18:26:15 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll
2015-12-08 18:26:11 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2015-12-08 18:26:11 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2015-12-08 18:26:11 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2015-12-08 18:26:11 ----A---- C:\WINDOWS\system32\dpnet.dll
2015-12-08 18:26:10 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2015-12-08 18:26:10 ----A---- C:\WINDOWS\system32\dpnathlp.dll
2015-12-08 18:26:10 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2015-12-08 18:06:49 ----HD---- C:\$WINDOWS.~BT
2015-12-01 01:33:29 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-11-27 14:22:33 ----D---- C:\Users\Kateřina\AppData\Roaming\GameRanger
2015-11-27 14:19:53 ----D---- C:\Program Files (x86)\World of Warcraft
2015-11-24 11:02:04 ----A---- C:\WINDOWS\system32\WdfCoInstaller01011.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-02 644968]
R0 IntelHSWPcc;IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [2013-08-19 77456]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx64.sys [2014-01-29 152888]
R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM64.sys [2014-01-29 29496]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 SMIDriver;SMIDriver; C:\WINDOWS\system32\drivers\smi.sys [2015-03-03 19656]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwr64v.sys [2015-07-09 20736]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2015-10-30 84992]
R3 CnxtHdAudService;@oem56.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2015-09-04 1561728]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2015-08-17 64208]
R3 ibtusb;@oem21.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2015-07-14 263952]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-07-17 6389688]
R3 iwdbus;@oem25.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-15 27032]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MEIx64;@oem60.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 NETwNb64;___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit; C:\WINDOWS\System32\drivers\Netwbw02.sys [2015-10-30 3485696]
R3 RTL8168;@oem24.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2014-06-17 873688]
R3 RTSPER;@oem61.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2015-06-15 761600]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-11-24 51320]
R3 SynTP;@oem1.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-11-24 636536]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2015-10-30 953344]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-08 117248]
S3 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\fastboot.sys [2014-09-03 65928]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-12-15 39320]
S3 IntcDAud;@oem63.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-07-16 472872]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 LnvHIDHW;@oem58.inf,%LnvHIDHW%;Lenovo HID Mini-driver for Hardware Radio Switch; C:\WINDOWS\System32\drivers\LnvHIDHW.sys [2014-04-07 29496]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 rt640x64;@oem47.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-06-18 895256]
S3 SWIX64;SWIX64; \??\C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [2015-06-29 34976]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2013-06-25 1132920]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2013-07-05 1157496]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-01-02 2169016]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 CxAudMsg;@C:\WINDOWS\system32\CxAudMsg64.exe,-100; C:\WINDOWS\system32\CxAudMsg64.exe [2013-07-25 206552]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2014-09-03 140016]
R2 IBMPMSVC;@oem20.inf,%ibm.svcDesc0%;Lenovo PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2015-08-17 148208]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-07-17 351120]
R2 ImControllerService;System Interface Foundation Service; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2015-11-13 35784]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [2013-09-05 157128]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LavasoftTcpService;LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2015-11-24 2751760]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2015-06-04 111560]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2014-07-08 115184]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 lnvDiscoveryWinSvc;lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [2014-02-21 22576]
R2 OneSyncSvc_4b1de;Hostitel synchronizace_4b1de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\syswow64\PnkBstrB.exe [2015-08-26 111928]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
R2 SearchProtectionService;IE Search Set; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [2015-11-24 17168]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-11-24 255096]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2015-06-04 126408]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-07-17 283024]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_4b1de;Data kontaktů_4b1de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 Power Manager DBC Service;Lenovo Settings Power Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2015-07-09 1668848]
R3 QuickControlService;Lenovo QuickControl Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [2014-10-01 328488]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 QuickControlMasterSvc;Lenovo QuickControl Master Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [2014-10-01 61232]
S2 SAService;Conexant SmartAudio service; C:\WINDOWS\system32\SAsrv.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-19 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2013-09-25 54976]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-12-10 272864]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4b1de;Služba zasílání zpráv_4b1de; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-19 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SSSvc;Smart Sense Service; C:\Program Files (x86)\SmartSense\SSSvc.exe [2015-07-22 119512]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-11-10 836176]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2015-11-11 21536]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG64.exe [2014-01-29 49976]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu - podezření na havěť

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Terka2
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 09 úno 2006 19:04
Bydliště: Praha

Re: Prosím o kontrolu - podezření na havěť

#3 Příspěvek od Terka2 »

Dobrý den,
vkládám log z AdwCleaner:

# AdwCleaner v5.026 - Logfile created 26/12/2015 at 08:35:26
# Updated 21/12/2015 by Xplode
# Database : 2015-12-21.2 [Local]
# Operating system : Windows 10 Home (x64)
# Username : Kateřina - LENOVO
# Running from : C:\Users\Kateřina\Desktop\adwcleaner_5.026.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : sssvc

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\SmartSense
[-] Folder Deleted : C:\Users\Kateřina\AppData\Roaming\RPEng

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\pokki
[-] Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_04bb6df446330549a2cb8d67fbd1a745025b7bd1
[-] Key Deleted : HKCU\Software\SweetLabs App Platform

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1295 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu - podezření na havěť

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět