Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

nežiaduce vyskakovanie nových okien v Google Chrom

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

nežiaduce vyskakovanie nových okien v Google Chrom

#1 Příspěvek od miki_j »

Dobrý deň!
Prosím o kontrolu logu. V Google chrom sa mi nechcene otvárajú nové karty, príp. sa samovolne, po kliknutí na text, otvorí nová karta.
Ďakujem
Log RSIT:
Logfile of random's system information tool 1.16 (written by random/random)
Run by Juro at 2017-10-10 13:53:01
Microsoft Windows 10 Home
System drive C: has 28 GB (22%) free of 129 GB
Total RAM: 8144 MB (68% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:53:12, on 10.10.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.1715)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\Juro\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Juro\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe
E:\MyHeritage\Bin\FTBCheckUpdates.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Juro_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://nostopped.com/wpad.dat?82202967f ... 8725851325
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Nikon Message Center 2] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKLM\..\Run: [Family Tree Builder Update] E:\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Juro\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Juro\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Juro\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [BingSvc] C:\Users\Juro\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Unknown owner - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASGT - Unknown owner - C:\Windows\SysWOW64\ASGT.exe
O23 - Service: aswbIDSAgent - AVAST Software s.r.o. - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: DESlock+ Service (dlpsrv) - DESlock Limited. - C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: This service enables products that use the Nalpeiron Licensing System. (nlsX86cc) - Nalpeiron Ltd. - C:\WINDOWS\SysWOW64\nlssrv32.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11748 bytes

====== Enumerating Processes ======

C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-04687c8e-7a97-41e3-b78b-75fc0779ca2a -SystemEventPortName:HostProcess-d0d1c79e-7868-4305-98aa-cff95ff8ced0 -IoCancelEventPortName:HostProcess-1f8ee34e-8b16-41dd-a17b-425ba2553e11 -NonStateChangingEventPortName:HostProcess-160ab53a-d718-4829-912b-257a73da9e3d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:bb04a970-c1d9-44e9-a5b4-d2eba946dbb0 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\SysWOW64\nlssrv32.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\dwm.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Program Files\AVAST Software\Avast\AvastUI.exe
"C:\Users\Juro\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Users\Juro\AppData\Local\Microsoft\BingSvc\BingSvc.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" /logon
C:\WINDOWS\splwow64.exe 8192
"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE
"C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE"
"C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe" /MainProcess 5252 /PrinterName "Canon MX720 series Printer" /ScannerName "Canon MX720 series Network" /Language sk-SK /Startup
"E:\MyHeritage\Bin\FTBCheckUpdates.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\WINDOWS\System32\fontdrvhost.exe
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" --type=utility --lang=en-US --no-sandbox --lang=en-US --log-file="C:\Users\Juro\AppData\Roaming\AVAST Software\Avast\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 Avastium (17.6.2310)" --proxy-auto-detect --disable-webaudio --mute-audio --force-wave-audio --disable-gpu --disable-software-rasterizer --no-sandbox --disable-webgl --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --allow-file-access-from-files=1 --pack_loading_disabled=1 --service-request-channel-token=5AA1F74108B43472305E61EEA8E9617E --mojo-platform-channel-handle=2776 /prefetch:8
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17082.14121.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
C:\WINDOWS\system32\AUDIODG.EXE 0x54c
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1561_none_7ef6e89821f9a6be\TiWorker.exe -Embedding
"C:\Users\Juro\Downloads\RSITx64.exe"

====== Scheduled tasks folder ======

C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\AutoPico Daily Restart - "E:\KMSpico\KMSpico\AutoPico.exe" /silent
C:\WINDOWS\system32\tasks\Avast Emergency Update - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\Juro\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task-S-1-5-21-1223684320-2802675568-2923004766-1001 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\SafeZone scheduled Autoupdate 1495787470 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{E9B34370-ACDD-4EDD-8D66-3D2647AFAC86} - C:\Windows\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\{35A39AB6-95F9-4340-8229-AE76E621E610} - C:\Windows\system32\pcalua.exe -a C:\Users\Juro\Downloads\adobe-photoshop_CS6.exe -d C:\Users\Juro\Downloads
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe Reboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UNP\RunCampaignManager - %windir%\System32\UNP\UNPCampaignManager.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\rempl\shell - %ProgramFiles%\rempl\remsh.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\rempl\shell-unlock - %ProgramFiles%\rempl\remsh.exe /RunUsoScanOnly
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\Microsoft\Office\Office 15 Subscription Heartbeat - %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
C:\WINDOWS\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload mininterval:2880
C:\WINDOWS\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload
C:\WINDOWS\system32\tasks\ASUS\ASUS Product Register Service - C:\Program Files (x86)\ASUS\APRP\aprp.exe

=========Google Chrome=========

C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentácie Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Web Store 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 0 Adobe Acrobat 15.1.0.6
Extension eofcbnmajmjmplflapaojjnihcjkigck 0 Avast SafePrice 12.0.296
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabuľky Google 1.1
Extension fkkcgfbgohboipdhliafmacjnhjbhmim 2 MSN Homepage 0.0.0.6
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google v režime offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 0 Avast Online Security 12.0.263
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.4
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6117.717.0.4
Homepage:
default_search_provider.search_url:
C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2017-08-24 229072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23 209504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2017-02-23 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24 163536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23 176736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-10 473664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2017-02-23 1743664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-10 187968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23 6141528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23 4445272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-05-02 2398776]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-05-02 1767944]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2017-05-11 18371040]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-09-08 239856]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Juro\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-10-02 1686736]
"cz.seznam.software.autoupdate"=C:\Users\Juro\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Juro\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"AdobeBridge"= []
"BingSvc"=C:\Users\Juro\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-11-05 144008]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20 9856176]
"GalaxyClient"= []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CanonQuickMenu"=C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [2012-09-27 1279120]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"Nikon Message Center 2"=C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [2016-01-08 588288]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2012-08-31 452272]
"Family Tree Builder Update"=E:\MyHeritage\Bin\FTBCheckUpdates.exe [2017-07-09 17487536]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-07-21 587288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath" = %SystemRoot%\inf\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-10-10 13:53:02 ----D---- C:\Program Files\trend micro
2017-10-10 13:53:01 ----D---- C:\rsit
2017-10-02 12:09:10 ----AD---- C:\Program Files\rempl
2017-10-02 11:56:30 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-10-02 11:56:27 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2017-10-02 11:56:27 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2017-10-02 11:56:26 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-10-02 11:56:25 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2017-10-02 11:56:25 ----A---- C:\WINDOWS\SYSWOW64\shdocvw.dll
2017-10-02 11:56:24 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-10-02 11:56:22 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2017-10-02 11:56:22 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2017-10-02 11:56:22 ----A---- C:\WINDOWS\SYSWOW64\ntprint.exe
2017-10-02 11:56:22 ----A---- C:\WINDOWS\SYSWOW64\ntprint.dll
2017-10-02 11:56:19 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-10-02 11:56:19 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-10-02 11:56:19 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2017-10-02 11:56:14 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-10-02 11:56:14 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-10-02 11:56:14 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-10-02 11:56:14 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-10-02 11:56:14 ----A---- C:\WINDOWS\SYSWOW64\IconCodecService.dll
2017-10-02 11:56:13 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-10-02 11:56:11 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-10-02 11:56:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-10-02 11:56:09 ----A---- C:\WINDOWS\SYSWOW64\wevtapi.dll
2017-10-02 11:56:09 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2017-10-02 11:56:09 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2017-10-02 11:56:09 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2017-10-02 11:56:05 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2017-10-02 11:56:05 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2017-10-02 11:56:02 ----A---- C:\WINDOWS\SYSWOW64\PCPTpm12.dll
2017-10-02 11:56:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2017-10-02 11:56:01 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-10-02 11:55:59 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Core.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2017-10-02 11:55:58 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2017-10-02 11:55:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-10-02 11:55:54 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2017-10-02 11:55:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.XamlHost.dll
2017-10-02 11:55:54 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-10-02 11:55:53 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2017-10-02 11:55:53 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2017-10-02 11:55:53 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2017-10-02 11:55:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-10-02 11:55:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-10-02 11:55:53 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-10-02 11:55:52 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-10-02 11:55:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2017-10-02 11:55:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2017-10-02 11:55:51 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2017-10-02 11:55:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-10-02 11:55:49 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-10-02 11:55:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\psisdecd.dll
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-10-02 11:55:48 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2017-10-02 11:55:47 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\tbs.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\socialapis.dll
2017-10-02 11:55:46 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.SystemManagement.dll
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2017-10-02 11:55:45 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\vaultcli.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-10-02 11:55:44 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-10-02 11:55:43 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-10-02 11:55:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-10-02 11:55:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-10-02 11:55:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2017-10-02 11:55:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-10-02 11:55:41 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2017-10-02 11:55:40 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-10-02 11:55:40 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2017-10-02 11:55:40 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2017-10-02 11:55:40 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2017-10-02 11:55:40 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2017-10-02 11:55:38 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-10-02 11:55:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-10-02 11:55:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2017-10-02 11:55:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-10-02 11:55:36 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2017-10-02 11:55:36 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2017-10-02 11:55:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\mpr.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2017-10-02 11:55:33 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Devices.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-10-02 11:55:32 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2017-10-02 11:55:31 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-10-02 11:55:31 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-10-02 11:55:30 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-10-02 11:55:30 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-10-02 11:55:30 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2017-10-02 11:55:30 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2017-10-02 11:55:30 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2017-10-02 11:55:30 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2017-10-02 11:55:29 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-10-02 11:55:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-10-02 11:55:28 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-10-02 11:55:27 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-10-02 11:55:26 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-10-02 11:55:26 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-10-02 11:55:26 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-10-02 11:55:26 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-10-02 11:55:26 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-10-02 11:55:25 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-10-02 11:55:25 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-10-02 11:55:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-10-02 11:55:19 ----A---- C:\WINDOWS\SYSWOW64\Geolocation.dll
2017-10-02 11:55:19 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-10-02 11:55:19 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-10-02 11:55:19 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-10-02 11:55:19 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-10-02 11:55:18 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2017-10-02 11:55:18 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2017-10-02 11:55:18 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-10-02 11:55:18 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2017-10-02 11:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-10-02 11:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-10-02 11:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-10-02 11:55:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Energy.dll
2017-10-02 11:55:17 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2017-10-02 11:55:17 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Lights.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\offlinesam.dll
2017-10-02 11:55:15 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-10-02 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2017-10-02 11:55:13 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-10-02 11:55:13 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2017-10-02 11:55:13 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2017-10-02 11:55:13 ----A---- C:\WINDOWS\SYSWOW64\CameraCaptureUI.dll
2017-10-02 11:55:13 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2017-10-02 11:55:12 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-10-02 11:55:12 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\srpapi.dll
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\appidtel.exe
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2017-10-02 11:55:11 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2017-10-02 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-10-02 11:48:26 ----A---- C:\WINDOWS\system32\tquery.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-10-02 11:48:25 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\WinRtTracing.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-10-02 11:48:24 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-10-02 11:48:22 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-10-02 11:48:17 ----A---- C:\WINDOWS\system32\nshwfp.dll
2017-10-02 11:47:57 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-10-02 11:47:54 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-10-02 11:47:46 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-10-02 11:47:45 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2017-10-02 11:47:44 ----A---- C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2017-10-02 11:47:44 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-10-02 11:47:42 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-10-02 11:47:42 ----A---- C:\WINDOWS\system32\winmde.dll
2017-10-02 11:47:42 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2017-10-02 11:47:42 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-10-02 11:47:42 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-10-02 11:47:41 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2017-10-02 11:47:41 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2017-10-02 11:47:41 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-10-02 11:47:41 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-10-02 11:47:41 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2017-10-02 11:47:40 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-10-02 11:47:40 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2017-10-02 11:47:40 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2017-10-02 11:47:39 ----A---- C:\WINDOWS\system32\WwaApi.dll
2017-10-02 11:47:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-10-02 11:47:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2017-10-02 11:47:39 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\wups.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\wmpmde.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-10-02 11:47:36 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-10-02 11:47:35 ----A---- C:\WINDOWS\system32\wudriver.dll
2017-10-02 11:47:35 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2017-10-02 11:47:35 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-10-02 11:47:35 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2017-10-02 11:47:35 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-10-02 11:47:35 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\vss_ps.dll
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\dsreg.dll
2017-10-02 11:47:34 ----A---- C:\WINDOWS\system32\drivers\nsiproxy.sys
2017-10-02 11:47:33 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-10-02 11:47:33 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-10-02 11:47:33 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-10-02 11:47:33 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-10-02 11:47:33 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2017-10-02 11:47:32 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-10-02 11:47:32 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-10-02 11:47:31 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-10-02 11:47:31 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-10-02 11:47:30 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2017-10-02 11:47:30 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\twinui.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\tdh.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\tbs.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\socialapis.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\ChatApis.dll
2017-10-02 11:47:29 ----A---- C:\WINDOWS\system32\EmailApis.dll
2017-10-02 11:47:28 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-10-02 11:47:28 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2017-10-02 11:47:28 ----A---- C:\WINDOWS\system32\PhoneService.dll
2017-10-02 11:47:28 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-10-02 11:47:28 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-10-02 11:47:27 ----A---- C:\WINDOWS\system32\rdpencom.dll
2017-10-02 11:47:27 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-10-02 11:47:26 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-10-02 11:47:26 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2017-10-02 11:47:26 ----A---- C:\WINDOWS\system32\mstsc.exe
2017-10-02 11:47:24 ----A---- C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2017-10-02 11:47:24 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2017-10-02 11:47:24 ----A---- C:\WINDOWS\system32\sbe.dll
2017-10-02 11:47:24 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-10-02 11:47:24 ----A---- C:\WINDOWS\system32\rdpcore.dll
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\sscore.dll
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\srvsvc.dll
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\smartscreen.exe
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2017-10-02 11:47:23 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-10-02 11:47:22 ----A---- C:\WINDOWS\system32\shutdownux.dll
2017-10-02 11:47:22 ----A---- C:\WINDOWS\system32\shell32.dll
2017-10-02 11:47:22 ----A---- C:\WINDOWS\system32\shdocvw.dll
2017-10-02 11:47:22 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2017-10-02 11:47:22 ----A---- C:\WINDOWS\system32\Family.Client.dll
2017-10-02 11:47:22 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\vaultcli.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\schannel.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\nltest.exe
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2017-10-02 11:47:21 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\sechost.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\kerberos.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-10-02 11:47:20 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-10-02 11:47:19 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-10-02 11:47:19 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-10-02 11:47:18 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-10-02 11:47:18 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-10-02 11:47:17 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-10-02 11:47:17 ----A---- C:\WINDOWS\system32\SettingsHandlers_ClosedCaptioning.dll
2017-10-02 11:47:17 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2017-10-02 11:47:17 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2017-10-02 11:47:14 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-10-02 11:47:14 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2017-10-02 11:47:14 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-10-02 11:47:14 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-10-02 11:47:13 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-10-02 11:47:12 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-10-02 11:47:12 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-10-02 11:47:12 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2017-10-02 11:47:12 ----A---- C:\WINDOWS\system32\Family.Authentication.dll
2017-10-02 11:47:12 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-10-02 11:47:09 ----A---- C:\WINDOWS\system32\storewuauth.dll
2017-10-02 11:47:08 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-10-02 11:47:08 ----A---- C:\WINDOWS\system32\services.exe
2017-10-02 11:47:06 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-10-02 11:47:05 ----A---- C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2017-10-02 11:47:05 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-10-02 11:47:05 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2017-10-02 11:47:04 ----A---- C:\WINDOWS\system32\rastlsext.dll
2017-10-02 11:47:04 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-10-02 11:47:04 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2017-10-02 11:47:03 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-10-02 11:47:03 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-10-02 11:47:03 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\qedit.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\profsvc.dll
2017-10-02 11:47:02 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2017-10-02 11:47:01 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2017-10-02 11:47:01 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-10-02 11:47:01 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2017-10-02 11:47:01 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2017-10-02 11:47:01 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2017-10-02 11:47:00 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2017-10-02 11:47:00 ----A---- C:\WINDOWS\system32\wpnapps.dll
2017-10-02 11:47:00 ----A---- C:\WINDOWS\system32\ntprint.exe
2017-10-02 11:47:00 ----A---- C:\WINDOWS\system32\ntprint.dll
2017-10-02 11:47:00 ----A---- C:\WINDOWS\system32\inetpp.dll
2017-10-02 11:46:59 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-10-02 11:46:59 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2017-10-02 11:46:59 ----A---- C:\WINDOWS\system32\localspl.dll
2017-10-02 11:46:57 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-10-02 11:46:57 ----A---- C:\WINDOWS\system32\puiobj.dll
2017-10-02 11:46:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-10-02 11:46:53 ----A---- C:\WINDOWS\system32\rastls.dll
2017-10-02 11:46:53 ----A---- C:\WINDOWS\system32\oleacc.dll
2017-10-02 11:46:53 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2017-10-02 11:46:51 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-10-02 11:46:51 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-10-02 11:46:49 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-10-02 11:46:49 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-10-02 11:46:49 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2017-10-02 11:46:49 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2017-10-02 11:46:49 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2017-10-02 11:46:48 ----A---- C:\WINDOWS\system32\nettrace.dll
2017-10-02 11:46:48 ----A---- C:\WINDOWS\system32\netshell.dll
2017-10-02 11:46:48 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2017-10-02 11:46:47 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-10-02 11:46:47 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-10-02 11:46:47 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2017-10-02 11:46:46 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-10-02 11:46:46 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2017-10-02 11:46:43 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-10-02 11:46:43 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-10-02 11:46:43 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-10-02 11:46:43 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2017-10-02 11:46:41 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2017-10-02 11:46:41 ----A---- C:\WINDOWS\system32\msftedit.dll
2017-10-02 11:46:41 ----A---- C:\WINDOWS\system32\mpr.dll
2017-10-02 11:46:41 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2017-10-02 11:46:41 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\wmp.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\mfps.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-10-02 11:46:40 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-10-02 11:46:39 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2017-10-02 11:46:39 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-10-02 11:46:39 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-10-02 11:46:39 ----A---- C:\WINDOWS\system32\mos.dll
2017-10-02 11:46:39 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2017-10-02 11:46:39 ----A---- C:\WINDOWS\system32\AccountsRt.dll
2017-10-02 11:46:37 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-10-02 11:46:35 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-10-02 11:46:35 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-10-02 11:46:35 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2017-10-02 11:46:35 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2017-10-02 11:46:34 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-10-02 11:46:34 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2017-10-02 11:46:33 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2017-10-02 11:46:33 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-10-02 11:46:33 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-10-02 11:46:33 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-10-02 11:46:33 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-10-02 11:46:33 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2017-10-02 11:46:31 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-10-02 11:46:29 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-10-02 11:46:27 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-10-02 11:46:27 ----A---- C:\WINDOWS\system32\msihnd.dll
2017-10-02 11:46:27 ----A---- C:\WINDOWS\system32\InputService.dll
2017-10-02 11:46:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-10-02 11:46:25 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-10-02 11:46:25 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-10-02 11:46:25 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-10-02 11:46:25 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-10-02 11:46:24 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-10-02 11:46:23 ----A---- C:\WINDOWS\system32\wininet.dll
2017-10-02 11:46:22 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-10-02 11:46:19 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-10-02 11:46:15 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-10-02 11:46:13 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-10-02 11:46:12 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-10-02 11:46:12 ----A---- C:\WINDOWS\system32\Geolocation.dll
2017-10-02 11:46:11 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-10-02 11:46:11 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-10-02 11:46:11 ----A---- C:\WINDOWS\system32\atmlib.dll
2017-10-02 11:46:11 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-10-02 11:46:09 ----A---- C:\WINDOWS\system32\wersvc.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\Windows.Energy.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\wevtapi.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\werui.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\wermgr.exe
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\WerFault.exe
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\wer.dll
2017-10-02 11:46:03 ----A---- C:\WINDOWS\system32\Faultrep.dll
2017-10-02 11:46:02 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-10-02 11:46:02 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-10-02 11:46:02 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2017-10-02 11:46:01 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2017-10-02 11:46:01 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-10-02 11:46:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-10-02 11:46:00 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-10-02 11:45:59 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-10-02 11:45:59 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-10-02 11:45:59 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-10-02 11:45:59 ----A---- C:\WINDOWS\system32\samsrv.dll
2017-10-02 11:45:59 ----A---- C:\WINDOWS\system32\offlinesam.dll
2017-10-02 11:45:59 ----A---- C:\WINDOWS\system32\dialclient.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Lights.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-10-02 11:45:58 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\uDWM.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\domgmt.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\dataclen.dll
2017-10-02 11:45:57 ----A---- C:\WINDOWS\system32\d2d1.dll
2017-10-02 11:45:56 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-10-02 11:45:55 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-10-02 11:45:54 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-10-02 11:45:54 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-10-02 11:45:54 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-10-02 11:45:54 ----A---- C:\WINDOWS\system32\DeviceDirectoryClient.dll
2017-10-02 11:45:53 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2017-10-02 11:45:53 ----A---- C:\WINDOWS\system32\CPFilters.dll
2017-10-02 11:45:53 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-10-02 11:45:52 ----A---- C:\WINDOWS\system32\OpcServices.dll
2017-10-02 11:45:52 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-10-02 11:45:51 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-10-02 11:45:50 ----A---- C:\WINDOWS\system32\WinTypes.dll
2017-10-02 11:45:50 ----A---- C:\WINDOWS\system32\ole32.dll
2017-10-02 11:45:50 ----A---- C:\WINDOWS\system32\combase.dll
2017-10-02 11:45:50 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-10-02 11:45:49 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-10-02 11:45:49 ----A---- C:\WINDOWS\system32\cdp.dll
2017-10-02 11:45:49 ----A---- C:\WINDOWS\system32\CastLaunch.dll
2017-10-02 11:45:49 ----A---- C:\WINDOWS\system32\CameraCaptureUI.dll
2017-10-02 11:45:48 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-10-02 11:45:47 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-10-02 11:45:45 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-10-02 11:45:39 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-10-02 11:45:39 ----A---- C:\WINDOWS\system32\browser_broker.exe
2017-10-02 11:45:38 ----A---- C:\WINDOWS\system32\winresume.exe
2017-10-02 11:45:38 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2017-10-02 11:45:38 ----A---- C:\WINDOWS\system32\bcdboot.exe
2017-10-02 11:45:35 ----A---- C:\WINDOWS\system32\PCPTpm12.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\srpapi.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\appidtel.exe
2017-10-02 11:45:33 ----A---- C:\WINDOWS\system32\appidapi.dll
2017-10-02 11:45:32 ----A---- C:\WINDOWS\system32\actxprxy.dll
2017-10-02 11:45:31 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-10-02 11:45:29 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-10-02 11:45:27 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2017-10-02 11:45:26 ----A---- C:\WINDOWS\system32\XamlTileRender.dll
2017-10-02 11:45:26 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-10-02 11:45:26 ----A---- C:\WINDOWS\system32\dlnashext.dll
2017-10-02 11:45:26 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-10-02 11:45:26 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-10-02 11:45:26 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-10-02 11:45:24 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-10-02 11:45:24 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-10-02 11:45:24 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-10-02 11:45:24 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-10-02 11:45:23 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2017-10-02 11:45:22 ----A---- C:\WINDOWS\system32\icsvc.dll
2017-10-02 11:44:52 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-10-02 11:44:52 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-10-02 11:44:52 ----A---- C:\WINDOWS\system32\drivers\disk.sys
2017-10-02 10:11:07 ----D---- C:\ProgramData\Adobe
2017-10-02 10:11:05 ----D---- C:\Users\Juro\AppData\Roaming\Adobe

====== List of files/folders modified in the last 1 month ======

2017-10-10 13:53:02 ----RD---- C:\Program Files
2017-10-10 13:52:17 ----D---- C:\Users\Juro\AppData\Roaming\Skype
2017-10-10 13:51:44 ----D---- C:\WINDOWS\Prefetch
2017-10-10 13:48:43 ----D---- C:\WINDOWS\Temp
2017-10-10 13:47:37 ----D---- C:\WINDOWS\system32\Tasks
2017-10-10 13:32:05 ----D---- C:\WINDOWS\system32\SleepStudy
2017-10-10 12:58:21 ----D---- C:\ProgramData
2017-10-10 12:47:42 ----D---- C:\WINDOWS\system32\sru
2017-10-10 12:46:06 ----RD---- C:\WINDOWS\Microsoft.NET
2017-10-10 11:51:18 ----D---- C:\WINDOWS\rescache
2017-10-10 10:40:36 ----D---- C:\WINDOWS\system32\config
2017-10-10 10:33:57 ----D---- C:\WINDOWS\system32\drivers
2017-10-10 10:33:36 ----D---- C:\WINDOWS\AppReadiness
2017-10-04 13:45:51 ----D---- C:\WINDOWS\WinSxS
2017-10-04 13:45:51 ----D---- C:\WINDOWS\system32\DriverStore
2017-10-04 13:29:35 ----D---- C:\WINDOWS\system32\catroot2
2017-10-04 13:21:13 ----RSD---- C:\WINDOWS\assembly
2017-10-04 13:09:31 ----HD---- C:\Program Files\WindowsApps
2017-10-02 17:41:51 ----D---- C:\WINDOWS\System32
2017-10-02 17:41:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-02 17:41:40 ----D---- C:\WINDOWS\INF
2017-10-02 17:36:21 ----D---- C:\ProgramData\NVIDIA
2017-10-02 17:35:26 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-10-02 17:35:26 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2017-10-02 17:35:26 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2017-10-02 17:35:26 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-10-02 17:35:26 ----D---- C:\WINDOWS\SysWOW64
2017-10-02 17:35:25 ----SD---- C:\WINDOWS\system32\F12
2017-10-02 17:35:25 ----D---- C:\WINDOWS\system32\wbem
2017-10-02 17:35:25 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-10-02 17:35:25 ----D---- C:\WINDOWS\system32\sk-SK
2017-10-02 17:35:25 ----D---- C:\WINDOWS\system32\oobe
2017-10-02 17:35:25 ----D---- C:\WINDOWS\system32\migwiz
2017-10-02 17:35:25 ----D---- C:\WINDOWS\system32\en-US
2017-10-02 17:35:24 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-10-02 17:35:24 ----RD---- C:\Program Files\Windows Defender
2017-10-02 17:35:24 ----D---- C:\WINDOWS\ShellExperiences
2017-10-02 17:35:24 ----D---- C:\WINDOWS\Provisioning
2017-10-02 17:35:24 ----D---- C:\Program Files\Windows Photo Viewer
2017-10-02 17:35:24 ----D---- C:\Program Files\Windows Mail
2017-10-02 17:35:24 ----D---- C:\Program Files\Internet Explorer
2017-10-02 17:35:24 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-10-02 17:35:24 ----D---- C:\Program Files (x86)\Windows Mail
2017-10-02 17:35:24 ----D---- C:\Program Files (x86)\Windows Defender
2017-10-02 17:35:24 ----D---- C:\Program Files (x86)\Internet Explorer
2017-10-02 17:35:23 ----D---- C:\WINDOWS\system32\LogFiles
2017-10-02 17:35:23 ----D---- C:\WINDOWS\system32\Boot
2017-10-02 12:59:56 ----AD---- C:\Windows
2017-10-02 12:09:13 ----D---- C:\WINDOWS\CbsTemp
2017-10-02 12:09:10 ----SHDC---- C:\WINDOWS\Installer
2017-10-02 12:09:10 ----SHD---- C:\Config.Msi
2017-10-02 12:05:34 ----D---- C:\WINDOWS\system32\MRT
2017-10-02 12:04:32 ----D---- C:\WINDOWS\debug
2017-10-02 12:04:30 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-10-02 12:04:07 ----D---- C:\ProgramData\Microsoft Help
2017-10-02 12:02:53 ----A---- C:\WINDOWS\win.ini
2017-10-02 10:11:04 ----D---- C:\Program Files (x86)\Common Files
2017-10-02 10:08:32 ----RD---- C:\Program Files (x86)
2017-09-15 08:51:32 ----A---- C:\WINDOWS\system32\wksprt.exe
2017-09-15 08:51:17 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2017-09-15 08:51:08 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2017-09-08 198976]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2017-09-08 343296]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2017-09-08 57736]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-09-08 84416]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-10-02 361784]
R0 DLMFENC;DLMFENC; C:\WINDOWS\system32\DRIVERS\DLMFENC.sys [2016-08-04 179712]
R0 DLPCRYPT;DLPCRYPT; C:\WINDOWS\system32\DRIVERS\dlpcrypt.sys [2016-08-09 121184]
R0 dlpvdisk;dlpvdisk; C:\WINDOWS\system32\DRIVERS\dlpvdisk.sys [2016-08-04 98304]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2017-09-08 320528]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-09-08 41832]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2017-09-08 110376]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-09-08 1016384]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-09-08 590880]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-09-08 147784]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2017-10-02 199312]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [2017-01-04 14199224]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-05-02 28216]
R3 nvvad_WaveExtensible;@oem5.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-04-14 56384]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2016-07-16 589824]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-06-21 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-09-08 47016]
S3 dg_ssudbus;@oem13.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2017-05-18 131984]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-08-06 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2016-11-14 192216]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 NVHDA;@oem23.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2017-01-04 221640]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2017-07-12 124928]
S3 ssudmdm;@oem14.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2017-05-18 166288]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-09-08 275208]
R2 CDPUserSvc_2b77f4e;CDPUserSvc_2b77f4e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-05-02 1165368]
R2 nlsX86cc;This service enables products that use the Nalpeiron Licensing System.; C:\WINDOWS\SysWOW64\nlssrv32.exe [2011-09-22 66560]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2016-12-29 458176]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-05-02 1881144]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-05-02 2522680]
R2 OneSyncSvc_2b77f4e;Sync Host_2b77f4e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2016-07-30 76152]
R2 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2017-07-26 10803440]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2017-09-08 7452288]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-05-02 3634232]
R3 PimIndexMaintenanceSvc_2b77f4e;Kontaktné údaje_2b77f4e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
S2 ASGT;ASGT; C:\Windows\SysWOW64\ASGT.exe [2015-05-29 48640]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 dlpsrv;DESlock+ Service; C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe [2016-07-08 540864]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2017-05-26 6532664]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_2b77f4e;MessagingService_2b77f4e; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-01-25 178760]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#3 Příspěvek od miki_j »

# AdwCleaner 7.0.3.1 - Logfile created on Tue Oct 10 19:31:28 2017
# Updated on 2017/29/09 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [996 B] - [2016/11/13 20:48:57]
C:/AdwCleaner/AdwCleaner[C2].txt - [1975 B] - [2017/5/31 11:16:5]
C:/AdwCleaner/AdwCleaner[S0].txt - [1176 B] - [2016/11/13 20:48:49]
C:/AdwCleaner/AdwCleaner[S1].txt - [1700 B] - [2017/5/31 11:15:33]
C:/AdwCleaner/AdwCleaner[S2].txt - [1663 B] - [2017/5/31 14:20:10]
C:/AdwCleaner/AdwCleaner[S3].txt - [1444 B] - [2017/7/24 7:40:31]
C:/AdwCleaner/AdwCleaner[S4].txt - [1352 B] - [2017/7/28 9:41:57]
C:/AdwCleaner/AdwCleaner[S5].txt - [1839 B] - [2017/8/10 7:39:49]
C:/AdwCleaner/AdwCleaner[S6].txt - [1486 B] - [2017/10/10 19:25:39]


########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#4 Příspěvek od Rudy »

Toto je OK. Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#5 Příspěvek od miki_j »

Dobrý deň! Nemôžem sem prekopírovať log u FRST, má príliš veľa znakov. Prikladám ho v prílohe. Ďakujem
Přílohy
FRST.rar
(16.51 KiB) Staženo 43 x

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\...\Run: [BingSvc] => C:\Users\Juro\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
C:\Users\Juro\AppData\Local\Microsoft\BingSvc
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\...\Run: [GalaxyClient] => [X]
C:\ProgramData\DP45977C.lfl
C:\ProgramData\mntemp
C:\ProgramData\mudtcpaz.vzs
AlternateDataStreams: C:\Windows:nlsPreferences [0]

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#7 Příspěvek od miki_j »

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-10-2017
Ran by Juro (11-10-2017 19:16:11) Run:2
Running from C:\Users\Juro\Desktop
Loaded Profiles: Juro (Available Profiles: Juro)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\...\Run: [BingSvc] => C:\Users\Juro\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (� 2015 Microsoft Corporation)
C:\Users\Juro\AppData\Local\Microsoft\BingSvc
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\...\Run: [GalaxyClient] => [X]
C:\ProgramData\DP45977C.lfl
C:\ProgramData\mntemp
C:\ProgramData\mudtcpaz.vzs
AlternateDataStreams: C:\Windows:nlsPreferences [0]

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BingSvc => value removed successfully
C:\Users\Juro\AppData\Local\Microsoft\BingSvc => moved successfully
HKU\S-1-5-21-1223684320-2802675568-2923004766-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GalaxyClient => value removed successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\ProgramData\mntemp => moved successfully
C:\ProgramData\mudtcpaz.vzs => moved successfully
C:\Windows => ":nlsPreferences" ADS removed successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 207442931 B
Java, Flash, Steam htmlcache => 728 B
Windows/system/drivers => 25968302 B
Edge => 1345 B
Chrome => 221301435 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 7040 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 4898 B
NetworkService => 6008832 B
Juro => 51292759 B

RecycleBin => 0 B
EmptyTemp: => 488.3 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 19:16:18 ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#9 Příspěvek od miki_j »

Ani nie. Po kliknutí na stránke na odkaz, na pôvodnej stránke vyskočila iná stránka, konkrétne www.bet365.com a odkaz sa otvoril na novej karte.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#10 Příspěvek od Rudy »

Spusťte postupně tyto utility:

1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize




autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;





Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a

2. Junkware removal tool: http://thisisudax.org/downloads/JRT.exe
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#11 Příspěvek od miki_j »

Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Juro on 11.10.2017 at 21:05:43,64.
Microsoft Windows 10 Home 10.0.14393 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Juro\Desktop\zoek.exe [Scan all users] [Script inserted]

===== Runcheck 21:06:25,84 =====

--- Create Environment Variables 21:06:27,01
--- Create System Restore Point 21:06:33,48
--- Checking Input 21:06:43,96
--- Reset Hosts File 21:06:51,94
--- AU AppData Check 21:06:52,52
--- Remove From Windows Installer 21:06:56,18

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#12 Příspěvek od miki_j »

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by Juro (Administrator) on 11.10.2017 at 21:08:17,67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 1

Successfully deleted: C:\WINDOWS\wininit.ini (File)



Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5813B225-B701-4262-8C90-70F22B73D722} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.10.2017 at 21:10:19,15
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118199
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#13 Příspěvek od Rudy »

Změnilo se něco teď?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#14 Příspěvek od miki_j »

Nie, opäť to isté. Akurát iná stránka.

miki_j
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 26 úno 2012 15:47

Re: nežiaduce vyskakovanie nových okien v Google Chrom

#15 Příspěvek od miki_j »

Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Juro on 11.10.2017 at 21:05:43,64.
Microsoft Windows 10 Home 10.0.14393 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Juro\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

11.10.2017 21:06:42 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\COMMON~1\EAInstaller deleted successfully
C:\Program Files\Adobe Photoshop CS6 13.0 Final CZ deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\CorelDRAW Graphics Suite X6 deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\Users\Juro\AppData\Local\ActiveSync deleted successfully
C:\Users\Juro\AppData\Local\NetworkTiles deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\CrashDumps deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\Package Cache deleted
C:\WINDOWS\SMSS-PFRO0975.tmp deleted
C:\WINDOWS\SMSS-PFRO0a31.tmp deleted
C:\WINDOWS\SysWow64\AI_RecycleBin deleted
C:\Users\Juro\Documents\Updater deleted
"C:\Users\Juro\AppData\Roaming\mpv" deleted

==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\Default\AppData\Local\Google\Chrome deleted

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - No path found[]
eofcbnmajmjmplflapaojjnihcjkigck - No path found[]
gomekmidlodglbbmalcneegieacbdmki - No path found[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
fkkcgfbgohboipdhliafmacjnhjbhmim - No path found[]

Avast SafePrice - Juro\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Avast Online Security - Juro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Chrome Media Router - Juro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
{2274A419-FDEB-4322-87F1-4F63AEDFAE96} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_12454"
{2F355D43-181E-453C-8E6A-F22C25E87DD4} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_12454"
{4183A86B-E34C-4843-AA4F-D1B1D4021568} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12454"
{53260B9E-1CD8-4D8A-8FBE-F74CC7FD6CCA} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454"
{94E3B000-761C-410E-880B-944317F37982} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_12454"
{9B1F62AE-DB01-4349-89E4-4378E1458F06} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_12454"
{B0CD6781-4C53-46CD-86BD-45E110CDB9E6} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12454"
{FF76482C-8684-48C6-B9C7-FF759596C47F} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_12454"

==== Reset Google Chrome ======================

C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Web Data will be reset at reboot
C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal will be reset at reboot

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default.migrated\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Juro\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Juro\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Cache will be emptied at reboot

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=33 folders=47 35897662 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Juro\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Web Data" not found
"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal" not found
"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0" deleted
"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1" deleted
"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2" deleted
"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3" deleted
"C:\Users\Juro\AppData\Local\Google\Chrome\User Data\Default\Cache\index" deleted

==== EOF on 12.10.2017 at 8:16:52,01 ======================

Odpovědět