Nejde chrome

[kyzi01]

Ahoj,již druhý den mě nejde spustit chrome, vždy napíše že stránka nelze zobrazit. Zkoušel jsem přeinstalovat, restartoval jsem ,ale nic nepomáhá.po instalaci se sám spustí, ale po zavření už nejde zapnout. Prosím o pomoc.
Mám win 7 32

zde je log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by ION at 2018-12-11 18:51:56
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 40 GB (40%) free of 100 GB
Total RAM: 3327 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:52:01, on 11.12.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\AVG\Antivirus\AVGUI.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil11c_ActiveX.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\ION\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OCHTOEBV\RSIT.exe
C:\Program Files\trend micro\ION.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AVGUI.exe] "C:\Program Files\AVG\Antivirus\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILQE.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-610 Series"
O4 - HKCU\..\Run: [BloodyKeyboard] "C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AVG Antivirus - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\AVGSvc.exe
O23 - Service: avgbIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\aswidsagent.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Seiko Epson Corporation - C:\Windows\system32\EscSvc.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - Easybits - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Seagate Drive Settings Service (FreeAgentGoFlex Service) - Seagate Technology LLC - C:\Program Files\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files\Google\Chrome\Application\71.0.3578.80\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 7021 bytes

======Scheduled tasks folder======

C:\Windows\tasks\EPSON XP-610 Series Invitation {33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}.job - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLQE.EXE /EXE:"{33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}" /F:"Invitation"
C:\Windows\tasks\EPSON XP-610 Series Update {33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}.job - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLQE.EXE /EXE:"{33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}" /F:"Update"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-26 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 351728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-26 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 351728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EEventManager"=C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2016-01-20 1087184]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AVGUI.exe"=C:\Program Files\AVG\Antivirus\AvLaunch.exe [2018-11-19 290064]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-19 1793736]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"EPLTarget\P0000000000000001"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILQE.EXE [2013-01-24 260160]
"BloodyKeyboard"=C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe [2017-11-02 11374080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoLogoff"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-12-11 18:38:17 ----D---- C:\rsit
2018-11-19 16:12:36 ----A---- C:\Windows\system32\avgBoot.exe

======List of files/folders modified in the last 1 month======

2018-12-11 18:51:59 ----D---- C:\Windows\Temp
2018-12-11 18:51:59 ----D---- C:\Program Files\trend micro
2018-12-11 18:51:25 ----D---- C:\Windows\Prefetch
2018-12-11 18:51:21 ----D---- C:\Windows\winsxs
2018-12-11 18:26:23 ----D---- C:\Windows\tracing
2018-12-11 18:22:21 ----SHD---- C:\Windows\Installer
2018-12-11 18:18:48 ----RD---- C:\Program Files
2018-12-11 18:17:50 ----D---- C:\Program Files\Google
2018-12-11 18:17:17 ----D---- C:\Windows\system32\Tasks
2018-12-11 18:04:32 ----D---- C:\Windows\system32\config
2018-12-10 12:23:22 ----SHD---- C:\System Volume Information
2018-12-09 16:31:03 ----D---- C:\Windows\system32\NDF
2018-12-09 08:48:35 ----D---- C:\Users\ION\AppData\Roaming\uTorrent
2018-12-06 18:48:41 ----D---- C:\Windows\System32
2018-12-06 18:48:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-12-06 18:48:37 ----D---- C:\Windows\inf
2018-12-05 15:51:27 ----D---- C:\Users\ION\AppData\Roaming\vlc
2018-11-24 18:25:21 ----D---- C:\Program Files\FastShare
2018-11-24 18:23:30 ----D---- C:\Program Files\Nero
2018-11-24 18:22:06 ----D---- C:\Program Files\Common Files\Nero
2018-11-24 18:21:58 ----D---- C:\ProgramData\Nero
2018-11-24 17:58:36 ----D---- C:\Users\ION\AppData\Roaming\Skype
2018-11-21 16:54:52 ----D---- C:\Windows\system32\drivers
2018-11-15 17:23:03 ----D---- C:\Windows

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avgbidsh;avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys [2018-11-19 165944]
R0 avgblog;avgblog; C:\Windows\system32\drivers\avgblogx.sys [2018-11-19 284304]
R0 avgbuniv;avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys [2018-11-19 57952]
R0 avgRvrt;avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [2018-11-19 73040]
R0 avgVmm;avgVmm; C:\Windows\system32\drivers\avgVmm.sys [2018-11-19 310248]
R0 nvamacpi;NVIDIA Away Mode System; C:\Windows\system32\DRIVERS\NVAMACPI.sys [2009-11-19 24608]
R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2009-11-19 213024]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-25 466008]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 avgArPot;avgArPot; C:\Windows\system32\drivers\avgArPot.sys [2018-11-19 167728]
R1 avgbidsdriver;avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys [2018-11-19 189344]
R1 avgKbd;avgKbd; C:\Windows\system32\drivers\avgKbd.sys [2018-11-19 40936]
R1 avgRdr;avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [2018-11-19 101232]
R1 avgSnx;avgSnx; C:\Windows\system32\drivers\avgSnx.sys [2018-11-19 784800]
R1 avgSP;avgSP; C:\Windows\system32\drivers\avgSP.sys [2018-11-19 398232]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 avgMonFlt;avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [2018-11-19 135440]
R2 avgStm;avgStm; C:\Windows\system32\drivers\avgStm.sys [2018-11-19 157184]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-11-16 2364960]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2016-03-10 77520]
R3 ITECIRfilter;ITECIR Filter Driver; C:\Windows\system32\DRIVERS\ITECIRfilter.sys [2016-03-10 34000]
R3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2015-02-19 162592]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-11-19 17920]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-04 166912]
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2011-12-15 26624]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 avgHwid;avgHwid; C:\Windows\system32\drivers\avgHwid.sys [2018-11-19 42984]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 GPCIDrv;GPCIDrv; \??\C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv.sys []
S3 KYEKBPRO;IMPERATOR PRO Gaming Keyboard; C:\Windows\System32\Drivers\KYEKBPRO.sys [2011-10-14 18944]
S3 libusb0;libusb-win32 - Kernel Driver 02/23/2013 1.2.6.0; C:\Windows\system32\DRIVERS\libusb0.sys [2014-06-17 42592]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RTL8187Se;Síťový adaptér Realtek RTL8187SE Wireless 802.11b/g 54Mbps PCIE; C:\Windows\system32\DRIVERS\RTL8187Se.sys [2009-07-01 372224]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S3 WinUsb;Sony Ericsson sa0102 ADB Interface; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 AVG Antivirus;AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [2018-11-19 324048]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc.exe [2012-05-17 126128]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\System32\ezSharedSvcHost.exe [2015-10-24 505360]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2009-08-10 387616]
R2 FreeAgentGoFlex Service;Seagate Drive Settings Service; C:\Program Files\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe [2011-02-10 91432]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2009-08-10 178720]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-04 670536]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-10-11 66872]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R3 avgbIDSAgent;avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [2018-11-19 6848016]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2018-12-11 153168]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files\Google\Chrome\Application\71.0.3578.80\elevation_service.exe [2018-11-30 375776]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2018-12-11 153168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 104960]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-12 159960]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Zdravím!
Přeinstaloval jste chrome vč. jeho profilu?

[kyzi01]

Odinstaloval jsem ho včetně historie. Pak znovu nainstaloval. Bohužel nevím co myslíte včetně profilů

[Rudy]

Myslím tím smazání profilových podadresářů v c:\Users\ION . Doporučuji tento postup: Chrome zazálohovat pomocí ChromeBackup: https://www.stahuj.cz/internet_a_site/p ... me-backup/ . Potom kompletně odinstalovat (podadresáře Chrome v c:\users\ION\appdata\local, c:\users\ION\appdata\roaming, c:\users\ION\data aplikací, c:\users\ION\local settings a v c:\program data musí být smazány). Pak uděkat novou, čistou instalaci Chrome a zpět ze zálohy nakopírovat pouze záložky a hesla.

[kyzi01]

Bohužel záloha se nedá vytvořit, píše že není chrome

[Rudy]

Zřejmě ho nevidí proto, že instalace není úplná, nebo je poškozena. Zkusíme tedy klasicky PC vyčistit. Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[kyzi01]

Zde je log Malvarebytes

# -------------------------------
# Malwarebytes AdwCleaner 7.2.5.0
# -------------------------------
# Build: 11-26-2018
# Database: 2018-12-07.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-11-2018
# Duration: 00:00:16
# OS: Windows 7 Professional
# Cleaned: 275
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Windows\System32\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER|ENABLESHELLEXECUTEHOOKS
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF488DFA-957C-4684-B738-6C2BF2B9FE6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF1806C1-ED5D-4526-AD4B-75CA2FB86DE}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FECF5320-EEB2-4673-BFD0-E10BB7FAB6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE6DA679-92CE-410F-BC57-39C11BBBC27}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FDE53CC5-B117-4019-A046-DBC8C675DD92}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD9BD279-AD9F-468C-898C-3D435EDDCEC1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD876566-A252-4F6E-9AD0-FC01575316E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD02B3A6-51F4-4D80-B33D-2446F3FE12AC}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FAAFE674-B1E2-4DB1-BF1A-76ABAF93963}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8ECBEB9-150C-4E9C-867D-57216737694}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8C51DB2-1FA0-4751-853D-ACED5B19BA3}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F87DE4DF-DD52-47A0-9A21-69ABE862D586}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F71C4218-C80B-4A7B-9B19-F1C8F96411F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F68441D0-AE55-4ABF-8DF1-2F9C7BFE77C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F5F94B57-EC0-450B-9244-A4D1AAE273D5}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F500996E-27A1-4315-AE80-9B456D146B27}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F4DAF694-722B-4846-8850-44E13AECA7B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F38E8D98-B8ED-4A82-948E-E58E8FBD33F6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F202FF68-E7E-4651-81B1-4A73DA901F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F07C6B31-1301-4FCB-8625-2477E3541341}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EF099368-FE8F-4215-BD51-2B4B04F559B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE252357-38F9-41DC-A7D4-1F3D448DA8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE00933B-FE8A-4BBA-856B-7C40241C8C6A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED499F07-FFE3-487D-960-3DD14DCF11F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EBFE685F-D25A-4280-A42-FBDA38DFC554}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E968383B-9B04-4211-8653-8FCD631D83B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E89884D1-3630-437D-A872-30534E15B646}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E85016E9-BE62-46F2-B922-A559DCAE413A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8130B44-229D-4909-9246-7C18E657F451}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7937E01-90C9-4440-9472-50FE42C090B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E65A96F7-806C-47E2-BEB4-157D10D6280}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4D64952-ADC8-454E-889A-A32F8CD9AB43}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E37827C4-BCA9-45D3-AFD0-D0D14ADFED7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E242F85-D893-4121-8E1B-48DF2857761A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0EB784C-4ABC-416E-A7BE-4F5249FFF7C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E059153B-69FE-48FF-BDF0-3FF2513DF24}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF410176-CC93-4B92-8C2E-5F704D4D5BBA}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF070CD8-3DE8-4867-9672-DE492C5E697D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDEDB055-6EDF-4AC6-A480-FDADD428919}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDA2231A-1A37-4E81-854C-AE894FCA190}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCDF943E-D2C4-47A8-89EC-8D1E96567FD7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC538F60-1049-460C-B0F5-D04458B2794A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC3E8CC7-556C-4D47-9E70-6F53C02AB2C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB36EA87-18C6-4D5B-A37E-5E20B18ED664}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DAC215D3-669F-43BF-8482-8346931DC89E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D92DCCD4-EFD9-4842-9DC9-B321C5F2146}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8A4174B-6834-4C95-B665-F2BFD68B79D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D80A9BE1-2899-4943-A944-85B0ED12C96E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D5C1E86E-8D95-4E74-9E91-4A5152E4841}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D3E858FC-633B-498A-8230-4170B1EBC3A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D2390516-E267-4BE6-AF94-23752AA13E69}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D18D217D-F358-4EAF-A9F6-25129D529BF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D0155C22-E719-449A-B291-B44E0A38FE8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF482FD4-CA95-4632-B25F-A7DA6E5E1A39}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CEE4192D-1B85-48EE-A456-7ADBE262CB3C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE8CC0CC-52E3-4176-A59A-3BA51D98B19E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE30981C-908A-40F7-A2FE-DAAFFC1DEB2D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CDA9FC1B-6C2-42E9-B04C-BFB86320A181}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCEB31CA-4B25-4292-8B3E-2C3B40C3489B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCCCCC41-F049-4646-838A-ECBB6E3F5B6F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CBDA60EE-3FDA-4946-A5B7-BDF2B426938F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA544007-B88F-401E-B874-7D05FC5F1B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7AD9166-ACB2-4624-8875-9453EE4E4A2}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C767C063-F040-4412-A8D4-A265EA1528A7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C709A8A9-7CD2-4A1B-9FAC-D5DFE9E9A91F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C672C447-5B78-4EA8-A51A-4CFEB84DAD8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C568757C-8C7E-4504-AECB-0468DE1CF5A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C34C5098-C019-4F2F-864B-F07A2BE7FAF7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C321F001-95CA-496A-9370-29B6D639FBB6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C261ADD9-9462-47C5-893A-3FD0E986D08E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C13C2988-BAAD-4EAB-A174-921F13B5BFA8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BF6FBE6D-51AB-4055-AC32-1C241E443565}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD48DF61-AA65-4D15-976A-74BD55F2669}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB405E80-135A-4CF9-91FB-959160FFB08A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB299CF0-C96A-48F7-8E28-CFC744A93A1E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9B5F4D2-864A-4798-B23-4EE0F58E5CF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9AB2CB6-EBF3-4835-992E-34D634CA5723}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7E8B56A-3E5F-42DD-8DFA-1AD837B712FE}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7BC75E4-1185-4E58-AAEF-15A343D0D645}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7B1F043-10A2-4A5A-B68D-B78A4E63390}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7503BA3-754F-4C3C-958C-4BC7DB1BC196}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B71DEFBE-D69A-43AA-9273-95B19756E342}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6D3B486-138B-4016-94FE-8491D102BE7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5BDCD02-E939-42FC-BAEE-3E7669935330}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B58ED704-5502-47BA-A6AF-268791B48510}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B4E45DE5-C6EC-4905-979F-4FF7CB5B1642}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B41B68D-BDA4-4270-9C81-D9CC9873FC}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2F2C8EC-D780-470F-B3A4-9B4BB597C542}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF74EFFF-513E-4E03-B081-556C46F95E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF28D8A1-75EF-48AD-8117-936CB3ED396}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AEB7FFA6-FAF0-4ACF-B0C9-C880E536C3}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE631A89-EC-4643-8B45-BAD7BA39685}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE4C867A-AC08-4075-952D-391D1107D43}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC99752A-3EA3-4631-958A-1447A6568569}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC40B07A-241-41DD-9E57-C2E49BFBE797}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC1AFBD1-555B-4E02-9F9B-5D21463A3890}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFD296B-8740-4CE2-AC18-EBC364A8C619}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABF8F9A9-349B-40F2-99F-B9CF483DD8D0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AB8928CF-F64E-471D-A8BB-699384B21C9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AB610F0B-F788-4322-9FF0-FE99FEF79E96}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA66A727-9C7E-49D1-A3C0-CBB4C68BDAD}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A9C83C47-7FFE-4478-B85B-8A36EBAB55EC}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A9B49BA3-AFA6-4F09-99A2-1A5A0929059}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A88C98FD-9472-4AC7-AFAB-5ED56055B3D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3C642DE-A90B-45C6-8E47-CCC51A48ED0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A338415D-C707-46B6-80A0-72487AE95A9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A24F0DC1-69E1-4295-A8BE-F9615C67EF25}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A23FA103-CB7D-4485-890-E63E42F2BA26}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A1B2F53D-526-4880-9649-AEEEB13E22D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A19DCF5A-C4D1-45EB-B56A-D4FC8EBF7D1A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A015D21D-4F8-4AB9-BBD3-CD8F363C5F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E63018F-DB38-4A9A-A069-E3BE96726673}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C5EC286-D0F9-4298-BD21-65E2F89BDE94}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C16E2D2-33C-4D6F-97A4-B1EC41210D9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9B2FB8AC-A569-4CAF-8AD8-6FE0E042574B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{992006A3-EF88-42BF-9810-5421EDBACE0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{991A4238-2B34-4C97-B874-A16FDDDA2F3}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98EEFC48-5EA9-4B3E-84CE-A8FEFAA99BCE}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97E4A2AC-91B0-4A82-A782-2060C7C2C6A9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96B833EF-B0B9-4E26-A1AF-F1B629B386B1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9604783D-F4E-4EC9-A976-1073DACAC2F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95AABDD3-B6EB-4945-A71A-53F88FF9B83D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{942F8107-616E-431A-89B6-6B2AFD6021D6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F785CE-FD1B-4B28-B427-FB74C652BAC}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93DC77D5-4D9B-48EE-A4F4-D8845178B78D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92021C29-805C-49E4-BFEC-4128BA6CC65}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FD9466E-71E3-44ED-B3E7-77191039FD9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FB930FC-4291-4657-AE70-DB412C98A2C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E053AFE-43AD-4712-8382-8DBBA4CB1740}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8CA08732-BCEE-4D55-9A92-A3F97E2C6A59}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C358C07-BB4E-44ED-A8AF-7DECECA7AE43}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88E45939-81B9-4607-AF3A-FE1223DFA14}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88CC1412-C2D1-4D8F-994C-D44718932FFD}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88BF0CB6-931E-4415-B47-E0E918BE1ED1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87FB5617-49CB-403F-AB57-6B6358FBB4A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8628ECB5-BD35-4F19-821-578C2308A12}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83FB37-8E12-4B6C-A970-6947405AEF56}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{835EA371-85B2-4212-A3EA-8DE4BA92617}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83195233-21AA-4836-8F8B-F3A37627702B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82C7DC83-CEDF-4490-97F8-747F655EC95}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8225C26F-8907-4A9A-BA21-2D15B03D97A2}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{820B9F83-3F1A-40F5-B657-6B873B12B4CD}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81F5B8A1-7807-4102-8636-9918066FB14}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F2D4675-5C4F-4C4C-8CB8-9CDD1F3CD03A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E9E980C-F06C-45AE-AAC-F289B1D95C1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DEF95E-F6AC-4FE2-A18A-B44729853314}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CFA509A-9853-438D-87B8-1E4DAB3CBC7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CC8416C-89BC-4254-99B5-FDF7B51460BF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C3D71EA-E060-4CEF-AEBC-27EB38A4A172}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B6B241B-781E-4767-B484-25F88AA9941}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B4E5063-87D7-414B-A963-5A863D81ADE4}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AA393CB-3360-41E7-98EC-72BF83657944}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A44CB3E-9603-4521-B66D-37213B2B9890}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79D5D8E1-5D06-4ED6-982A-C813F84CDAA9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79B95D6-325D-4DE8-97E1-60B1513DB23}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79AB15BB-8100-43B0-9316-8CADDC9C824E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7979C980-F9A7-48EF-9BAA-80EE33D0DE2}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79751FE-2084-4607-9C56-25446F10537A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{795DE110-7FE8-4EF5-BEA2-CA8DA82FE6A1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{770D24C9-EF06-4934-8D85-6AB91BB7562C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76DE5DB-8608-4DDB-B78C-AECEB4B31E7B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75DFB60B-4D4-4CCB-93CC-E58B3DDC9F49}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C661D7-F75F-462D-B5FD-22E6C3101F9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{738CB1FC-A6DD-4AD1-AD4-424645511F6B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{704F542C-9FDD-4C68-968F-F936DD39E1DF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{700ACAAA-EAC8-4E00-BF13-B7A5BCEF5DEE}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F6DCF6D-CDA5-4228-AAC7-D4FDFB51947}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6EC19104-27E9-455F-B3C3-5DCDDB6B56E7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E514464-A717-4695-B2E7-3FA5109356EA}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6BBECE79-987C-43AD-95C-22CD7AEF2DA}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B9B57A3-FB3E-4715-BEB-DD80C6FCD23}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B76CA8-E0F6-45A7-9010-757578EBCE}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B41C332-A428-4DA6-A8D7-11D25E73F532}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6AAA3F2D-FB1A-43BF-A9F5-EEF91018E2E9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6AA1FC01-9BFE-49A0-ADC4-55171FC25F9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A5A92B4-2569-43F1-964E-1C5F1B330F6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{696D085E-31E-4B52-BD76-B7F3CF204E32}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{690F11FD-CC84-45F6-B13-C22E988F77A4}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{690BED94-4FE6-4CC9-A541-665E5E567B1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68E9714-6A05-417B-BCCC-25C6B986599B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6734C3BA-220E-4F41-B753-289DB61E6AF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6726426F-9AB5-4187-97F-834C7169B33}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6602A496-B8CD-4988-894A-F87B664CA24}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65BB51ED-A671-4872-90B4-76485A549F87}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64B9C9E-D8D2-4EDA-B465-5146287D308D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64AD4939-E332-4A3E-9D78-A5F459B488DB}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6182162F-FD91-470E-BFC6-2DCBB640F031}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6057368B-6693-4EFF-856C-AC7FB5881837}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F1D81D-BA71-4DEE-8B10-3F56BE814553}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F0FDF27-C2F0-4331-83EC-19C617CBF625}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5DE64FC8-6D2-4FA2-925B-7D9D8840B53}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D342968-5CBE-438F-9699-F41085498BFB}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C1C3B3F-75BB-4F48-B43B-1979123695AE}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BC8EB4-217E-4D47-B7CA-8BDF3E349F93}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B6506D-B3C9-468C-A8A0-51BD8E1463F0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5995FF16-4606-44CE-9CD7-8D463C47A20}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5910C9C-936C-44B6-952E-F84B68C4DC1E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5895D0FD-DCFE-476A-BE39-F0112A19B1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{571AF186-5AC3-4FA4-8312-7248AA2857CF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BFDC05-607-4203-8578-AA8F768EEF1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{557BD759-7DA5-4D6A-9F4D-29555C4E7EA7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{554C46D9-7A5F-46AB-A049-94207056A01D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52F5B75-1815-42A6-B348-6E318F19205}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52A2279D-849D-460C-A8F5-3C86A8D48E0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{51F04BD1-2CD2-4604-966F-1F6F6F27F1C1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5194011D-C313-44A0-9557-686969307ABB}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{51658C02-C073-4FE2-A68A-4A595D3BF923}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{51386EF2-EA66-452E-B16-70F3CCEBF31D}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50B15DD6-E98-4164-B82C-5DDF665ABBD3}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5085F5EC-16DD-4EA4-8DC4-18C89878A8C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50759D0A-8360-4E23-9898-C5D538DF2C9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ED6392B-9FD5-4714-9F26-7EB1A0B24E35}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E1F16E7-EA87-4063-8482-2510541C5D2}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4CC66FF0-5A86-41CB-93C6-2059BA2BCC8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B2A24B7-4A96-46F0-8D2C-93133BF1073}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49FFB5BE-7C69-414A-A56F-3E20441B2C5}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4967DB2-5321-4452-8C27-8F798BDC8F9F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46F6FBD1-9CAB-4B1A-824-FBB28AB6A87E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46E2E905-5190-4A8A-AD90-46DD456CA9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4619C393-38A9-4318-B03A-52C89E2378}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{45A3C8A0-AAB2-444C-9246-4C26AC3B2A22}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{428F72A3-EE35-499A-8075-D1EC67042A8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42765FAC-B909-4893-BCDE-4E3C2686EA5B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{415F3C96-A666-4C26-B714-BD7268586CFA}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{410B3E94-96CC-41C7-A7B3-DEB95A9CF586}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{40B3FD36-819-42EB-8E5C-8498E7FB946}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4084E7B-31B0-4EE8-8AD5-CCDEEF4471B4}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3FAF85E6-7AF7-49AA-8515-7143DF4C8EF8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DFD5BC-F4C0-4720-8287-115F4424E174}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3CD7871F-1A94-4BE6-B7EA-F5809C79FB0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3CBC815D-1993-4D76-B89-738917C7BCC6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C2250EE-BE65-4963-AA23-7B53A85528CB}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B28DF7-EE8C-49B5-8CC-1DDC90A32C45}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3988E4AF-78E1-4A68-BB9E-231A723641B8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38780BAF-AA86-44F0-A265-2E67D3308145}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{375E02A3-4A26-421B-894A-C4F0EDC69E}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{370D3DB-716F-4F16-B856-3E11D4153C12}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{332FB098-E0F2-4D60-8F89-7ABDB1ABA70}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{321C46D4-C9CD-4DAA-AEF2-EF8FBEB362F}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31FBBF13-358E-4BBA-9639-8796723557B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31511DBD-FAE5-41A6-ABCD-EC57BED65FB}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{30BB597C-946A-4C43-9283-FB521E9D93E8}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{306552B3-C214-437F-984A-3D88AF73E11C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{300B8C66-CAC3-4EBE-AEE2-C24D59A73382}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2EDCF453-FB6E-42C5-9E1C-9855757FCDD5}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E800E1D-C3A9-49B6-8F3C-21E9D46334F3}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D6166C7-21FD-4392-A7DE-83F3BC8BE92}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2CFA9D0F-A610-438C-B6F2-FD243A728F2}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2CBD1AB-C140-490F-A776-9E313C35D81}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A8D1BD3-A086-4D3B-8392-A0CE90CC266A}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28C88D06-A2E4-4292-B5EB-D850D096CB1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{277FE01A-9C32-496E-8FEB-0AE28F6FB71}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27503D03-E90-48F1-AEF4-68126B91B81}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2527EB68-2C5A-450A-8371-3A1FC74A1E70}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22C5E713-63C0-4432-9F5-BE6B72A616F4}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21FB986B-D4E9-4E3A-B9DD-645A9A8CAE9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21D6A3E9-F9DC-4B76-8D8E-8DB9DD849ACF}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{213510C9-7FF2-441E-86C5-9161DAA49E97}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20C6AA0C-138F-4871-9E8-51A885448760}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E76E1DD-3D4F-4D0A-A218-346BE250D5}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DEE479D-E4D1-46B8-BE83-2440922BE449}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D3654BA-5C57-4A41-8036-E44B9B5FFFDA}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C4B4F-A2F-480E-ACC6-8726F67FAD49}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1BE2ECC4-8723-4AFA-87FA-A5333965569}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17F68B54-6CDB-46A8-8CB4-7A0327C4E61}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17CE4592-9B1D-46BD-B886-169CDD3D83B0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17A00BB8-4E8-4A21-AFEC-6EFFBADF9E83}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16122AD3-3E3-40F8-8F3A-3D5B315AEEAB}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{157D1EE4-2EF-48AE-83D5-2C793C19134B}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14AB2AF3-D1AE-4615-B635-5B7AB68A2C9}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12120DFB-905-40B6-816E-40E9342AEAA6}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11D5E67C-287A-4E8F-B27-9DFCA87DD515}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10077C6B-2890-4401-BE7B-B5B8DB93C1E}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [39724 octets] - [11/12/2018 21:09:42]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[Rudy]

OK. Dejte nový log RSIT.

[kyzi01]

Logfile of random's system information tool 1.10 (written by random/random)
Run by ION at 2018-12-11 22:16:21
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 39 GB (39%) free of 100 GB
Total RAM: 3327 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:17:28, on 11.12.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\AVG\Antivirus\AVGUI.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe
C:\Users\ION\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil11c_ActiveX.exe
C:\Windows\System32\MsSpellCheckingFacility.exe
C:\Windows\system32\DllHost.exe
C:\Users\ION\Desktop\RSIT.exe
C:\Program Files\trend micro\ION.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AVGUI.exe] "C:\Program Files\AVG\Antivirus\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILQE.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-610 Series"
O4 - HKCU\..\Run: [BloodyKeyboard] "C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe" Minimum
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\ION\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AVG Antivirus - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\AVGSvc.exe
O23 - Service: avgbIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\aswidsagent.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Seiko Epson Corporation - C:\Windows\system32\EscSvc.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - Easybits - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Seagate Drive Settings Service (FreeAgentGoFlex Service) - Seagate Technology LLC - C:\Program Files\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files\Google\Chrome\Application\71.0.3578.80\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 7141 bytes

======Scheduled tasks folder======

C:\Windows\tasks\EPSON XP-610 Series Invitation {33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}.job - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLQE.EXE /EXE:"{33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}" /F:"Invitation"
C:\Windows\tasks\EPSON XP-610 Series Update {33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}.job - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLQE.EXE /EXE:"{33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}" /F:"Update"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-26 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 351728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-26 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 351728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EEventManager"=C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2016-01-20 1087184]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AVGUI.exe"=C:\Program Files\AVG\Antivirus\AvLaunch.exe [2018-11-19 290064]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-19 1793736]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"EPLTarget\P0000000000000001"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILQE.EXE [2013-01-24 260160]
"BloodyKeyboard"=C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe [2017-11-02 11374080]
"cz.seznam.software.szndesktop"=C:\Users\ION\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2018-03-27 109808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoLogoff"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-12-11 20:52:51 ----D---- C:\Program Files\Google Chrome Backup
2018-12-11 20:15:34 ----D---- C:\Users\ION\AppData\Roaming\Google Chrome Backup
2018-12-11 18:38:17 ----D---- C:\rsit
2018-11-19 16:12:36 ----A---- C:\Windows\system32\avgBoot.exe

======List of files/folders modified in the last 1 month======

2018-12-11 22:17:24 ----D---- C:\Program Files\trend micro
2018-12-11 22:15:18 ----D---- C:\Windows\system32\config
2018-12-11 22:12:51 ----D---- C:\Windows\Temp
2018-12-11 21:12:24 ----D---- C:\Windows\system32\Tasks
2018-12-11 21:09:42 ----D---- C:\AdwCleaner
2018-12-11 20:52:51 ----RD---- C:\Program Files
2018-12-11 20:43:07 ----SHD---- C:\Windows\Installer
2018-12-11 20:38:33 ----D---- C:\Program Files\Google
2018-12-11 20:27:21 ----D---- C:\Windows\tracing
2018-12-11 20:18:19 ----D---- C:\Users\ION\AppData\Roaming\Seznam.cz
2018-12-11 20:16:10 ----D---- C:\Windows\Prefetch
2018-12-11 18:52:27 ----D---- C:\Windows\system32\catroot2
2018-12-11 18:51:21 ----D---- C:\Windows\winsxs
2018-12-10 12:23:22 ----SHD---- C:\System Volume Information
2018-12-09 16:31:03 ----D---- C:\Windows\system32\NDF
2018-12-09 08:48:35 ----D---- C:\Users\ION\AppData\Roaming\uTorrent
2018-12-06 18:48:41 ----D---- C:\Windows\System32
2018-12-06 18:48:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-12-06 18:48:37 ----D---- C:\Windows\inf
2018-12-05 15:51:27 ----D---- C:\Users\ION\AppData\Roaming\vlc
2018-11-24 18:25:21 ----D---- C:\Program Files\FastShare
2018-11-24 18:23:30 ----D---- C:\Program Files\Nero
2018-11-24 18:22:06 ----D---- C:\Program Files\Common Files\Nero
2018-11-24 18:21:58 ----D---- C:\ProgramData\Nero
2018-11-24 17:58:36 ----D---- C:\Users\ION\AppData\Roaming\Skype
2018-11-21 16:54:52 ----D---- C:\Windows\system32\drivers
2018-11-15 17:23:03 ----D---- C:\Windows

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avgbidsh;avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys [2018-11-19 165944]
R0 avgblog;avgblog; C:\Windows\system32\drivers\avgblogx.sys [2018-11-19 284304]
R0 avgbuniv;avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys [2018-11-19 57952]
R0 avgRvrt;avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [2018-11-19 73040]
R0 avgVmm;avgVmm; C:\Windows\system32\drivers\avgVmm.sys [2018-11-19 310248]
R0 nvamacpi;NVIDIA Away Mode System; C:\Windows\system32\DRIVERS\NVAMACPI.sys [2009-11-19 24608]
R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2009-11-19 213024]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-25 466008]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 avgArPot;avgArPot; C:\Windows\system32\drivers\avgArPot.sys [2018-11-19 167728]
R1 avgbidsdriver;avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys [2018-11-19 189344]
R1 avgKbd;avgKbd; C:\Windows\system32\drivers\avgKbd.sys [2018-11-19 40936]
R1 avgRdr;avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [2018-11-19 101232]
R1 avgSnx;avgSnx; C:\Windows\system32\drivers\avgSnx.sys [2018-11-19 784800]
R1 avgSP;avgSP; C:\Windows\system32\drivers\avgSP.sys [2018-11-19 398232]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 avgMonFlt;avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [2018-11-19 135440]
R2 avgStm;avgStm; C:\Windows\system32\drivers\avgStm.sys [2018-11-19 157184]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-11-16 2364960]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2016-03-10 77520]
R3 ITECIRfilter;ITECIR Filter Driver; C:\Windows\system32\DRIVERS\ITECIRfilter.sys [2016-03-10 34000]
R3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2015-02-19 162592]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-11-19 17920]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-04 166912]
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2011-12-15 26624]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 avgHwid;avgHwid; C:\Windows\system32\drivers\avgHwid.sys [2018-11-19 42984]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 GPCIDrv;GPCIDrv; \??\C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv.sys []
S3 KYEKBPRO;IMPERATOR PRO Gaming Keyboard; C:\Windows\System32\Drivers\KYEKBPRO.sys [2011-10-14 18944]
S3 libusb0;libusb-win32 - Kernel Driver 02/23/2013 1.2.6.0; C:\Windows\system32\DRIVERS\libusb0.sys [2014-06-17 42592]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RTL8187Se;Síťový adaptér Realtek RTL8187SE Wireless 802.11b/g 54Mbps PCIE; C:\Windows\system32\DRIVERS\RTL8187Se.sys [2009-07-01 372224]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S3 WinUsb;Sony Ericsson sa0102 ADB Interface; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 AVG Antivirus;AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [2018-11-19 324048]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc.exe [2012-05-17 126128]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\System32\ezSharedSvcHost.exe [2015-10-24 505360]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2009-08-10 387616]
R2 FreeAgentGoFlex Service;Seagate Drive Settings Service; C:\Program Files\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe [2011-02-10 91432]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2009-08-10 178720]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-04 670536]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-10-11 66872]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R3 avgbIDSAgent;avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [2018-11-19 6848016]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2018-12-11 153168]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files\Google\Chrome\Application\71.0.3578.80\elevation_service.exe [2018-11-30 375776]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2018-12-11 153168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 104960]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-12 159960]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

[kyzi01]

Tady je log

Logfile of random's system information tool 1.10 (written by random/random)
Run by ION at 2018-12-12 16:19:39
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 49 GB (49%) free of 100 GB
Total RAM: 3327 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:21:16, on 12.12.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19178)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe
C:\Program Files\AVG\Antivirus\AVGUI.exe
C:\Users\ION\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Windows\eHome\EhTray.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Users\ION\Desktop\RSIT.exe
C:\Program Files\trend micro\ION.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AVGUI.exe] "C:\Program Files\AVG\Antivirus\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILQE.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-610 Series"
O4 - HKCU\..\Run: [BloodyKeyboard] "C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe" Minimum
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\ION\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AVG Antivirus - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\AVGSvc.exe
O23 - Service: avgbIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\aswidsagent.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Seiko Epson Corporation - C:\Windows\system32\EscSvc.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - Easybits - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Seagate Drive Settings Service (FreeAgentGoFlex Service) - Seagate Technology LLC - C:\Program Files\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files\Google\Chrome\Application\71.0.3578.80\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 7584 bytes

======Scheduled tasks folder======

C:\Windows\tasks\EPSON XP-610 Series Invitation {33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}.job - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLQE.EXE /EXE:"{33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}" /F:"Invitation"
C:\Windows\tasks\EPSON XP-610 Series Update {33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}.job - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLQE.EXE /EXE:"{33C7C02E-9614-4E3D-A5F1-9504A2CFBDFD}" /F:"Update"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-26 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 351728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-26 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 351728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EEventManager"=C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2016-01-20 1087184]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AVGUI.exe"=C:\Program Files\AVG\Antivirus\AvLaunch.exe [2018-11-19 290064]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-19 1793736]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"EPLTarget\P0000000000000001"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILQE.EXE [2013-01-24 260160]
"BloodyKeyboard"=C:\Program Files\KeyDominator2\KeyDominator2\KeyDominator2.exe [2017-11-02 11374080]
"cz.seznam.software.szndesktop"=C:\Users\ION\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2018-03-27 109808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoLogoff"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-12-12 16:06:42 ----D---- C:\_OTM
2018-12-12 15:42:30 ----SD---- C:\Windows\system32\CompatTel
2018-12-12 15:42:30 ----D---- C:\Windows\system32\appraiser
2018-12-11 23:25:27 ----SHD---- C:\Config.Msi
2018-12-11 20:52:51 ----D---- C:\Program Files\Google Chrome Backup
2018-12-11 20:15:34 ----D---- C:\Users\ION\AppData\Roaming\Google Chrome Backup
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-12-11 19:02:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\wups.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\wdigest.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\SearchFilterHost.exe
2018-12-11 19:02:18 ----A---- C:\Windows\system32\msxml6r.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\msxml3r.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\mssitlb.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\mferror.dll
2018-12-11 19:02:18 ----A---- C:\Windows\system32\credssp.dll
2018-12-11 19:02:17 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-12-11 19:02:17 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\wups2.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\tzres.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\schannel.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2018-12-11 19:02:17 ----A---- C:\Windows\system32\SearchIndexer.exe
2018-12-11 19:02:17 ----A---- C:\Windows\system32\pnrpsvc.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\mssprxy.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\msscntrs.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\msimsg.dll
2018-12-11 19:02:17 ----A---- C:\Windows\system32\IcCoinstall.dll
2018-12-11 19:02:16 ----A---- C:\Windows\system32\TSpkg.dll
2018-12-11 19:02:16 ----A---- C:\Windows\system32\sscore.dll
2018-12-11 19:02:16 ----A---- C:\Windows\system32\msv1_0.dll
2018-12-11 19:02:16 ----A---- C:\Windows\system32\mssrch.dll
2018-12-11 19:02:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-12-11 19:02:16 ----A---- C:\Windows\system32\apisetschema.dll
2018-12-11 19:02:15 ----A---- C:\Windows\system32\ncrypt.dll
2018-12-11 19:02:15 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-12-11 19:02:15 ----A---- C:\Windows\system32\drivers\ntfs.sys
2018-12-11 19:02:15 ----A---- C:\Windows\system32\drivers\hidusb.sys
2018-12-11 19:02:15 ----A---- C:\Windows\system32\cryptbase.dll
2018-12-11 19:02:15 ----A---- C:\Windows\system32\bcrypt.dll
2018-12-11 19:02:14 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-12-11 19:02:14 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-12-11 19:02:14 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-12-11 19:02:14 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-12-11 19:02:14 ----A---- C:\Windows\system32\wudriver.dll
2018-12-11 19:02:14 ----A---- C:\Windows\system32\WcsPlugInService.dll
2018-12-11 19:02:14 ----A---- C:\Windows\system32\P2P.dll
2018-12-11 19:02:14 ----A---- C:\Windows\system32\msshooks.dll
2018-12-11 19:02:14 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2018-12-11 19:02:14 ----A---- C:\Windows\system32\drivers\swenum.sys
2018-12-11 19:02:14 ----A---- C:\Windows\system32\drivers\intelppm.sys
2018-12-11 19:02:14 ----A---- C:\Windows\system32\drivers\errdev.sys
2018-12-11 19:02:14 ----A---- C:\Windows\system32\drivers\amdk8.sys
2018-12-11 19:02:14 ----A---- C:\Windows\system32\cscdll.dll
2018-12-11 19:02:14 ----A---- C:\Windows\system32\cscapi.dll
2018-12-11 19:02:13 ----A---- C:\Windows\system32\tquery.dll
2018-12-11 19:02:13 ----A---- C:\Windows\system32\msiexec.exe
2018-12-11 19:02:13 ----A---- C:\Windows\system32\mfps.dll
2018-12-11 19:02:13 ----A---- C:\Windows\system32\dnsrslvr.dll
2018-12-11 19:02:13 ----A---- C:\Windows\system32\catsrvut.dll
2018-12-11 19:02:12 ----A---- C:\Windows\system32\srvsvc.dll
2018-12-11 19:02:12 ----A---- C:\Windows\system32\scesrv.dll
2018-12-11 19:02:12 ----A---- C:\Windows\system32\netevent.dll
2018-12-11 19:02:12 ----A---- C:\Windows\system32\msxml3.dll
2018-12-11 19:02:12 ----A---- C:\Windows\system32\msihnd.dll
2018-12-11 19:02:12 ----A---- C:\Windows\system32\lsass.exe
2018-12-11 19:02:12 ----A---- C:\Windows\system32\advapi32.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\wsnmp32.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\wkssvc.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\WinSCard.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\rpcss.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\oleaut32.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\mprdim.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\lpk.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\kerberos.dll
2018-12-11 19:02:11 ----A---- C:\Windows\system32\cryptnet.dll
2018-12-11 19:02:10 ----A---- C:\Windows\system32\wintrust.dll
2018-12-11 19:02:10 ----A---- C:\Windows\system32\TabSvc.dll
2018-12-11 19:02:10 ----A---- C:\Windows\system32\MPSSVC.dll
2018-12-11 19:02:10 ----A---- C:\Windows\system32\drivers\cng.sys
2018-12-11 19:02:10 ----A---- C:\Windows\system32\cryptsvc.dll
2018-12-11 19:02:09 ----A---- C:\Windows\system32\sspisrv.dll
2018-12-11 19:02:09 ----A---- C:\Windows\system32\secur32.dll
2018-12-11 19:02:09 ----A---- C:\Windows\system32\mfpmp.exe
2018-12-11 19:02:09 ----A---- C:\Windows\system32\dxmasf.dll
2018-12-11 19:02:09 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-12-11 19:02:09 ----A---- C:\Windows\system32\drivers\hidclass.sys
2018-12-11 19:02:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-12-11 19:02:08 ----A---- C:\Windows\system32\drivers\volmgr.sys
2018-12-11 19:02:08 ----A---- C:\Windows\system32\drivers\usbohci.sys
2018-12-11 19:02:08 ----A---- C:\Windows\system32\drivers\termdd.sys
2018-12-11 19:02:08 ----A---- C:\Windows\system32\drivers\processr.sys
2018-12-11 19:02:08 ----A---- C:\Windows\system32\drivers\mssmbios.sys
2018-12-11 19:02:08 ----A---- C:\Windows\system32\drivers\msisadrv.sys
2018-12-11 19:02:07 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-12-11 19:02:07 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-12-11 19:02:07 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-12-11 19:02:07 ----A---- C:\Windows\system32\wuwebv.dll
2018-12-11 19:02:07 ----A---- C:\Windows\system32\wshnetbs.dll
2018-12-11 19:02:07 ----A---- C:\Windows\system32\p2psvc.dll
2018-12-11 19:02:07 ----A---- C:\Windows\system32\mssphtb.dll
2018-12-11 19:02:07 ----A---- C:\Windows\system32\iernonce.dll
2018-12-11 19:02:07 ----A---- C:\Windows\system32\comcat.dll
2018-12-11 19:02:06 ----A---- C:\Windows\system32\cscsvc.dll
2018-12-11 19:02:05 ----A---- C:\Windows\system32\mscms.dll
2018-12-11 19:02:04 ----A---- C:\Windows\system32\comsvcs.dll
2018-12-11 19:02:03 ----A---- C:\Windows\system32\Query.dll
2018-12-11 19:02:02 ----A---- C:\Windows\system32\itss.dll
2018-12-11 19:02:02 ----A---- C:\Windows\system32\dnsapi.dll
2018-12-11 19:02:01 ----A---- C:\Windows\system32\msi.dll
2018-12-11 19:02:01 ----A---- C:\Windows\system32\inetcomm.dll
2018-12-11 19:02:00 ----A---- C:\Windows\system32\msxml6.dll
2018-12-11 19:01:59 ----A---- C:\Windows\system32\termsrv.dll
2018-12-11 19:01:59 ----A---- C:\Windows\system32\spoolsv.exe
2018-12-11 19:01:58 ----A---- C:\Windows\system32\lsasrv.dll
2018-12-11 19:01:57 ----A---- C:\Windows\system32\ole32.dll
2018-12-11 19:01:57 ----A---- C:\Windows\system32\crypt32.dll
2018-12-11 19:01:56 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-12-11 19:01:55 ----A---- C:\Windows\system32\cdosys.dll
2018-12-11 19:01:54 ----A---- C:\Windows\system32\wisptis.exe
2018-12-11 19:01:54 ----A---- C:\Windows\system32\MSVidCtl.dll
2018-12-11 19:01:53 ----A---- C:\Windows\system32\mf.dll
2018-12-11 19:01:52 ----A---- C:\Windows\system32\sspicli.dll
2018-12-11 19:01:52 ----A---- C:\Windows\system32\drivers\netbios.sys
2018-12-11 19:01:52 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-12-11 19:01:52 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-12-11 19:01:52 ----A---- C:\Windows\system32\conhost.exe
2018-12-11 19:01:51 ----A---- C:\Windows\system32\drivers\srv.sys
2018-12-11 19:01:51 ----A---- C:\Windows\system32\drivers\pacer.sys
2018-12-11 19:01:51 ----A---- C:\Windows\system32\drivers\http.sys
2018-12-11 19:01:51 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-12-11 19:01:51 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-12-11 19:01:50 ----A---- C:\Windows\system32\drivers\wmiacpi.sys
2018-12-11 19:01:50 ----A---- C:\Windows\system32\drivers\vdrvroot.sys
2018-12-11 19:01:50 ----A---- C:\Windows\system32\drivers\netio.sys
2018-12-11 19:01:50 ----A---- C:\Windows\system32\drivers\msrpc.sys
2018-12-11 19:01:50 ----A---- C:\Windows\system32\csrsrv.dll
2018-12-11 19:01:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-12-11 19:01:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-12-11 19:01:49 ----A---- C:\Windows\system32\wuaueng.dll
2018-12-11 19:01:49 ----A---- C:\Windows\system32\wuapp.exe
2018-12-11 19:01:49 ----A---- C:\Windows\system32\PeerDistHttpTrans.dll
2018-12-11 19:01:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-12-11 19:01:49 ----A---- C:\Windows\system32\drivers\viac7.sys
2018-12-11 19:01:49 ----A---- C:\Windows\system32\drivers\usbehci.sys
2018-12-11 19:01:49 ----A---- C:\Windows\system32\drivers\pci.sys
2018-12-11 19:01:49 ----A---- C:\Windows\system32\drivers\isapnp.sys
2018-12-11 19:01:49 ----A---- C:\Windows\system32\appidsvc.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\wshqos.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\vmictimeprovider.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\srclient.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\sdchange.exe
2018-12-11 19:01:48 ----A---- C:\Windows\system32\rrinstaller.exe
2018-12-11 19:01:48 ----A---- C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\PeerDist.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\mssph.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\msrahc.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\inseng.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\ie4uinit.exe
2018-12-11 19:01:48 ----A---- C:\Windows\system32\auditpol.exe
2018-12-11 19:01:48 ----A---- C:\Windows\system32\appinfo.dll
2018-12-11 19:01:48 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-12-11 19:01:47 ----A---- C:\Windows\system32\wmp.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\winsrv.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\StructuredQuery.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\streamci.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\rstrui.exe
2018-12-11 19:01:45 ----A---- C:\Windows\system32\racpldlg.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\itircl.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\hhsetup.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\gdi32.dll
2018-12-11 19:01:45 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-12-11 19:01:45 ----A---- C:\Windows\hh.exe
2018-12-11 19:01:44 ----A---- C:\Windows\system32\halacpi.dll
2018-12-11 19:01:44 ----A---- C:\Windows\system32\hal.dll
2018-12-11 19:01:44 ----A---- C:\Windows\system32\drivers\luafv.sys
2018-12-11 19:01:44 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-12-11 19:01:44 ----A---- C:\Windows\system32\cdd.dll
2018-12-11 19:01:43 ----A---- C:\Windows\system32\drivers\csc.sys
2018-12-11 19:01:42 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2018-12-11 19:01:42 ----A---- C:\Windows\system32\drivers\bowser.sys
2018-12-11 19:01:41 ----A---- C:\Windows\system32\drivers\ks.sys
2018-12-11 19:01:41 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2018-12-11 19:01:40 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-12-11 19:01:40 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2018-12-11 19:01:39 ----A---- C:\Windows\system32\rpcrt4.dll
2018-12-11 19:01:38 ----A---- C:\Windows\system32\smss.exe
2018-12-11 19:01:38 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-12-11 19:01:38 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-12-11 19:01:37 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-12-11 19:01:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-12-11 19:01:37 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2018-12-11 19:01:37 ----A---- C:\Windows\system32\drivers\acpi.sys
2018-12-11 19:01:37 ----A---- C:\Windows\system32\appidapi.dll
2018-12-11 19:01:36 ----A---- C:\Windows\system32\wuauclt.exe
2018-12-11 19:01:36 ----A---- C:\Windows\system32\wuapi.dll
2018-12-11 19:01:36 ----A---- C:\Windows\system32\PeerDistSvc.dll
2018-12-11 19:01:36 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-12-11 19:01:35 ----A---- C:\Windows\system32\WinSetupUI.dll
2018-12-11 19:01:35 ----A---- C:\Windows\system32\vmicsvc.exe
2018-12-11 19:01:35 ----A---- C:\Windows\system32\urlmon.dll
2018-12-11 19:01:35 ----A---- C:\Windows\system32\srcore.dll
2018-12-11 19:01:35 ----A---- C:\Windows\system32\iedkcs32.dll
2018-12-11 19:01:34 ----A---- C:\Windows\system32\wmploc.DLL
2018-12-11 19:01:34 ----A---- C:\Windows\system32\mssvp.dll
2018-12-11 19:01:34 ----A---- C:\Windows\system32\msra.exe
2018-12-11 19:01:32 ----A---- C:\Windows\system32\occache.dll
2018-12-11 19:01:31 ----A---- C:\Windows\system32\gpedit.dll
2018-12-11 19:01:31 ----A---- C:\Windows\system32\consent.exe
2018-12-11 19:01:30 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-12-11 19:01:30 ----A---- C:\Windows\system32\authui.dll
2018-12-11 19:01:29 ----A---- C:\Windows\system32\zipfldr.dll
2018-12-11 19:01:29 ----A---- C:\Windows\system32\schedsvc.dll
2018-12-11 19:01:28 ----A---- C:\Windows\system32\clfs.sys
2018-12-11 19:01:27 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-12-11 19:01:27 ----A---- C:\Windows\system32\atmfd.dll
2018-12-11 19:01:26 ----A---- C:\Windows\system32\win32k.sys
2018-12-11 19:01:26 ----A---- C:\Windows\system32\drivers\rdbss.sys
2018-12-11 19:01:25 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-12-11 19:01:25 ----A---- C:\Windows\system32\ntdll.dll
2018-12-11 19:01:25 ----A---- C:\Windows\system32\halmacpi.dll
2018-12-11 19:01:24 ----A---- C:\Windows\system32\sysmain.dll
2018-12-11 19:01:24 ----A---- C:\Windows\system32\drivers\appid.sys
2018-12-11 19:01:23 ----A---- C:\Windows\system32\vbscript.dll
2018-12-11 19:01:23 ----A---- C:\Windows\system32\KernelBase.dll
2018-12-11 19:01:23 ----A---- C:\Windows\system32\jsproxy.dll
2018-12-11 19:01:23 ----A---- C:\Windows\system32\jscript9diag.dll
2018-12-11 19:01:23 ----A---- C:\Windows\system32\dxtmsft.dll
2018-12-11 19:01:21 ----A---- C:\Windows\system32\wucltux.dll
2018-12-11 19:01:20 ----A---- C:\Windows\system32\xpsrchvw.exe
2018-12-11 19:01:19 ----A---- C:\Windows\system32\msfeeds.dll
2018-12-11 19:01:19 ----A---- C:\Windows\system32\ieapfltr.dll
2018-12-11 19:01:17 ----A---- C:\Windows\system32\webcheck.dll
2018-12-11 19:01:16 ----A---- C:\Windows\system32\msrating.dll
2018-12-11 19:01:16 ----A---- C:\Windows\system32\iesetup.dll
2018-12-11 19:01:15 ----A---- C:\Windows\system32\INETRES.dll
2018-12-11 19:01:14 ----A---- C:\Windows\system32\shell32.dll
2018-12-11 19:01:13 ----A---- C:\Windows\system32\themeui.dll
2018-12-11 19:01:12 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-12-11 19:01:11 ----A---- C:\Windows\system32\wininet.dll
2018-12-11 19:01:11 ----A---- C:\Windows\system32\kernel32.dll
2018-12-11 19:01:11 ----A---- C:\Windows\system32\jscript.dll
2018-12-11 19:01:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-12-11 19:01:08 ----A---- C:\Windows\system32\dxtrans.dll
2018-12-11 19:01:06 ----A---- C:\Windows\system32\ieui.dll
2018-12-11 19:01:05 ----A---- C:\Windows\system32\ieframe.dll
2018-12-11 19:01:01 ----A---- C:\Windows\system32\mshtmled.dll
2018-12-11 19:01:00 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-12-11 19:00:59 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-12-11 19:00:58 ----A---- C:\Windows\system32\iertutil.dll
2018-12-11 19:00:55 ----A---- C:\Windows\system32\jscript9.dll
2018-12-11 19:00:53 ----A---- C:\Windows\system32\webservices.dll
2018-12-11 19:00:52 ----A---- C:\Windows\system32\mshtml.dll
2018-12-11 19:00:48 ----A---- C:\Windows\system32\t2embed.dll
2018-12-11 19:00:48 ----A---- C:\Windows\system32\icm32.dll
2018-12-11 19:00:48 ----A---- C:\Windows\system32\fontsub.dll
2018-12-11 19:00:48 ----A---- C:\Windows\system32\atmlib.dll
2018-12-11 19:00:47 ----A---- C:\Windows\system32\traffic.dll
2018-12-11 19:00:47 ----A---- C:\Windows\system32\scksp.dll
2018-12-11 19:00:47 ----A---- C:\Windows\system32\msimg32.dll
2018-12-11 19:00:47 ----A---- C:\Windows\system32\mf3216.dll
2018-12-11 19:00:47 ----A---- C:\Windows\system32\drivers\hidparse.sys
2018-12-11 19:00:47 ----A---- C:\Windows\system32\basecsp.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-12-11 19:00:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-12-11 19:00:46 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-12-11 19:00:45 ----A---- C:\Windows\system32\ucrtbase.dll
2018-12-11 19:00:45 ----A---- C:\Windows\system32\msrd3x40.dll
2018-12-11 19:00:45 ----A---- C:\Windows\system32\msjet40.dll
2018-12-11 19:00:45 ----A---- C:\Windows\system32\msexcl40.dll
2018-12-11 19:00:44 ----A---- C:\Windows\system32\dciman32.dll
2018-12-11 19:00:43 ----A---- C:\Windows\system32\WindowsCodecs.dll
2018-12-11 19:00:43 ----A---- C:\Windows\system32\CompatTelRunner.exe
2018-12-11 19:00:42 ----A---- C:\Windows\system32\aeinv.dll
2018-12-11 19:00:41 ----A---- C:\Windows\system32\winload.exe
2018-12-11 19:00:41 ----A---- C:\Windows\system32\ieUnatt.exe
2018-12-11 19:00:41 ----A---- C:\Windows\system32\ci.dll
2018-12-11 19:00:40 ----A---- C:\Windows\system32\spwmp.dll
2018-12-11 19:00:40 ----A---- C:\Windows\system32\rtm.dll
2018-12-11 19:00:40 ----A---- C:\Windows\system32\iprtrmgr.dll
2018-12-11 19:00:40 ----A---- C:\Windows\system32\iprtprio.dll
2018-12-11 19:00:39 ----A---- C:\Windows\system32\UtcResources.dll
2018-12-11 19:00:39 ----A---- C:\Windows\system32\drivers\usbport.sys
2018-12-11 19:00:39 ----A---- C:\Windows\system32\drivers\usbhub.sys
2018-12-11 19:00:39 ----A---- C:\Windows\system32\drivers\usbd.sys
2018-12-11 19:00:39 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2018-12-11 19:00:39 ----A---- C:\Windows\system32\diagtrack.dll
2018-12-11 19:00:38 ----A---- C:\Windows\system32\wfapigp.dll
2018-12-11 19:00:38 ----A---- C:\Windows\system32\rpchttp.dll
2018-12-11 19:00:38 ----A---- C:\Windows\system32\oleres.dll
2018-12-11 19:00:38 ----A---- C:\Windows\system32\icfupgd.dll
2018-12-11 19:00:38 ----A---- C:\Windows\system32\CscMig.dll
2018-12-11 19:00:37 ----A---- C:\Windows\system32\hlink.dll
2018-12-11 19:00:37 ----A---- C:\Windows\system32\drivers\AMDAGP.SYS
2018-12-11 19:00:37 ----A---- C:\Windows\system32\adtschema.dll
2018-12-11 19:00:36 ----A---- C:\Windows\system32\drivers\VIAAGP.SYS
2018-12-11 19:00:36 ----A---- C:\Windows\system32\drivers\ULIAGPKX.SYS
2018-12-11 19:00:36 ----A---- C:\Windows\system32\drivers\SISAGP.SYS
2018-12-11 19:00:36 ----A---- C:\Windows\system32\drivers\NV_AGP.SYS
2018-12-11 19:00:36 ----A---- C:\Windows\system32\drivers\AGP440.sys
2018-12-11 19:00:34 ----A---- C:\Windows\system32\vmicres.dll
2018-12-11 19:00:34 ----A---- C:\Windows\system32\scrobj.dll
2018-12-11 19:00:34 ----A---- C:\Windows\system32\msobjs.dll
2018-12-11 19:00:34 ----A---- C:\Windows\system32\msaudite.dll
2018-12-11 19:00:34 ----A---- C:\Windows\system32\dnscacheugc.exe
2018-12-11 19:00:33 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2018-12-11 19:00:33 ----A---- C:\Windows\system32\scrrun.dll
2018-12-11 19:00:32 ----A---- C:\Windows\system32\wshcon.dll
2018-12-11 19:00:32 ----A---- C:\Windows\system32\wscript.exe
2018-12-11 19:00:32 ----A---- C:\Windows\system32\d3d10warp.dll
2018-12-11 19:00:32 ----A---- C:\Windows\system32\cscript.exe
2018-12-11 19:00:31 ----A---- C:\Windows\system32\dispex.dll
2018-12-11 18:58:34 ----A---- C:\Windows\system32\invagent.dll
2018-12-11 18:58:34 ----A---- C:\Windows\system32\centel.dll
2018-12-11 18:58:34 ----A---- C:\Windows\system32\aitstatic.exe
2018-12-11 18:58:33 ----A---- C:\Windows\system32\generaltel.dll
2018-12-11 18:58:33 ----A---- C:\Windows\system32\devinv.dll
2018-12-11 18:58:33 ----A---- C:\Windows\system32\appraiser.dll
2018-12-11 18:58:33 ----A---- C:\Windows\system32\aepic.dll
2018-12-11 18:58:33 ----A---- C:\Windows\system32\acmigration.dll
2018-12-11 18:38:17 ----D---- C:\rsit
2018-11-19 16:12:36 ----A---- C:\Windows\system32\avgBoot.exe

======List of files/folders modified in the last 1 month======

2018-12-12 16:21:12 ----D---- C:\Program Files\trend micro
2018-12-12 16:20:14 ----D---- C:\Windows\Temp
2018-12-12 16:19:24 ----D---- C:\Windows\system32\config
2018-12-12 16:18:12 ----D---- C:\Windows\System32
2018-12-12 16:18:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-12-12 16:18:10 ----D---- C:\Windows\inf
2018-12-12 16:07:46 ----D---- C:\Windows\Microsoft.NET
2018-12-12 16:07:43 ----RSD---- C:\Windows\assembly
2018-12-12 15:53:52 ----SHD---- C:\System Volume Information
2018-12-12 15:49:35 ----D---- C:\Windows\winsxs
2018-12-12 15:43:35 ----D---- C:\Windows\system32\drivers\cs-CZ
2018-12-12 15:43:35 ----D---- C:\Windows\PolicyDefinitions
2018-12-12 15:43:35 ----D---- C:\Windows\ehome
2018-12-12 15:43:34 ----D---- C:\Windows\system32\migration
2018-12-12 15:43:34 ----D---- C:\Windows\system32\drivers\en-US
2018-12-12 15:43:34 ----D---- C:\Windows\system32\drivers
2018-12-12 15:43:34 ----D---- C:\Windows\system32\cs-CZ
2018-12-12 15:43:32 ----D---- C:\Windows\system32\Setup
2018-12-12 15:43:32 ----D---- C:\Windows\system32\en-US
2018-12-12 15:43:12 ----RSD---- C:\Windows\Fonts
2018-12-12 15:43:06 ----D---- C:\Windows\AppPatch
2018-12-12 15:43:05 ----D---- C:\Windows
2018-12-12 15:43:02 ----D---- C:\Program Files\Internet Explorer
2018-12-12 15:42:57 ----D---- C:\Program Files\Windows Media Player
2018-12-12 15:42:38 ----D---- C:\Windows\system32\CodeIntegrity
2018-12-12 15:42:38 ----D---- C:\Windows\system32\Boot
2018-12-12 15:42:31 ----D---- C:\Windows\AppCompat
2018-12-12 15:42:30 ----D---- C:\Windows\system32\wbem
2018-12-12 15:42:23 ----D---- C:\Windows\system32\DriverStore
2018-12-11 23:41:29 ----SHD---- C:\Windows\Installer
2018-12-11 23:41:14 ----D---- C:\ProgramData\Microsoft Help
2018-12-11 23:38:20 ----D---- C:\Program Files\Common Files\microsoft shared
2018-12-11 23:28:08 ----D---- C:\Windows\system32\MRT
2018-12-11 23:27:56 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-12-11 23:27:37 ----AC---- C:\Windows\system32\MRT.exe
2018-12-11 23:20:59 ----D---- C:\Windows\Logs
2018-12-11 21:12:24 ----D---- C:\Windows\system32\Tasks
2018-12-11 21:09:42 ----D---- C:\AdwCleaner
2018-12-11 20:52:51 ----RD---- C:\Program Files
2018-12-11 20:38:33 ----D---- C:\Program Files\Google
2018-12-11 20:27:21 ----D---- C:\Windows\tracing
2018-12-11 20:18:19 ----D---- C:\Users\ION\AppData\Roaming\Seznam.cz
2018-12-11 20:16:10 ----D---- C:\Windows\Prefetch
2018-12-11 18:52:27 ----D---- C:\Windows\system32\catroot2
2018-12-09 16:31:03 ----D---- C:\Windows\system32\NDF
2018-12-09 08:48:35 ----D---- C:\Users\ION\AppData\Roaming\uTorrent
2018-12-05 15:51:27 ----D---- C:\Users\ION\AppData\Roaming\vlc
2018-11-24 18:25:21 ----D---- C:\Program Files\FastShare
2018-11-24 18:23:30 ----D---- C:\Program Files\Nero
2018-11-24 18:22:06 ----D---- C:\Program Files\Common Files\Nero
2018-11-24 18:21:58 ----D---- C:\ProgramData\Nero
2018-11-24 17:58:36 ----D---- C:\Users\ION\AppData\Roaming\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avgbidsh;avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys [2018-11-19 165944]
R0 avgblog;avgblog; C:\Windows\system32\drivers\avgblogx.sys [2018-11-19 284304]
R0 avgbuniv;avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys [2018-11-19 57952]
R0 avgRvrt;avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [2018-11-19 73040]
R0 avgVmm;avgVmm; C:\Windows\system32\drivers\avgVmm.sys [2018-11-19 310248]
R0 nvamacpi;NVIDIA Away Mode System; C:\Windows\system32\DRIVERS\NVAMACPI.sys [2009-11-19 24608]
R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2009-11-19 213024]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-25 466008]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 avgArPot;avgArPot; C:\Windows\system32\drivers\avgArPot.sys [2018-11-19 167728]
R1 avgbidsdriver;avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys [2018-11-19 189344]
R1 avgKbd;avgKbd; C:\Windows\system32\drivers\avgKbd.sys [2018-11-19 40936]
R1 avgRdr;avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [2018-11-19 101232]
R1 avgSnx;avgSnx; C:\Windows\system32\drivers\avgSnx.sys [2018-11-19 784800]
R1 avgSP;avgSP; C:\Windows\system32\drivers\avgSP.sys [2018-11-19 398232]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2018-06-29 389632]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 avgMonFlt;avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [2018-11-19 135440]
R2 avgStm;avgStm; C:\Windows\system32\drivers\avgStm.sys [2018-11-19 157184]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-11-16 2364960]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2016-03-10 77520]
R3 ITECIRfilter;ITECIR Filter Driver; C:\Windows\system32\DRIVERS\ITECIRfilter.sys [2016-03-10 34000]
R3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2015-02-19 162592]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-11-19 17920]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-04 166912]
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2011-12-15 26624]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2018-02-10 52928]
S3 avgHwid;avgHwid; C:\Windows\system32\drivers\avgHwid.sys [2018-11-19 42984]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 GPCIDrv;GPCIDrv; \??\C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv.sys []
S3 KYEKBPRO;IMPERATOR PRO Gaming Keyboard; C:\Windows\System32\Drivers\KYEKBPRO.sys [2011-10-14 18944]
S3 libusb0;libusb-win32 - Kernel Driver 02/23/2013 1.2.6.0; C:\Windows\system32\DRIVERS\libusb0.sys [2014-06-17 42592]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RTL8187Se;Síťový adaptér Realtek RTL8187SE Wireless 802.11b/g 54Mbps PCIE; C:\Windows\system32\DRIVERS\RTL8187Se.sys [2009-07-01 372224]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2018-02-10 51904]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2018-02-10 52928]
S3 ViaC7;Ovladač procesoru VIA C7; C:\Windows\system32\drivers\viac7.sys [2018-11-11 53248]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S3 WinUsb;Sony Ericsson sa0102 ADB Interface; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-13 83984]
R2 AVG Antivirus;AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [2018-11-19 324048]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc.exe [2012-05-17 126128]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\System32\ezSharedSvcHost.exe [2015-10-24 505360]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2009-08-10 387616]
R2 FreeAgentGoFlex Service;Seagate Drive Settings Service; C:\Program Files\Seagate\DriveSettings\Sync\SeagateDriveSettingsService.exe [2011-02-10 91432]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2009-08-10 178720]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-04 670536]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-10-11 66872]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R3 avgbIDSAgent;avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [2018-11-19 6848016]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2018-12-11 153168]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files\Google\Chrome\Application\71.0.3578.80\elevation_service.exe [2018-11-30 375776]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2018-12-11 153168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-10-12 104960]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-06-14 161472]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Smazáno. Nastala nějaká změna?

[kyzi01]

Už to frčí,už to jede. Velice vám děkuji.Velká poklona a klobouk dolů.

PS: Já bez chromu nemůžu existovat. Velké díky

[Rudy]

Já zase bez FF. Nemáte zač!