Ahoj, prosim o kontrolu logu, behem par dni se PC zacal chovat dost divne, nejaky balast od Seznam nesmyslu atd jsem dal pryc, ale jeste tam toho bude dost.
Diky predem.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Gambac at 2015-09-16 19:21:21
Microsoft Windows 10 Home
System drive C: has 160 GB (17%) free of 953 GB
Total RAM: 8120 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:21:30, on 16. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
E:\setup.bin
C:\Users\Gambac\AppData\Local\Temp\is-MMEKL.tmp\setup.tmp
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Gambac\AppData\Local\Temp\MediaPlayer__15159_il72.exe
C:\Users\Gambac\AppData\Local\Temp\release.exe
C:\Users\Gambac\AppData\Local\Temp\RarSFX0\Installer.exe
C:\Program Files\trend micro\Gambac.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://localoem.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localoem.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\RunOnce: [SeznamInstall-uninstall:b760737f6ebf9b3c28e4fbda7a5f9448] "C:\Users\Gambac\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe" -c "C:\Users\Gambac\AppData\Roaming\Seznam.cz"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Application Hosting service (Application Hosting) - Unknown owner - C:\ProgramData\Application Hosting\Application Hosting.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Razer Overlay Subsystem Emergency Service (RzOvlMon) - Razer, Inc. - C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10269 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe"
dashost.exe {454a42d9-bfaf-420d-a25e5ad046599226}
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
gfebackendlauncher
C:\WINDOWS\system32\svchost.exe -k SDRSVC
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:864
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe"
E:\setup.bin
"C:\Users\Gambac\AppData\Local\Temp\is-MMEKL.tmp\setup.tmp" /SL5="$1A05E0,54272,0,E:\setup.bin"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.istartsurf.com/?type=sc&ts=1 ... 9578995789
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="26596.0.1615453370\385710224" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc6 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="26596.1.1964936704\1658800203" --font-cache-shared-handle=2108 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="26596.2.1424441167\1906704556" --font-cache-shared-handle=2400 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="26596.3.1893111753\1008146842" --font-cache-shared-handle=2608 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="26596.4.1099187104\544258705" --font-cache-shared-handle=2468 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="26596.7.1610509220\1544014508" --font-cache-shared-handle=6616 /prefetch:673131151
"C:\Users\Gambac\Desktop\FRST64.exe"
C:\Users\Gambac\AppData\Local\Temp\MediaPlayer__15159_il72.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Gambac\AppData\Local\Temp\release.exe" {"packer":{"DistributerName":"APSnapdoAMRev","ChannelId":"3"},"Agent":{"SetAll":"true"}}
"C:\Users\Gambac\AppData\Local\Temp\RarSFX0\Installer.exe" "C:\Users\Gambac\AppData\Local\Temp\release.exe" {"packer":{"DistributerName":"APSnapdoAMRev","ChannelId":"3"},"Agent":{"SetAll":"true"}}
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe177_ Global\UsGthrCtrlFltPipeMssGthrPipe177 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 632 636 644 8192 640
"C:\Users\Gambac\Desktop\RSITx64.exe"
"C:\ProgramData\Application Hosting\Application Hosting.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-6.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-6.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-7.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-7.exe /rawdata=plXixwlAnzmlmRFBj+nBcBIdQvQT1kmn5iGE5kaBci3RDpDnrbsRTHlwANx1nzNvhjO8xyKELjqYO8EJTIBLgFky1JiYM9qiPqoLVvwNFZuABDiGaUXLMOgtu1CfSmkYJscO2BzgzSuroRYZdIEE/DzUExpETxSCjda6qmL6a7qZ3AyjkN3iRPfZUr13KrNutOejp35SIrmltVcMQvmV/ZNYcwkF68hOBHeiKSFDHWMVHjLUoG0qHb3kvlTJM34ifPBHXGwLCevlzJRSe9kvLBIYeOMmwVbD/Tp7Hh2cwsSfJWvekZ57PVPTHIHuDbs5Uuwxj2+fmGtIG0kcSQTv7zOQTHc/0mPnFufTUY4k4eM+vdA4ywPgmi5khHCki8v+RFKUfzBdtTQsYgt8gnhDLFIDD2POLoxhRsEfXrKABl/I1oMolLCD1eO5sX5ibXQTnBYRtM+Frzu0fMkV85Vfnkv8VMyjvL8LS6NZ/xLxA5DMrCBifBA8J0jIH+CeoRb9buqEXmGw60mbye6o7cv7KEaHk+uSclb56FZPa6HIQ+WYBT1fQuK6XGoVzDIOaX4J1N1BehRNY6SuwC2WMCPovXhqvuysy60LWzY/D1Dgbrvib5DUoESsWQoLUuGl+tNpRwvEHGEdgzGRs6RzJyDtKddEWLL3iIk2idAwqBGAqeQ4SZ9EFq+SMmF9fDW1fyehZ1tnI944QOMg+zYZxsiEjtrRtKgd2g/n6jm9Zb2SzfWHUuDKd0BbJS7dDs7ywn3njJkcJs/kKvokRS7NLH0nch9r89XAznjpMctBqwWLV4XyT1/gvRwnkec1Wo3dXRU41JMnt2Qt0+1lV4JYX+VtzJUjpMWIXqE+QTZqtGf+e83KPe3ZONvMYkdXblLZAg7YoYLYUZKSVRd09pCtsS/91C5UrLpBuvWVmWDckbCtA411CFa82pBEdF67QJeO511n2ZRgfnSKLp1DVoypUkJ/KnO7LdW+ba6KpSXYx8rK0kPb3nC8vTWApt4lZydR3RW8oFqHZf8DnNElKB3eFo/2VQqMviHMGUOvqQXVEuwRu8zt3UIEq/jhsmaF/PCVgfJFhzd0osR5KqIxR/5+gmuHK2TCk+XfLayLgWnaewX6lJLgI2kTNZxZTOR4iW74jU5z7UwmqkG5brsTZsKu/0zMcewmkM1IKmG/6yuxVscJScw18m0uuONhZcsDxga/Z9fc06hBzPmqHJBm20O8MdKUeV2dAaAPFemEJjV8lCKzlNKeDT7PfxzQrSEMw1svHGh2MqcujWSEvsfaqOBbx2XRn0gvzMtwpE/VMlFh3YHpzz5UzRKwFLGFaBu6pIL/zzFbMowmjT+3KG6XvLkvxd3bzw==
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-10_user.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-10.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-13.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-13.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-14.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-14.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-3.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-3.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5_user.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5.exe /rawdata=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
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-6.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-6.exe /rawdata=WQfRnHXwHrQ70xQMu2EXbZgiq8P4VB4dDfwR3AedaNv8/50f3dI4sDb3/p3HVevwHJ1j/dhBVAAm/27rBZ7maeHbfb4B0W07UD5aKfucHP2O6GroCWpTy2hIxjmbyN2DXbcfWzjlq63NX8pTq5aY+7GCImp31vn5oYYlaETyqoIOMD8m3J1XXCZmfGuTSS6Old9hL8pdI1B2kowpqwBxUiRGXMch/mSoJIdDgpIzoSsXxrffph/GA7K6XuCD5rup89nG++ZQIuTJ42FoxPdQiih97ENfgmTtK2cBBa6/Ox6IEMj5fq5Rm0qrmi6P30v3J1/ARIVz7riR30wk40TuvJ9IxPcXzVBqVvojRxxHWIPok6O21ZKxlvBQujUbBac/vGgys+IY16UtQ//PKCLl6ItFM/j7SUkUNkvj03uigaTXQ+ytJK9E614MPNM/GvZqhw2b6oXZPDYkKmS8N3I6yKpT2SS+1R7MTv2J/gADB9gnuWhk/aJT38rC+jWW4loohEdPEQp/MD4rXTu0jpCcVLsf80+vTRC50bLcNgxJo4RKHCUUx5MBVE23lka0kk7WcOsDwZkvPJy384i1C8H/KQKiBZFuzGop3/4urnlrelGAxUh8uju4TyMPxzeDw1p3w7W69YlwVKgsnJi4pfLwpkANqLOPNpPbUqqBf5LMK00fU2mabM0dsMstAURnTwPF+wcNheaoSpX2b/cKfZ9bhUdJ6gWX94R33HzxaQOjSBekH+Re/qTaZgUCXc6Gz6ProqNwOgGCiGCrfQgUuo6Lq40Nn7haBtHa03ygxo9Gtf7/XMvon23KwNtIwQsIttK8HZ2O6u/CTsopSMqTdvM2QnnpPVC7GH/OhT4SE5jsD99jByQEO3Sg2bfWYCiLYye7lEhFSec89OCSAkLk929droSAJd5EABMIInzBTkEsLWynuAI1+t1IH79ik5DfB5cLvXg9aGimaxNoEwcvJcEsGC2ZrIG30ZkeZ1adoSk/+87lvNn5MX11P7Dg1+40/fRoM0gPftFIJM6MilKKmifMFo7Rjf1sKGHweDU5//3GXihmNnMXSuHXLAVkLBi1a1THLxwH4f727Q2vq07FXrSKEcy3QswtQ9QbNProQVax2w7QXrraWbxBdrOqAsBgRLZmOUgiAgLyp9fN3LD0kjYaGod++86/99zuR2BdhnvDmkYZFtSug4ume3Sh8qfFKdd8NRBQXyvhmVI/jIwIVzduhXJFX+2zO7NlJv53OejIgDQDYArio14aYj3aAntktiPYTLdqm6mrhfPAOxStfmF9qgQrRSlnxdto3QWehNAJY3z3l8pD1dIl7aePzxsrEp5ND9ZDOL1xdklIxxN5TQ1aNX2uz+S2IqEfaBxSkJP4MJxl0wyiRrg3Y8jUV18cyTfi6WE8ADYD9bWzCS3mEGGUtA55qTcpiN8lHts3FDKdlIwtxQ4Hr/CJjMgxGOFt5wddUHKHpyxIi0B5KgHcWZHOBuXria0NQID6Vvfva8dniudCIyDtG9IN0M7B8UMtyGE0Clc/DQMjWU0LDuPbxaAVYm6A6Z3bYXuWiUhl8AVe65ENomH7afgZfwhZN7XbJ3oLdFdPTvY86a0md6mFRXUUJ9k9jme5yhnxeChAwQKXlj2Dyau6I+DmZ4xpW+21tv6bBPPraU0K+/6PwFUd1pvqK2O4ulJM31vyO/Z4pt8TlYIjuq6EwGw/6Pq3AQyQ5AHVHdX9kCWrA6UGLMFcYxwj93k9ob785iDwvC06klBJAmuE8BREWd88OOihQzux5ySXr+B8f2Hr4ekyFQkuFUnl8I+JUlo6EMlkWh6V3iop8FzK/h7bXu4n6IChoBVycF2n8FZiUoFUKuCzgzgyuYFrlhr+umlnBQutfTAUuXTFgIDzhCfeYPCBFZJ5iqLPHXjg+nYCpAjSTQ6rh5PPsKFqqFmJbKVrlzBsWQ6x2kBrEeWJv6sjYVYkEaZ5SbgjP1Lw3U79w1rP/kUX/QAqpqsD1p+f2c+sxoOYisrF+Y4yitVsrU7aEkoGykYgfQ+IYaFPVb8wXw7AgUbbFk+GoHbL5Avvq4U6u99A8w1HqPdnFQRHXRGN/mAn7Z4jlsyqaREAG50TsMD0Yw5CLr4A/P8KTWT3nSsUx69Tj7PlVzDcoMD2IDnReHo0RqyxCsNrzuMwVbSc8BIyZSFWpWI/X4ZdRCSebJPHoqv4NSrnrP61Jw6MwHTHkbjdcLMLBlqcYQqpmI4/hwgJFbIiv79RkiyiHECVvvW6RF/wWtThS0++pnVxdn9ARc2loYI2tWQ6e0tjiYQNkg9KSK19seqe9Hkmgiyno93qfOhMhMIPRYp1Xc3CW10FdhlePfvMP7j067sYo16vC9/GCGGujDwq8e3z6JCQNx+U9VCA7HSpawgV75hqPl2yF83NeZLBWPGLRxrNNLHzfXxMlafeC3LdiX5peWeLPkSI3AW+Y6CXlJBCOHw0WNdrjxJZdJb5ZaYXqYQhFNCFFI5NzYxOhze23XbZzrIeS7xk5F3hIOtaUWs6I+GiS5WlbyDTZUB85zBl0KbY
C:\WINDOWS\tasks\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-7.job - C:\Program Files (x86)\Cinem Plus 2.4cV16.09\5e227d67-8e29-45fb-9988-4dcc2d22a7dd-7.exe /rawdata=B16v6p6VddLdGelQfsO9+hMZ8x6QfniwZSLrfWZESYiVgf982Nunm70odnxQILTjJ2D/To5hfXeWcHsLblsUKiSapfoVm/7e8tgVfVOeM52eRk7z1OAyYOtzCIkJUyFFEk9RJKSQBF8u6D3q+9aONP0QrFn4a9dGKflM8yQ8wb7DeDm6fhpiBU3K4VdbJijeYUhfl1H6C1/9ZVh05UPaKFYhePHvSjftsIEBf7awGY47QACcb9KPpOyFIRT1WXafMFsOnwPkIc+RK3un71MiEpf7wc07KBTQsMYOcAat6JJ5ppPyt75zdwaYadfbNObHcCsWbDnJUYvHr4tWYnH3CajfdFGNYixhb09n7I/cXm5UpxZBxoWIkdj7LrObwEiyTKXU+y+2nTCaoF6EUH9wYXQ+c7dignKwG38wIlOn1jeKVVj+vbw8uOO4sUIhU5rYAkTIkR/LaVfYCAeD4LO6g6qxcFqj+9eHuxrnsf1EUekl4nSfvv+G2rwuuXDfojOMEWhqoEAR5pOXx29dZmJzFyESCN13fPv4pnTBE2KavObqYNRo5EthGKre47lkI86JfguQkTz3ruEYKCYCoRp+JgEBKRrxyLi5rNWwy7xYkZU9IvK9mbg25KlTmqqlyRuTjUUAHiO+KkAJAHcaCBUQa4Fbotkh3ymSV6T0yK8xOgJ/Z73hsO2C09Ue8K082td/tVt/bdxFx2UWEyjHOMtZ672TtXGQGryA9pew+sqoVr7zpjXZXlGAB/NmwmxO59sPPDk7HfD097aBRQlJpcjyiytOaT1eVGjhrv4YDjFQmfcsDVGC/0//3KrJZB9+6myWtwCXFJfqAFl1BQ/4rsdFpoba1+VFif/dY4i5X01DiM8qLScyylFCW1GlrhJoukbu/4/AmGO+H5WLc/IVNOylzPpEibLfVZTr+PxVwVJGN6Vl/pxSBfoK3USuRaKvNwBrnKQHnoV1MOrH34NYNxCCeAaGaJYsYHpoI/fWqSuZbMCtuwycR7/4RYBBSnWJ2c+NH+hKfQYjk0lTR+xxrGeNhVycQx0qYhpIKlvkhKnf21SxGc0OnCkdX0KZU5c/IN6rpekiBE3UhaHVHe/E8gLcJOWrv8GnsswbVFxS8HStkzbYI9Qcz8stB7plk37SEzWecjjgUiBTkeRQbnH1A/x+JUl8gGCzhTW7yVUyBzlKu2+NNUFkUdim6Z7GwqubJ3Tut9tPtmg6bkFn7Mb5XskFjjxzpYbrkIntXUkhkEWyX8XCpVDMqmpPf89C72PfzHfmkqrXmHia0/YePEuuamKMejk7KJ60z88QwTTP6Gnlmwvxxik+6KgyRJNsSHBz2tZg5R2hINKGCmpEKzG5gMvg609R3xYuUbL39xeUes6XcXTDbhNH77lH9cAvr4NwDNhenE52spRPXGKyU9RIvoy7Qa78FR/PHP/8NjOTuDfHQd2KZTaVNdZj5EkPE/oS4Q9HH6RTAx/tgSwo7QuSIh3/PZYhtgyxKoeAJniEdav94N+QNC9shCVKZ334jYXKy1O8f0k7J5en8RTmYR+jgsfowzQEJ9Zegj+BaqF8kiPqHnCU78e+eELX+K8I9WFXpmSACfuISf/7wWHoUcWSjpLUfgvoAgDxYVy+yxMLtNnpvdCDln77b7qRWqJTU3ZKb2S/xLt2ghsWvpssyxeBIWnwcKpwsiaSVb+o6t6FhNei0okmCf5krjO8R3BiUsG0IaowXlR8CeRcLjrIZpj+Umpfoh3wmc5pL45ymywaCRb2PYpZoRxwQmAuhBi8VISS3GMhYh+3Gpa12L1C0tTiTPEjt1WgtLznpWPO+0RvDM3wxaCHodk7eUvy7jmj35xifTXJF5dNsbYiFjhKHtSr1UR/sXoPd2fr5fvFr04OUqM9VuTeEifJLPXr18R22z1HuiCSW7NdoZuw/jGfg+UYGdYUihJrtGU0dgOokBxDvmppqv9tp0G6bSvnMtbYKLBD3zslZ3swB6vrPHV+KRv+uidtn4vO+4JmiaNtEbrpKsPmphFNIktySRdolP9FDZypxuExBnjNTWuBbHfZr60cY3nTDt1WQLZVRSP41DPI0d67ZDSaDrvK8jdZrMomJsvQ+8lAG3lxg3QELexHKHEcfofkSeSezEiwKXChGXdF6SPhD/2m1GKxJTjtXWMaAflj49xXxhuwnA8BGv+ssTXmoFaM8GCnUm/iyr6IJw5bdKC2dwzHXrAJWxMovIjCqpIMTW4zOH6IolgGcSfiXXdmgA61+mWKubtZqg2dIIURd+xJQWfaguqShTR4OelpzUNtrXHufRNrtWo+Jdfpc/8ik8fB5/O1lrBKVb/yc0wzfkTLPtScnS1vSxP86IIL6Ttyks53PTS0IRC7AymxBJBrLAx4dw==
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /c
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-08 1570672]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-07-29 402632]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SeznamInstall-uninstall:b760737f6ebf9b3c28e4fbda7a5f9448"=C:\Users\Gambac\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe [2015-09-16 534528]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-06-08 5123216]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2014-11-03 585536]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-25 6111824]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-07-05 439296]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-16 19:21:25 ----D---- C:\ProgramData\Application Hosting
2015-09-16 19:21:23 ----D---- C:\Program Files\trend micro
2015-09-16 19:21:21 ----D---- C:\rsit
2015-09-16 19:15:58 ----D---- C:\FRST
2015-09-16 19:08:25 ----D---- C:\Program Files (x86)\942e2bb2-afda-4c31-a8fd-a1cf18795505
2015-09-16 19:08:14 ----D---- C:\Users\Gambac\AppData\Roaming\Opera Software
2015-09-16 19:08:02 ----D---- C:\Users\Gambac\AppData\Roaming\istartsurf
2015-09-16 19:08:01 ----D---- C:\Program Files (x86)\globalUpdate
2015-09-16 19:07:53 ----D---- C:\Program Files (x86)\Cinem Plus 2.4cV16.09
2015-09-16 19:07:41 ----D---- C:\Program Files (x86)\Opera
2015-09-16 19:07:20 ----A---- C:\WINDOWS\chromebrowser.exe
2015-09-14 14:30:32 ----D---- C:\Program Files (x86)\AGEIA Technologies
2015-09-14 07:25:04 ----D---- C:\Users\Gambac\AppData\Roaming\runic games
2015-09-14 07:19:24 ----D---- C:\118d4b17a0ac421e89f5
2015-09-14 07:16:59 ----D---- C:\Users\Gambac\AppData\Roaming\InstallShield
2015-09-12 07:28:37 ----D---- C:\d97ce8a0f626ad1374f9
2015-09-10 09:34:26 ----D---- C:\Users\Gambac\AppData\Roaming\HearthstoneDeckTracker
2015-09-09 19:50:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-09-09 19:50:11 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-09-09 19:50:10 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-09-09 19:50:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-29 15:24:29 ----D---- C:\Users\Gambac\AppData\Roaming\uplay
2015-08-29 09:04:14 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-29 09:04:09 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-24 19:20:24 ----D---- C:\Users\Gambac\AppData\Roaming\Skype
2015-08-24 19:20:12 ----D---- C:\ProgramData\Skype
2015-08-19 09:34:39 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 09:34:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 09:34:26 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 09:34:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:24 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 09:34:23 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 09:34:18 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 09:34:13 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-17 20:28:39 ----D---- C:\WINDOWS\SYSWOW64\directx
======List of files/folders modified in the last 1 month======
2015-09-16 19:21:25 ----HD---- C:\ProgramData
2015-09-16 19:21:23 ----RD---- C:\Program Files
2015-09-16 19:20:55 ----D---- C:\WINDOWS\Prefetch
2015-09-16 19:20:20 ----D---- C:\Users\Gambac\AppData\Roaming\Seznam.cz
2015-09-16 19:19:24 ----RD---- C:\Program Files (x86)
2015-09-16 19:18:34 ----D---- C:\WINDOWS\Tasks
2015-09-16 19:16:03 ----D---- C:\Windows
2015-09-16 19:15:30 ----SHD---- C:\WINDOWS\Installer
2015-09-16 19:15:30 ----D---- C:\WINDOWS\Temp
2015-09-16 19:09:12 ----D---- C:\WINDOWS\system32\Tasks
2015-09-16 19:08:30 ----D---- C:\Program Files (x86)\Common Files
2015-09-16 19:08:10 ----D---- C:\Hry
2015-09-16 19:06:39 ----D---- C:\Users\Gambac\AppData\Roaming\uTorrent
2015-09-16 19:05:53 ----D---- C:\WINDOWS\System32
2015-09-16 18:38:00 ----D---- C:\WINDOWS\system32\sru
2015-09-16 17:39:09 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-16 14:36:30 ----D---- C:\WINDOWS\INF
2015-09-16 14:36:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-16 14:31:30 ----D---- C:\Users\Gambac\AppData\Roaming\vlc
2015-09-16 13:41:35 ----SHD---- C:\System Volume Information
2015-09-16 08:33:18 ----D---- C:\WINDOWS\AppReadiness
2015-09-16 08:33:17 ----HD---- C:\Program Files\WindowsApps
2015-09-15 14:09:16 ----RSD---- C:\WINDOWS\assembly
2015-09-15 08:32:02 ----HD---- C:\WINDOWS\msdownld.tmp
2015-09-15 08:31:47 ----D---- C:\Temp
2015-09-14 21:24:28 ----D---- C:\WINDOWS\system32\config
2015-09-14 10:26:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-14 10:23:47 ----D---- C:\WINDOWS\LiveKernelReports
2015-09-14 07:19:55 ----D---- C:\WINDOWS\WinSxS
2015-09-13 21:32:52 ----D---- C:\WINDOWS\CbsTemp
2015-09-13 21:05:17 ----D---- C:\WINDOWS\SysWOW64
2015-09-13 21:05:17 ----D---- C:\WINDOWS\system32\appraiser
2015-09-13 21:05:17 ----D---- C:\WINDOWS\AppPatch
2015-09-13 21:05:17 ----D---- C:\Program Files\Windows Journal
2015-09-13 21:05:16 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-13 21:03:46 ----D---- C:\WINDOWS\system32\NDF
2015-09-12 07:28:39 ----D---- C:\WINDOWS\system32\MRT
2015-09-09 19:45:52 ----D---- C:\WINDOWS\system32\catroot2
2015-09-07 14:22:09 ----D---- C:\Program Files (x86)\Steam
2015-09-05 17:01:46 ----D---- C:\WINDOWS\rescache
2015-09-04 22:41:39 ----D---- C:\WINDOWS\system32\drivers
2015-09-04 22:40:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\oobe
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-29 11:47:12 ----D---- C:\Program Files (x86)\Battle.net
2015-08-26 18:37:02 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-26 09:17:44 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-25 09:51:12 ----D---- C:\Users\Gambac\AppData\Roaming\NVIDIA
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-30 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-30 274808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-30 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-08-13 1048344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-30 447944]
R1 dtsoftbus01;@oem12.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-03-14 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-30 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-30 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-30 150672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2014-11-01 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2014-10-23 129600]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 BazisVirtualCDBus;@oem138.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-06-03 171864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 ISCT;@oem42.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-02-13 46568]
R3 MEIx64;@oem87.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624]
R3 NVHDA;@oem136.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-04-03 195912]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-29 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem137.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 RTL8168;@oem24.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2012-12-27 760032]
R3 rzendpt;@oem11.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [2014-09-05 39592]
R3 rzmpos;@oem90.inf,%rzmpos.SvcDesc%;rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [2014-09-05 35496]
R3 rzudd;@oem112.inf,%Razer.SvcDesc%;Razer Keyboard Driver; C:\WINDOWS\System32\drivers\rzudd.sys [2014-09-05 160424]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 RzFilter;RzFilter; \??\C:\Windows\system32\drivers\RzFilter.sys [2014-04-18 74432]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x64.sys [2012-04-25 96368]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-29 934752]
S3 RzDxgk;RzDxgk; \??\C:\Windows\system32\drivers\RzDxgk.sys [2014-04-18 129472]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-29 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-07-29 67072]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Application Hosting;Application Hosting service; C:\ProgramData\Application Hosting\Application Hosting.exe [2015-09-10 49152]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-30 146600]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-08 1152656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-26 937288]
R2 OneSyncSvc_Session6;Hostitel synchronizace_Session6; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2014-11-01 183488]
R2 RzOvlMon;Razer Overlay Subsystem Emergency Service; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [2014-04-18 32960]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-16 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-16 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-07 1997168]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session6;Data kontaktů_Session6; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-29 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session6;Úložiště uživatelských dat_Session6; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session6;Přístup k uživatelským datům_Session6; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Kontrola logu - celkove zasekany system
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - celkove zasekany system
Jeste doplnim, ze jako domovska stranka v Chromu se nastavil tendle nesmysl - http://www.istartsurf.com/ , ktery je i mezi Program files, ale nejde odinstalovat 
To se mne uz fakt nestalo pekne dlouho -_-
To se mne uz fakt nestalo pekne dlouho -_--
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
To je "únos" prohlžeče. Zkusíme to odstranit. Pokračovat však mohu až po kontrole logu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - celkove zasekany system
# AdwCleaner v5.007 - Logfile created 16/09/2015 at 19:35:58
# Updated 08/09/2015 by Xplode
# Database : 2015-09-15.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Gambac - GAMBO
# Running from : C:\Users\Gambac\Desktop\adwcleaner_5.007.exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem
[-] Service Deleted : Application Hosting
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[-] Folder Deleted : C:\Program Files (x86)\Cinem Plus 2.4cV16.09
[-] Folder Deleted : C:\ProgramData\Application Hosting
[-] Folder Deleted : C:\Users\Gambac\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\Gambac\AppData\Roaming\istartsurf
***** [ Files ] *****
***** [ Shortcuts ] *****
[-] Shortcut Disinfected : C:\Users\Public\Desktop\Call of Duty - Ghosts.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thief\Launcher settings.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thief\Thief.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty - Ghosts\Call of Duty - Ghosts.lnk
[-] Shortcut Disinfected : C:\Users\Gambac\Desktop\MAFIA II .lnk
[-] Shortcut Disinfected : C:\Users\Gambac\Desktop\Thief.lnk
[-] Shortcut Disinfected : C:\Users\Gambac\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Gambac\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\48499db33039e897\Google Chrome.lnk
***** [ Scheduled tasks ] *****
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-7
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-10_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-13
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-14
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-3
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-7
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-7
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-10_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-13
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-14
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-3
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-7
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [SensePlus-bg.exe]
[-] Key Deleted : HKLM\SOFTWARE\4ffd5ce6-0815-498e-8fb1-47e6af5d8a02
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKCU\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\Cinem Plus 2.4cV16.09
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Key Not Deleted : [x64] HKCU\Software\YorkNewCin
[!] Key Not Deleted : [x64] HKCU\Software\HighDefAction
[!] Key Not Deleted : [x64] HKCU\Software\ArenaHD
[!] Key Not Deleted : [x64] HKCU\Software\OB
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-1363250933-3302703128-408898543-1004\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-21-1363250933-3302703128-408898543-1004\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []
***** [ Web browsers ] *****
*************************
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [11015 bytes] ##########
# Updated 08/09/2015 by Xplode
# Database : 2015-09-15.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Gambac - GAMBO
# Running from : C:\Users\Gambac\Desktop\adwcleaner_5.007.exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem
[-] Service Deleted : Application Hosting
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[-] Folder Deleted : C:\Program Files (x86)\Cinem Plus 2.4cV16.09
[-] Folder Deleted : C:\ProgramData\Application Hosting
[-] Folder Deleted : C:\Users\Gambac\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\Gambac\AppData\Roaming\istartsurf
***** [ Files ] *****
***** [ Shortcuts ] *****
[-] Shortcut Disinfected : C:\Users\Public\Desktop\Call of Duty - Ghosts.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thief\Launcher settings.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thief\Thief.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty - Ghosts\Call of Duty - Ghosts.lnk
[-] Shortcut Disinfected : C:\Users\Gambac\Desktop\MAFIA II .lnk
[-] Shortcut Disinfected : C:\Users\Gambac\Desktop\Thief.lnk
[-] Shortcut Disinfected : C:\Users\Gambac\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Gambac\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\48499db33039e897\Google Chrome.lnk
***** [ Scheduled tasks ] *****
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-7
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-10_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-13
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-14
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-3
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-7
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-1-7
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-10_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-13
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-14
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-3
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-5_user
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-6
[-] Task Deleted : 5e227d67-8e29-45fb-9988-4dcc2d22a7dd-7
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [SensePlus-bg.exe]
[-] Key Deleted : HKLM\SOFTWARE\4ffd5ce6-0815-498e-8fb1-47e6af5d8a02
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKCU\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\Cinem Plus 2.4cV16.09
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Key Not Deleted : [x64] HKCU\Software\YorkNewCin
[!] Key Not Deleted : [x64] HKCU\Software\HighDefAction
[!] Key Not Deleted : [x64] HKCU\Software\ArenaHD
[!] Key Not Deleted : [x64] HKCU\Software\OB
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-1363250933-3302703128-408898543-1004\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-21-1363250933-3302703128-408898543-1004\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []
***** [ Web browsers ] *****
*************************
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [11015 bytes] ##########
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - celkove zasekany system
Logfile of random's system information tool 1.10 (written by random/random)
Run by Gambac at 2015-09-16 20:51:46
Microsoft Windows 10 Home
System drive C: has 160 GB (17%) free of 953 GB
Total RAM: 8120 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:51:48, on 16. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\ProgramData\Battle.net\Agent\Agent.4424\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.6119\Battle.net.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Hry\Hearthstone\Hearthstone.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Gambac.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://localoem.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localoem.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Razer Overlay Subsystem Emergency Service (RzOvlMon) - Razer, Inc. - C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9568 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
dashost.exe {34c5181f-f68b-4755-b83f6d6d8586e632}
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
C:\Windows\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
sihost.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\ProgramData\Battle.net\Agent\Agent.4424\Agent.exe" --locale=enUS --session=3280777165396626680
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Battle.net\Battle.net.6119\Battle.net.exe" "--gamepath=C:\Hry\World of Warcraft" --game=wow_enus
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6764.0.2002580595\1403277555" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc6 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.2.629365955\966842173" --font-cache-shared-handle=2540 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.3.1622753339\360164696" --font-cache-shared-handle=2528 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.4.1026933622\1191134825" --font-cache-shared-handle=2720 /prefetch:673131151
"C:\Hry\Hearthstone\Hearthstone.exe" -launch -uid hs_beta
taskeng.exe {12D7296D-1ED4-478B-9C28-7E6599769CF2}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.18.1312281905\527342451" --font-cache-shared-handle=6904 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6764.19.103519984\712145398" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.20.2100428423\274622386" --font-cache-shared-handle=4160 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.21.231555121\452880557" --font-cache-shared-handle=4176 /prefetch:673131151
"C:\Users\Gambac\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-08 1570672]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-07-29 402632]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-06-08 5123216]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2014-11-03 585536]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-25 6111824]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-07-05 439296]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-16 19:30:18 ----D---- C:\AdwCleaner
2015-09-16 19:21:23 ----D---- C:\Program Files\trend micro
2015-09-16 19:21:21 ----D---- C:\rsit
2015-09-16 19:15:58 ----D---- C:\FRST
2015-09-16 19:08:25 ----D---- C:\Program Files (x86)\942e2bb2-afda-4c31-a8fd-a1cf18795505
2015-09-16 19:08:14 ----D---- C:\Users\Gambac\AppData\Roaming\Opera Software
2015-09-16 19:07:41 ----D---- C:\Program Files (x86)\Opera
2015-09-16 19:07:20 ----A---- C:\WINDOWS\chromebrowser.exe
2015-09-14 14:30:32 ----D---- C:\Program Files (x86)\AGEIA Technologies
2015-09-14 07:25:04 ----D---- C:\Users\Gambac\AppData\Roaming\runic games
2015-09-14 07:16:59 ----D---- C:\Users\Gambac\AppData\Roaming\InstallShield
2015-09-12 07:28:37 ----D---- C:\d97ce8a0f626ad1374f9
2015-09-10 09:34:26 ----D---- C:\Users\Gambac\AppData\Roaming\HearthstoneDeckTracker
2015-09-09 19:50:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-09-09 19:50:11 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-09-09 19:50:10 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-09-09 19:50:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-29 15:24:29 ----D---- C:\Users\Gambac\AppData\Roaming\uplay
2015-08-29 09:04:14 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-29 09:04:09 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-24 19:20:24 ----D---- C:\Users\Gambac\AppData\Roaming\Skype
2015-08-24 19:20:12 ----D---- C:\ProgramData\Skype
2015-08-19 09:34:39 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 09:34:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 09:34:26 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 09:34:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:24 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 09:34:23 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 09:34:18 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 09:34:13 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-17 20:28:39 ----D---- C:\WINDOWS\SYSWOW64\directx
======List of files/folders modified in the last 1 month======
2015-09-16 20:38:00 ----D---- C:\WINDOWS\system32\sru
2015-09-16 19:54:45 ----D---- C:\WINDOWS\Prefetch
2015-09-16 19:54:40 ----D---- C:\Program Files (x86)\Battle.net
2015-09-16 19:38:02 ----D---- C:\WINDOWS\AppReadiness
2015-09-16 19:38:01 ----D---- C:\WINDOWS\Temp
2015-09-16 19:37:20 ----D---- C:\WINDOWS\System32
2015-09-16 19:36:00 ----D---- C:\WINDOWS\Tasks
2015-09-16 19:36:00 ----D---- C:\WINDOWS\system32\Tasks
2015-09-16 19:35:59 ----RD---- C:\Program Files (x86)
2015-09-16 19:35:59 ----HD---- C:\ProgramData
2015-09-16 19:25:42 ----HD---- C:\Program Files\WindowsApps
2015-09-16 19:21:23 ----RD---- C:\Program Files
2015-09-16 19:20:20 ----D---- C:\Users\Gambac\AppData\Roaming\Seznam.cz
2015-09-16 19:16:03 ----D---- C:\Windows
2015-09-16 19:15:30 ----SHD---- C:\WINDOWS\Installer
2015-09-16 19:08:30 ----D---- C:\Program Files (x86)\Common Files
2015-09-16 19:08:10 ----D---- C:\Hry
2015-09-16 19:06:39 ----D---- C:\Users\Gambac\AppData\Roaming\uTorrent
2015-09-16 17:39:09 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-16 17:38:49 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-16 14:36:30 ----D---- C:\WINDOWS\INF
2015-09-16 14:36:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-16 14:31:30 ----D---- C:\Users\Gambac\AppData\Roaming\vlc
2015-09-16 13:41:35 ----SHD---- C:\System Volume Information
2015-09-15 14:09:16 ----RSD---- C:\WINDOWS\assembly
2015-09-15 08:32:02 ----HD---- C:\WINDOWS\msdownld.tmp
2015-09-15 08:31:47 ----D---- C:\Temp
2015-09-14 21:24:28 ----D---- C:\WINDOWS\system32\config
2015-09-14 10:26:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-14 10:23:47 ----D---- C:\WINDOWS\LiveKernelReports
2015-09-14 07:19:55 ----D---- C:\WINDOWS\WinSxS
2015-09-13 21:32:52 ----D---- C:\WINDOWS\CbsTemp
2015-09-13 21:05:17 ----D---- C:\WINDOWS\SysWOW64
2015-09-13 21:05:17 ----D---- C:\WINDOWS\system32\appraiser
2015-09-13 21:05:17 ----D---- C:\WINDOWS\AppPatch
2015-09-13 21:05:17 ----D---- C:\Program Files\Windows Journal
2015-09-13 21:05:16 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-13 21:03:46 ----D---- C:\WINDOWS\system32\NDF
2015-09-12 07:28:39 ----D---- C:\WINDOWS\system32\MRT
2015-09-09 19:45:52 ----D---- C:\WINDOWS\system32\catroot2
2015-09-07 14:22:09 ----D---- C:\Program Files (x86)\Steam
2015-09-05 17:01:46 ----D---- C:\WINDOWS\rescache
2015-09-04 22:41:39 ----D---- C:\WINDOWS\system32\drivers
2015-09-04 22:40:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\oobe
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-26 18:37:02 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-26 09:17:44 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-25 09:51:12 ----D---- C:\Users\Gambac\AppData\Roaming\NVIDIA
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-30 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-30 274808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-30 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-08-13 1048344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-30 447944]
R1 dtsoftbus01;@oem12.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-03-14 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-30 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-30 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-30 150672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2014-11-01 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2014-10-23 129600]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 BazisVirtualCDBus;@oem138.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-06-03 171864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 ISCT;@oem42.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-02-13 46568]
R3 MEIx64;@oem87.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624]
R3 NVHDA;@oem136.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-04-03 195912]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-29 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem137.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 RTL8168;@oem24.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2012-12-27 760032]
R3 rzendpt;@oem11.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [2014-09-05 39592]
R3 rzmpos;@oem90.inf,%rzmpos.SvcDesc%;rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [2014-09-05 35496]
R3 rzudd;@oem112.inf,%Razer.SvcDesc%;Razer Keyboard Driver; C:\WINDOWS\System32\drivers\rzudd.sys [2014-09-05 160424]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 RzFilter;RzFilter; \??\C:\Windows\system32\drivers\RzFilter.sys [2014-04-18 74432]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x64.sys [2012-04-25 96368]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-29 934752]
S3 RzDxgk;RzDxgk; \??\C:\Windows\system32\drivers\RzDxgk.sys [2014-04-18 129472]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-29 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-07-29 67072]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-30 146600]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-08 1152656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-26 937288]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2014-11-01 183488]
R2 RzOvlMon;Razer Overlay Subsystem Emergency Service; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [2014-04-18 32960]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-07 1997168]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-29 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
-----------------EOF-----------------
Run by Gambac at 2015-09-16 20:51:46
Microsoft Windows 10 Home
System drive C: has 160 GB (17%) free of 953 GB
Total RAM: 8120 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:51:48, on 16. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\ProgramData\Battle.net\Agent\Agent.4424\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.6119\Battle.net.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Hry\Hearthstone\Hearthstone.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Gambac.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://localoem.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localoem.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Razer Overlay Subsystem Emergency Service (RzOvlMon) - Razer, Inc. - C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9568 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
dashost.exe {34c5181f-f68b-4755-b83f6d6d8586e632}
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
C:\Windows\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
sihost.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\ProgramData\Battle.net\Agent\Agent.4424\Agent.exe" --locale=enUS --session=3280777165396626680
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Battle.net\Battle.net.6119\Battle.net.exe" "--gamepath=C:\Hry\World of Warcraft" --game=wow_enus
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6764.0.2002580595\1403277555" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc6 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.2.629365955\966842173" --font-cache-shared-handle=2540 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.3.1622753339\360164696" --font-cache-shared-handle=2528 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.4.1026933622\1191134825" --font-cache-shared-handle=2720 /prefetch:673131151
"C:\Hry\Hearthstone\Hearthstone.exe" -launch -uid hs_beta
taskeng.exe {12D7296D-1ED4-478B-9C28-7E6599769CF2}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.18.1312281905\527342451" --font-cache-shared-handle=6904 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6764.19.103519984\712145398" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.20.2100428423\274622386" --font-cache-shared-handle=4160 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_97/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6764.21.231555121\452880557" --font-cache-shared-handle=4176 /prefetch:673131151
"C:\Users\Gambac\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-08 1570672]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-07-29 402632]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-06-08 5123216]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2014-11-03 585536]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-25 6111824]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-07-05 439296]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-16 19:30:18 ----D---- C:\AdwCleaner
2015-09-16 19:21:23 ----D---- C:\Program Files\trend micro
2015-09-16 19:21:21 ----D---- C:\rsit
2015-09-16 19:15:58 ----D---- C:\FRST
2015-09-16 19:08:25 ----D---- C:\Program Files (x86)\942e2bb2-afda-4c31-a8fd-a1cf18795505
2015-09-16 19:08:14 ----D---- C:\Users\Gambac\AppData\Roaming\Opera Software
2015-09-16 19:07:41 ----D---- C:\Program Files (x86)\Opera
2015-09-16 19:07:20 ----A---- C:\WINDOWS\chromebrowser.exe
2015-09-14 14:30:32 ----D---- C:\Program Files (x86)\AGEIA Technologies
2015-09-14 07:25:04 ----D---- C:\Users\Gambac\AppData\Roaming\runic games
2015-09-14 07:16:59 ----D---- C:\Users\Gambac\AppData\Roaming\InstallShield
2015-09-12 07:28:37 ----D---- C:\d97ce8a0f626ad1374f9
2015-09-10 09:34:26 ----D---- C:\Users\Gambac\AppData\Roaming\HearthstoneDeckTracker
2015-09-09 19:50:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-09-09 19:50:11 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-09-09 19:50:10 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-09-09 19:50:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-29 15:24:29 ----D---- C:\Users\Gambac\AppData\Roaming\uplay
2015-08-29 09:04:14 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-29 09:04:09 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-24 19:20:24 ----D---- C:\Users\Gambac\AppData\Roaming\Skype
2015-08-24 19:20:12 ----D---- C:\ProgramData\Skype
2015-08-19 09:34:39 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 09:34:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 09:34:26 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 09:34:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:24 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 09:34:23 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 09:34:18 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 09:34:13 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-17 20:28:39 ----D---- C:\WINDOWS\SYSWOW64\directx
======List of files/folders modified in the last 1 month======
2015-09-16 20:38:00 ----D---- C:\WINDOWS\system32\sru
2015-09-16 19:54:45 ----D---- C:\WINDOWS\Prefetch
2015-09-16 19:54:40 ----D---- C:\Program Files (x86)\Battle.net
2015-09-16 19:38:02 ----D---- C:\WINDOWS\AppReadiness
2015-09-16 19:38:01 ----D---- C:\WINDOWS\Temp
2015-09-16 19:37:20 ----D---- C:\WINDOWS\System32
2015-09-16 19:36:00 ----D---- C:\WINDOWS\Tasks
2015-09-16 19:36:00 ----D---- C:\WINDOWS\system32\Tasks
2015-09-16 19:35:59 ----RD---- C:\Program Files (x86)
2015-09-16 19:35:59 ----HD---- C:\ProgramData
2015-09-16 19:25:42 ----HD---- C:\Program Files\WindowsApps
2015-09-16 19:21:23 ----RD---- C:\Program Files
2015-09-16 19:20:20 ----D---- C:\Users\Gambac\AppData\Roaming\Seznam.cz
2015-09-16 19:16:03 ----D---- C:\Windows
2015-09-16 19:15:30 ----SHD---- C:\WINDOWS\Installer
2015-09-16 19:08:30 ----D---- C:\Program Files (x86)\Common Files
2015-09-16 19:08:10 ----D---- C:\Hry
2015-09-16 19:06:39 ----D---- C:\Users\Gambac\AppData\Roaming\uTorrent
2015-09-16 17:39:09 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-16 17:38:49 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-16 14:36:30 ----D---- C:\WINDOWS\INF
2015-09-16 14:36:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-16 14:31:30 ----D---- C:\Users\Gambac\AppData\Roaming\vlc
2015-09-16 13:41:35 ----SHD---- C:\System Volume Information
2015-09-15 14:09:16 ----RSD---- C:\WINDOWS\assembly
2015-09-15 08:32:02 ----HD---- C:\WINDOWS\msdownld.tmp
2015-09-15 08:31:47 ----D---- C:\Temp
2015-09-14 21:24:28 ----D---- C:\WINDOWS\system32\config
2015-09-14 10:26:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-14 10:23:47 ----D---- C:\WINDOWS\LiveKernelReports
2015-09-14 07:19:55 ----D---- C:\WINDOWS\WinSxS
2015-09-13 21:32:52 ----D---- C:\WINDOWS\CbsTemp
2015-09-13 21:05:17 ----D---- C:\WINDOWS\SysWOW64
2015-09-13 21:05:17 ----D---- C:\WINDOWS\system32\appraiser
2015-09-13 21:05:17 ----D---- C:\WINDOWS\AppPatch
2015-09-13 21:05:17 ----D---- C:\Program Files\Windows Journal
2015-09-13 21:05:16 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-13 21:03:46 ----D---- C:\WINDOWS\system32\NDF
2015-09-12 07:28:39 ----D---- C:\WINDOWS\system32\MRT
2015-09-09 19:45:52 ----D---- C:\WINDOWS\system32\catroot2
2015-09-07 14:22:09 ----D---- C:\Program Files (x86)\Steam
2015-09-05 17:01:46 ----D---- C:\WINDOWS\rescache
2015-09-04 22:41:39 ----D---- C:\WINDOWS\system32\drivers
2015-09-04 22:40:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\oobe
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-26 18:37:02 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-26 09:17:44 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-25 09:51:12 ----D---- C:\Users\Gambac\AppData\Roaming\NVIDIA
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-30 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-30 274808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-30 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-08-13 1048344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-30 447944]
R1 dtsoftbus01;@oem12.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-03-14 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-30 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-30 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-30 150672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2014-11-01 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2014-10-23 129600]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 BazisVirtualCDBus;@oem138.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-06-03 171864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 ISCT;@oem42.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-02-13 46568]
R3 MEIx64;@oem87.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624]
R3 NVHDA;@oem136.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-04-03 195912]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-29 11142984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem137.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 RTL8168;@oem24.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2012-12-27 760032]
R3 rzendpt;@oem11.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [2014-09-05 39592]
R3 rzmpos;@oem90.inf,%rzmpos.SvcDesc%;rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [2014-09-05 35496]
R3 rzudd;@oem112.inf,%Razer.SvcDesc%;Razer Keyboard Driver; C:\WINDOWS\System32\drivers\rzudd.sys [2014-09-05 160424]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 RzFilter;RzFilter; \??\C:\Windows\system32\drivers\RzFilter.sys [2014-04-18 74432]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x64.sys [2012-04-25 96368]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-29 934752]
S3 RzDxgk;RzDxgk; \??\C:\Windows\system32\drivers\RzDxgk.sys [2014-04-18 129472]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-29 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-07-29 67072]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-30 146600]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-08 1152656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-26 937288]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2014-11-01 183488]
R2 RzOvlMon;Razer Overlay Subsystem Emergency Service; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [2014-04-18 32960]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-07 1997168]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-29 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
-----------------EOF-----------------
Re: Kontrola logu - celkove zasekany system
S timdle jsem na vážkách - C:\Windows\system32\viakaraokesrv.exe Myslim, ze jsem si nevsiml nikdy predtim, ze bych ten soubor mel v system32 a google je tak 50 na 50 nechat nebo smazat.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
Soubor C:\Windows\system32\viakaraokesrv.exe patří ovladači VIA. Je OK.
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
:commands
[Purity]
[Emptytemp]
[Emptyflash]
Soubor C:\Windows\system32\viakaraokesrv.exe patří ovladači VIA. Je OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - celkove zasekany system
Logfile of random's system information tool 1.10 (written by random/random)
Run by Gambac at 2015-09-16 21:18:38
Microsoft Windows 10 Home
System drive C: has 161 GB (17%) free of 953 GB
Total RAM: 8120 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:18:41, on 16. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Gambac\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\Gambac.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://localoem.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localoem.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Razer Overlay Subsystem Emergency Service (RzOvlMon) - Razer, Inc. - C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8845 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe"
dashost.exe {e0a134c4-1906-4675-9b6c2caeac13774d}
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Windows\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
sihost.exe
taskeng.exe {CE8220AF-F733-400B-9A91-4A9C57A7A49D}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"nvtray.exe" -user_has_logged_in 1
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Users\Gambac\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
"C:\Users\Gambac\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-08 1570672]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-07-29 402632]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-06-08 5123216]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2014-11-03 585536]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-25 6111824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-07-05 439296]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-16 21:16:18 ----D---- C:\_OTM
2015-09-16 19:30:18 ----D---- C:\AdwCleaner
2015-09-16 19:21:23 ----D---- C:\Program Files\trend micro
2015-09-16 19:21:21 ----D---- C:\rsit
2015-09-16 19:15:58 ----D---- C:\FRST
2015-09-16 19:08:25 ----D---- C:\Program Files (x86)\942e2bb2-afda-4c31-a8fd-a1cf18795505
2015-09-16 19:08:14 ----D---- C:\Users\Gambac\AppData\Roaming\Opera Software
2015-09-16 19:07:41 ----D---- C:\Program Files (x86)\Opera
2015-09-16 19:07:20 ----A---- C:\WINDOWS\chromebrowser.exe
2015-09-14 14:30:32 ----D---- C:\Program Files (x86)\AGEIA Technologies
2015-09-14 07:25:04 ----D---- C:\Users\Gambac\AppData\Roaming\runic games
2015-09-14 07:16:59 ----D---- C:\Users\Gambac\AppData\Roaming\InstallShield
2015-09-12 07:28:37 ----D---- C:\d97ce8a0f626ad1374f9
2015-09-10 09:34:26 ----D---- C:\Users\Gambac\AppData\Roaming\HearthstoneDeckTracker
2015-09-09 19:50:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-09-09 19:50:11 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-09-09 19:50:10 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-09-09 19:50:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-29 15:24:29 ----D---- C:\Users\Gambac\AppData\Roaming\uplay
2015-08-29 09:04:14 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-29 09:04:09 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-24 19:20:24 ----D---- C:\Users\Gambac\AppData\Roaming\Skype
2015-08-24 19:20:12 ----D---- C:\ProgramData\Skype
2015-08-19 09:34:39 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 09:34:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 09:34:26 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 09:34:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:24 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 09:34:23 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 09:34:18 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 09:34:13 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-17 20:28:39 ----D---- C:\WINDOWS\SYSWOW64\directx
======List of files/folders modified in the last 1 month======
2015-09-16 21:17:46 ----D---- C:\WINDOWS\Temp
2015-09-16 21:17:46 ----D---- C:\WINDOWS\System32
2015-09-16 21:16:49 ----D---- C:\WINDOWS\system32\sru
2015-09-16 21:16:20 ----D---- C:\WINDOWS\Prefetch
2015-09-16 21:16:19 ----D---- C:\WINDOWS\Tasks
2015-09-16 19:54:40 ----D---- C:\Program Files (x86)\Battle.net
2015-09-16 19:43:47 ----D---- C:\WINDOWS\AppReadiness
2015-09-16 19:36:00 ----D---- C:\WINDOWS\system32\Tasks
2015-09-16 19:35:59 ----RD---- C:\Program Files (x86)
2015-09-16 19:35:59 ----HD---- C:\ProgramData
2015-09-16 19:25:42 ----HD---- C:\Program Files\WindowsApps
2015-09-16 19:21:23 ----RD---- C:\Program Files
2015-09-16 19:20:20 ----D---- C:\Users\Gambac\AppData\Roaming\Seznam.cz
2015-09-16 19:16:03 ----D---- C:\Windows
2015-09-16 19:15:30 ----SHD---- C:\WINDOWS\Installer
2015-09-16 19:08:30 ----D---- C:\Program Files (x86)\Common Files
2015-09-16 19:08:10 ----D---- C:\Hry
2015-09-16 19:06:39 ----D---- C:\Users\Gambac\AppData\Roaming\uTorrent
2015-09-16 17:39:09 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-16 17:38:49 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-16 14:36:30 ----D---- C:\WINDOWS\INF
2015-09-16 14:36:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-16 14:31:30 ----D---- C:\Users\Gambac\AppData\Roaming\vlc
2015-09-16 13:41:35 ----SHD---- C:\System Volume Information
2015-09-15 14:09:16 ----RSD---- C:\WINDOWS\assembly
2015-09-15 08:32:02 ----HD---- C:\WINDOWS\msdownld.tmp
2015-09-15 08:31:47 ----D---- C:\Temp
2015-09-14 21:24:28 ----D---- C:\WINDOWS\system32\config
2015-09-14 10:26:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-14 10:23:47 ----D---- C:\WINDOWS\LiveKernelReports
2015-09-14 07:19:55 ----D---- C:\WINDOWS\WinSxS
2015-09-13 21:32:52 ----D---- C:\WINDOWS\CbsTemp
2015-09-13 21:05:17 ----D---- C:\WINDOWS\SysWOW64
2015-09-13 21:05:17 ----D---- C:\WINDOWS\system32\appraiser
2015-09-13 21:05:17 ----D---- C:\WINDOWS\AppPatch
2015-09-13 21:05:17 ----D---- C:\Program Files\Windows Journal
2015-09-13 21:05:16 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-13 21:03:46 ----D---- C:\WINDOWS\system32\NDF
2015-09-12 07:28:39 ----D---- C:\WINDOWS\system32\MRT
2015-09-09 19:45:52 ----D---- C:\WINDOWS\system32\catroot2
2015-09-07 14:22:09 ----D---- C:\Program Files (x86)\Steam
2015-09-05 17:01:46 ----D---- C:\WINDOWS\rescache
2015-09-04 22:41:39 ----D---- C:\WINDOWS\system32\drivers
2015-09-04 22:40:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\oobe
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-26 18:37:02 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-26 09:17:44 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-25 09:51:12 ----D---- C:\Users\Gambac\AppData\Roaming\NVIDIA
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-30 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-30 274808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-30 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-08-13 1048344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-30 447944]
R1 dtsoftbus01;@oem12.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-03-14 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-30 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-30 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-30 150672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2014-11-01 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2014-10-23 129600]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 BazisVirtualCDBus;@oem138.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-06-03 171864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 ISCT;@oem42.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-02-13 46568]
R3 MEIx64;@oem87.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624]
R3 NVHDA;@oem136.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-04-03 195912]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-29 11142984]
R3 nvvad_WaveExtensible;@oem137.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 RTL8168;@oem24.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2012-12-27 760032]
R3 rzendpt;@oem11.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [2014-09-05 39592]
R3 rzmpos;@oem90.inf,%rzmpos.SvcDesc%;rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [2014-09-05 35496]
R3 rzudd;@oem112.inf,%Razer.SvcDesc%;Razer Keyboard Driver; C:\WINDOWS\System32\drivers\rzudd.sys [2014-09-05 160424]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 RzFilter;RzFilter; \??\C:\Windows\system32\drivers\RzFilter.sys [2014-04-18 74432]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x64.sys [2012-04-25 96368]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-29 934752]
S3 RzDxgk;RzDxgk; \??\C:\Windows\system32\drivers\RzDxgk.sys [2014-04-18 129472]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-29 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-07-29 67072]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-30 146600]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-08 1152656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-26 937288]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2014-11-01 183488]
R2 RzOvlMon;Razer Overlay Subsystem Emergency Service; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [2014-04-18 32960]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-07 1997168]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-29 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
-----------------EOF-----------------
Run by Gambac at 2015-09-16 21:18:38
Microsoft Windows 10 Home
System drive C: has 161 GB (17%) free of 953 GB
Total RAM: 8120 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:18:41, on 16. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Gambac\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\Gambac.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://localoem.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localoem.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Razer Overlay Subsystem Emergency Service (RzOvlMon) - Razer, Inc. - C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8845 bytes
======Listing Processes======
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe"
dashost.exe {e0a134c4-1906-4675-9b6c2caeac13774d}
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Windows\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
sihost.exe
taskeng.exe {CE8220AF-F733-400B-9A91-4A9C57A7A49D}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"nvtray.exe" -user_has_logged_in 1
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Users\Gambac\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
"C:\Users\Gambac\Desktop\RSITx64.exe"
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-08 1570672]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Gambac\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-07-29 402632]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-06-08 5123216]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2014-11-03 585536]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-25 6111824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-07-05 439296]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-09-16 21:16:18 ----D---- C:\_OTM
2015-09-16 19:30:18 ----D---- C:\AdwCleaner
2015-09-16 19:21:23 ----D---- C:\Program Files\trend micro
2015-09-16 19:21:21 ----D---- C:\rsit
2015-09-16 19:15:58 ----D---- C:\FRST
2015-09-16 19:08:25 ----D---- C:\Program Files (x86)\942e2bb2-afda-4c31-a8fd-a1cf18795505
2015-09-16 19:08:14 ----D---- C:\Users\Gambac\AppData\Roaming\Opera Software
2015-09-16 19:07:41 ----D---- C:\Program Files (x86)\Opera
2015-09-16 19:07:20 ----A---- C:\WINDOWS\chromebrowser.exe
2015-09-14 14:30:32 ----D---- C:\Program Files (x86)\AGEIA Technologies
2015-09-14 07:25:04 ----D---- C:\Users\Gambac\AppData\Roaming\runic games
2015-09-14 07:16:59 ----D---- C:\Users\Gambac\AppData\Roaming\InstallShield
2015-09-12 07:28:37 ----D---- C:\d97ce8a0f626ad1374f9
2015-09-10 09:34:26 ----D---- C:\Users\Gambac\AppData\Roaming\HearthstoneDeckTracker
2015-09-09 19:50:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-09-09 19:50:11 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-09-09 19:50:10 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-09-09 19:50:09 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-09-09 19:50:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-09-09 19:50:07 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\jscript.dll
2015-09-09 19:50:06 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 19:50:05 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-09 19:50:04 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-09 19:50:03 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-08-29 15:24:29 ----D---- C:\Users\Gambac\AppData\Roaming\uplay
2015-08-29 09:04:14 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-29 09:04:09 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-29 09:04:08 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-29 09:04:07 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-29 09:04:06 ----A---- C:\WINDOWS\system32\ci.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-08-29 09:04:05 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-29 09:04:04 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-08-29 09:04:03 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-29 09:04:02 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-24 19:20:24 ----D---- C:\Users\Gambac\AppData\Roaming\Skype
2015-08-24 19:20:12 ----D---- C:\ProgramData\Skype
2015-08-19 09:34:39 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-19 09:34:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\tquery.dll
2015-08-19 09:34:32 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-19 09:34:31 ----A---- C:\WINDOWS\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-08-19 09:34:29 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-19 09:34:28 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:27 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-19 09:34:26 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-19 09:34:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-19 09:34:24 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-08-19 09:34:23 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-08-19 09:34:23 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-08-19 09:34:22 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-08-19 09:34:21 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-08-19 09:34:20 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-08-19 09:34:19 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-08-19 09:34:18 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-19 09:34:13 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-19 09:34:13 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-08-19 09:34:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-08-19 09:34:11 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-08-17 20:28:39 ----D---- C:\WINDOWS\SYSWOW64\directx
======List of files/folders modified in the last 1 month======
2015-09-16 21:17:46 ----D---- C:\WINDOWS\Temp
2015-09-16 21:17:46 ----D---- C:\WINDOWS\System32
2015-09-16 21:16:49 ----D---- C:\WINDOWS\system32\sru
2015-09-16 21:16:20 ----D---- C:\WINDOWS\Prefetch
2015-09-16 21:16:19 ----D---- C:\WINDOWS\Tasks
2015-09-16 19:54:40 ----D---- C:\Program Files (x86)\Battle.net
2015-09-16 19:43:47 ----D---- C:\WINDOWS\AppReadiness
2015-09-16 19:36:00 ----D---- C:\WINDOWS\system32\Tasks
2015-09-16 19:35:59 ----RD---- C:\Program Files (x86)
2015-09-16 19:35:59 ----HD---- C:\ProgramData
2015-09-16 19:25:42 ----HD---- C:\Program Files\WindowsApps
2015-09-16 19:21:23 ----RD---- C:\Program Files
2015-09-16 19:20:20 ----D---- C:\Users\Gambac\AppData\Roaming\Seznam.cz
2015-09-16 19:16:03 ----D---- C:\Windows
2015-09-16 19:15:30 ----SHD---- C:\WINDOWS\Installer
2015-09-16 19:08:30 ----D---- C:\Program Files (x86)\Common Files
2015-09-16 19:08:10 ----D---- C:\Hry
2015-09-16 19:06:39 ----D---- C:\Users\Gambac\AppData\Roaming\uTorrent
2015-09-16 17:39:09 ----D---- C:\WINDOWS\Microsoft.NET
2015-09-16 17:38:49 ----D---- C:\WINDOWS\system32\LogFiles
2015-09-16 14:36:30 ----D---- C:\WINDOWS\INF
2015-09-16 14:36:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-16 14:31:30 ----D---- C:\Users\Gambac\AppData\Roaming\vlc
2015-09-16 13:41:35 ----SHD---- C:\System Volume Information
2015-09-15 14:09:16 ----RSD---- C:\WINDOWS\assembly
2015-09-15 08:32:02 ----HD---- C:\WINDOWS\msdownld.tmp
2015-09-15 08:31:47 ----D---- C:\Temp
2015-09-14 21:24:28 ----D---- C:\WINDOWS\system32\config
2015-09-14 10:26:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-14 10:23:47 ----D---- C:\WINDOWS\LiveKernelReports
2015-09-14 07:19:55 ----D---- C:\WINDOWS\WinSxS
2015-09-13 21:32:52 ----D---- C:\WINDOWS\CbsTemp
2015-09-13 21:05:17 ----D---- C:\WINDOWS\SysWOW64
2015-09-13 21:05:17 ----D---- C:\WINDOWS\system32\appraiser
2015-09-13 21:05:17 ----D---- C:\WINDOWS\AppPatch
2015-09-13 21:05:17 ----D---- C:\Program Files\Windows Journal
2015-09-13 21:05:16 ----D---- C:\WINDOWS\system32\DriverStore
2015-09-13 21:03:46 ----D---- C:\WINDOWS\system32\NDF
2015-09-12 07:28:39 ----D---- C:\WINDOWS\system32\MRT
2015-09-09 19:45:52 ----D---- C:\WINDOWS\system32\catroot2
2015-09-07 14:22:09 ----D---- C:\Program Files (x86)\Steam
2015-09-05 17:01:46 ----D---- C:\WINDOWS\rescache
2015-09-04 22:41:39 ----D---- C:\WINDOWS\system32\drivers
2015-09-04 22:40:08 ----RD---- C:\WINDOWS\DevicesFlow
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\oobe
2015-09-04 22:40:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-26 18:37:02 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-26 09:17:44 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-25 09:51:12 ----D---- C:\Users\Gambac\AppData\Roaming\NVIDIA
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-30 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-30 274808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-30 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-08-13 1048344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-30 447944]
R1 dtsoftbus01;@oem12.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-03-14 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-30 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-30 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-30 150672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2014-11-01 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2014-10-23 129600]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 BazisVirtualCDBus;@oem138.inf,%dev.SVCDESC%;WinCDEmu Virtual Bus Driver; C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys [2015-06-03 171864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 ISCT;@oem42.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-02-13 46568]
R3 MEIx64;@oem87.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624]
R3 NVHDA;@oem136.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-04-03 195912]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-07-29 11142984]
R3 nvvad_WaveExtensible;@oem137.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 RTL8168;@oem24.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2012-12-27 760032]
R3 rzendpt;@oem11.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [2014-09-05 39592]
R3 rzmpos;@oem90.inf,%rzmpos.SvcDesc%;rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [2014-09-05 35496]
R3 rzudd;@oem112.inf,%Razer.SvcDesc%;Razer Keyboard Driver; C:\WINDOWS\System32\drivers\rzudd.sys [2014-09-05 160424]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 RzFilter;RzFilter; \??\C:\Windows\system32\drivers\RzFilter.sys [2014-04-18 74432]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x64.sys [2012-04-25 96368]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-29 934752]
S3 RzDxgk;RzDxgk; \??\C:\Windows\system32\drivers\RzDxgk.sys [2014-04-18 129472]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-29 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-07-29 67072]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-30 146600]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-08 1152656]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-26 937288]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2014-11-01 183488]
R2 RzOvlMon;Razer Overlay Subsystem Emergency Service; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [2014-04-18 32960]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-07 1997168]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-29 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-19 838336]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
Dvouklikem na soubor C:\Program Files\trend micro\Gambac.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - celkove zasekany system
Provedeno, zda se, ze vse frčí tak jak ma 
Pokud bude jeste treba log, tak dodam.
Jinak jako vzdy kloboucek a diky
Pokud bude jeste treba log, tak dodam.
Jinak jako vzdy kloboucek a diky
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
Další log není třeba, mělo by to být OK. Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - celkove zasekany system
Editováno - puvodne zde byl dalsi log, jelikoz reklamy vyskakovaly nadale + se otvirala nova okna v Chromu.
Nakonec jsem se rozhodl pro cistou instalaci systemu, po dvou letech vyuzivani uz to bylo stejne treba.
Ted je zformatovany HDD a zda se, ze vse funguje jak ma.
Topic prosim
Vsak ja se zase ozvu Jeste jednou diky za ochotu a cas 
Nakonec jsem se rozhodl pro cistou instalaci systemu, po dvou letech vyuzivani uz to bylo stejne treba.
Ted je zformatovany HDD a zda se, ze vse funguje jak ma.
Topic prosim
Vsak ja se zase ozvu Jeste jednou diky za ochotu a cas -
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - celkove zasekany system
OK. Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?