Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Vir gosave 2.0 a kontrola

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 zář 2008 15:13

Vir gosave 2.0 a kontrola

#1 Příspěvek od Kakolukian »

Dobrý den,

mám problém, dostalo se mi to chromu rozšíření GoSave 2.0, zjistil jsem, že se jedná o malware, ale v návodech o odstranění, jsou většinou placené programy. Tak mě napadlo jestli mi nepomůžete tady.

Předem díky.

řeLogfile of random's system information tool 1.10 (written by random/random)
Run by Tadeáš at 2014-11-14 18:52:33
Microsoft Windows 8.1
System drive C: has 218 GB (24%) free of 905 GB
Total RAM: 8058 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:52:42, on 14. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\WINDOWS\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tadeáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\Root\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [IntellingentTouchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\Root\Office15\MSOSB.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem79.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: ExpressCache - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\HRY\HiPatchService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 12336 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 361028275216
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe"
C:\HRY\HiPatchService.exe
dashost.exe {18fef2b6-cdb5-45d8-8d5d2556ffdd2eec}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-66e51502-4abb-409f-8369-283d92d1a4ac -SystemEventPortName:HostProcess-02612efe-f6be-499c-b6a9-83be5ff7bc73 -IoCancelEventPortName:HostProcess-ef107840-6c55-4b86-b669-5768ff4469e2 -NonStateChangingEventPortName:HostProcess-c91e4c1b-3691-40b6-a585-cf12e19dc619 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f5a2d189-cd38-412b-8eaf-11f562f196fc -DeviceGroupId:WudfDefaultDevicePool
taskhostex.exe
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m
"C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\WINDOWS\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 254de47c-9442-44db-932d-9a33b82ce78a 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6912.0.873845343\1150618592" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3316 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/None/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/DevHUPScoringExperiment_Control_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderControl/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/OneWeek/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6912.2.1229551002\1311526918" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/None/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/DevHUPScoringExperiment_Control_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderControl/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/OneWeek/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6912.4.1067579407\237814302" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/None/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/DevHUPScoringExperiment_Control_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderControl/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/OneWeek/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6912.7.101410964\87076311" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 592 596 604 65536 600
"C:\Users\Tadeáš\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-08-26 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-06 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-09-25 2334416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll [2014-08-26 153240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-31 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\Root\Office15\GROOVEEX.DLL [2014-09-25 1729232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-31 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2012-08-27 665400]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-07-11 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-07-11 191544]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-27 2916152]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-11-06 2800296]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-10-24 13662936]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-11-05 1361112]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-11-05 1361112]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-11-06 2464072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"cz.seznam.software.autoupdate"=C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-08-23 56128]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-11-08 139792]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-11-08 168464]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"IntellingentTouchpad"=C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [2012-07-23 673336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-06 4085896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-03 623616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-14 18:52:33 ----D---- C:\rsit
2014-11-14 18:52:33 ----D---- C:\Program Files\trend micro
2014-11-14 18:31:53 ----D---- C:\WINDOWS\SYSWOW64\NV
2014-11-14 18:31:53 ----D---- C:\WINDOWS\system32\NV
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvopencl.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvdispgenco6434465.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvdispco6434465.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvcuda.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2014-11-14 18:25:04 ----D---- C:\WINDOWS\LastGood
2014-11-14 18:25:01 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2014-11-14 18:25:01 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2014-11-13 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-13 08:49:02 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-13 08:48:42 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-13 08:48:41 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-13 08:48:14 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-13 08:48:09 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-13 08:48:04 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-13 08:48:02 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-13 08:48:01 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-13 08:48:00 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-13 08:48:00 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-13 08:48:00 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-13 08:47:59 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-13 08:47:59 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-13 08:47:59 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-13 08:47:58 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-13 08:47:58 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-13 08:47:56 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-13 08:47:56 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-13 08:47:55 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-13 08:47:55 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-13 08:47:54 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-13 08:47:54 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-13 08:47:52 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-13 08:47:52 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-13 08:47:50 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-13 08:47:50 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-13 08:47:50 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-13 08:47:49 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-13 08:47:48 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-13 08:47:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-13 08:47:45 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\url.dll
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-13 08:47:39 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-13 08:46:43 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-13 08:46:43 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-13 08:46:42 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-13 08:46:42 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-13 08:46:42 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-13 08:46:19 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-13 08:46:17 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-13 08:46:17 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-13 08:46:13 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-13 08:45:24 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-13 08:45:24 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-13 08:45:22 ----A---- C:\WINDOWS\system32\devinv.dll
2014-11-13 08:45:22 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-11-13 08:45:21 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-11-13 08:45:21 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-11-13 08:45:20 ----A---- C:\WINDOWS\system32\aepic.dll
2014-11-13 08:45:18 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-13 08:45:18 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-13 08:45:18 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\system32\consent.exe
2014-11-13 08:45:17 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-13 08:45:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-13 08:45:09 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-13 08:44:27 ----A---- C:\WINDOWS\system32\user32.dll
2014-11-13 08:44:26 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-11-13 08:44:25 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-11-13 08:44:24 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-11-13 08:44:24 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-11-13 08:44:22 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2014-11-13 08:44:22 ----A---- C:\WINDOWS\system32\winshfhc.dll
2014-11-13 08:43:47 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-13 08:43:45 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-13 08:43:44 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-13 08:43:40 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-13 08:43:40 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-13 08:43:39 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-13 08:43:38 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-13 08:43:38 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-13 08:43:38 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-13 08:43:37 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-13 08:43:36 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-13 08:43:36 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-13 08:43:36 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-13 08:43:34 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-13 08:43:34 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-13 08:43:32 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-13 08:43:29 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-13 08:43:28 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-13 08:43:25 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-13 08:43:24 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-13 08:43:24 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-13 08:43:24 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-13 08:43:23 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-13 08:43:22 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-13 08:43:22 ----A---- C:\WINDOWS\system32\PJLMON.DLL
2014-11-13 08:43:22 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 18:29:48 ----A---- C:\autoexec.bat
2014-11-12 18:15:54 ----D---- C:\WINDOWS\system32\log
2014-11-07 20:54:35 ----D---- C:\ProgramData\a086cdaae9cc360b
2014-10-31 07:38:34 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-10-31 07:38:23 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-10-31 07:38:23 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-10-31 07:38:22 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-10-15 05:22:33 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2014-10-15 05:14:02 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-15 05:14:02 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-15 05:14:00 ----A---- C:\WINDOWS\system32\winbici.dll
2014-10-15 05:12:59 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-15 05:12:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-10-15 05:12:57 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-10-15 05:12:57 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-10-15 05:12:57 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-10-15 05:12:55 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-10-15 05:12:55 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-10-15 05:12:55 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-10-15 05:12:54 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-10-15 05:12:54 ----A---- C:\WINDOWS\system32\propsys.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-10-15 05:12:52 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-10-15 05:12:52 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-10-15 05:12:52 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-15 05:12:51 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-10-15 05:12:50 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-15 05:12:50 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-10-15 05:12:50 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-10-15 05:12:48 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-10-15 05:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-15 05:12:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-15 05:12:36 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-10-15 05:12:36 ----A---- C:\WINDOWS\system32\rastls.dll

======List of files/folders modified in the last 1 month======

2014-11-14 18:52:41 ----D---- C:\WINDOWS\Prefetch
2014-11-14 18:52:33 ----D---- C:\Program Files
2014-11-14 18:31:53 ----RD---- C:\WINDOWS\System32
2014-11-14 18:31:53 ----D---- C:\WINDOWS\SysWOW64
2014-11-14 18:31:49 ----D---- C:\ProgramData\NVIDIA
2014-11-14 18:31:04 ----D---- C:\WINDOWS\Temp
2014-11-14 18:30:37 ----D---- C:\WINDOWS\system32\drivers
2014-11-14 18:30:32 ----D---- C:\WINDOWS\Inf
2014-11-14 18:30:30 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-14 18:25:51 ----SHD---- C:\System Volume Information
2014-11-14 18:25:14 ----D---- C:\WINDOWS\Logs
2014-11-14 18:25:04 ----D---- C:\Windows
2014-11-14 18:18:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 18:17:33 ----D---- C:\Users\Tadeáš\AppData\Roaming\Seznam.cz
2014-11-14 18:13:58 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-11-14 18:00:01 ----D---- C:\WINDOWS\system32\sru
2014-11-14 17:19:48 ----D---- C:\WINDOWS\system32\config
2014-11-14 17:07:40 ----D---- C:\WINDOWS\WinSxS
2014-11-14 17:02:52 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-14 17:02:52 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-14 17:02:52 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-14 17:02:51 ----D---- C:\WINDOWS\system32\migration
2014-11-14 17:02:51 ----D---- C:\Program Files\Internet Explorer
2014-11-14 17:02:50 ----SD---- C:\WINDOWS\system32\CompatTel
2014-11-14 17:02:50 ----RD---- C:\WINDOWS\ToastData
2014-11-14 17:02:50 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-14 17:02:44 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-14 17:02:43 ----D---- C:\WINDOWS\apppatch
2014-11-14 16:51:32 ----D---- C:\Program Files\Windows Defender
2014-11-14 16:51:32 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-14 12:44:49 ----D---- C:\HRY
2014-11-14 12:41:52 ----D---- C:\Share-rapid
2014-11-14 08:00:58 ----HD---- C:\Program Files\WindowsApps
2014-11-14 08:00:58 ----D---- C:\WINDOWS\AppReadiness
2014-11-13 22:39:26 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-13 22:34:28 ----RSD---- C:\WINDOWS\assembly
2014-11-13 18:29:19 ----SHD---- C:\WINDOWS\Installer
2014-11-13 18:29:14 ----D---- C:\ProgramData\Microsoft Help
2014-11-13 18:29:11 ----D---- C:\WINDOWS\CbsTemp
2014-11-13 18:28:57 ----D---- C:\WINDOWS\system32\wbem
2014-11-13 18:28:23 ----A---- C:\WINDOWS\win.ini
2014-11-13 18:26:36 ----D---- C:\WINDOWS\system32\MRT
2014-11-13 18:23:23 ----A---- C:\WINDOWS\system32\MRT.exe
2014-11-13 08:40:14 ----D---- C:\WINDOWS\system32\catroot2
2014-11-12 18:47:26 ----D---- C:\WINDOWS\system32\drivers\etc
2014-11-12 18:29:30 ----D---- C:\WINDOWS\system32\Tasks
2014-11-12 18:25:24 ----RD---- C:\Program Files (x86)
2014-11-12 18:17:42 ----HD---- C:\ProgramData
2014-11-10 12:52:12 ----D---- C:\WINDOWS\debug
2014-11-10 12:01:51 ----D---- C:\Users\Tadeáš\AppData\Roaming\DAEMON Tools Lite
2014-11-07 20:54:35 ----RD---- C:\Users
2014-11-07 20:54:35 ----HD---- C:\WINDOWS\system32\GroupPolicy
2014-11-07 20:54:35 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2014-11-07 20:54:35 ----D---- C:\Program Files (x86)\Google
2014-11-06 19:44:28 ----D---- C:\Users\Tadeáš\AppData\Roaming\Skype
2014-11-06 18:06:52 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2014-11-06 18:06:52 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2014-11-06 18:06:33 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2014-11-06 18:06:33 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\system32\nvinitx.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\system32\nvapi64.dll
2014-11-03 23:02:42 ----A---- C:\WINDOWS\system32\nvcpl.dll
2014-11-03 23:02:41 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvshext.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvmctray.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2014-11-02 08:49:10 ----D---- C:\WINDOWS\system32\NDF
2014-10-31 07:38:56 ----D---- C:\ProgramData\Oracle
2014-10-31 07:38:49 ----D---- C:\Program Files (x86)\Common Files
2014-10-31 07:38:14 ----D---- C:\Program Files (x86)\Java
2014-10-30 01:55:02 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-10-25 08:12:26 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-10-25 08:10:20 ----D---- C:\Program Files\Microsoft Office 15
2014-10-23 17:09:57 ----D---- C:\WINDOWS\Tasks
2014-10-16 17:44:02 ----D---- C:\WINDOWS\rescache
2014-10-16 06:56:49 ----D---- C:\WINDOWS\system32\catroot
2014-10-15 23:35:35 ----D---- C:\WINDOWS\MediaViewer
2014-10-15 23:35:35 ----D---- C:\WINDOWS\FileManager
2014-10-15 23:35:35 ----D---- C:\WINDOWS\Camera
2014-10-15 23:35:33 ----D---- C:\WINDOWS\WinStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-08-06 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-08-06 224896]
R0 excsd;ExpressCache Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\excsd.sys [2012-03-30 95024]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-07-11 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-11-04 32576]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-08-06 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-08-06 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-08-06 427360]
R1 dtsoftbus01;@oem50.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2013-10-20 283064]
R1 excfs;ExpressCache File System Filter Driver; C:\WINDOWS\system32\DRIVERS\excfs.sys [2012-03-30 23344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-08-06 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-08-06 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-08-06 92008]
R3 ACPIVPC;@oem46.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-07-11 33560]
R3 bcbtums;@oem79.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 btwampfl;@oem79.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-09-04 166104]
R3 clwvd;@oem63.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\WINDOWS\system32\DRIVERS\clwvd.sys [2012-06-26 36336]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-03 4185600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-11-05 3707864]
R3 IntcDAud;@oem35.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem73.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-09-26 27032]
R3 JMCR;JMCR; C:\WINDOWS\System32\drivers\jmcr.sys [2012-06-22 174176]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem65.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 NETwNe64;@oem92.inf,___ %NIC_Service_DispName_WIN8_64%;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 8 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [2014-02-25 3349984]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-11-04 13207184]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-11-06 19784]
R3 nvvad_WaveExtensible;@oem101.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-10-03 38216]
R3 rtsuvc;@oem4.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2012-06-15 8222736]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-27 43832]
R3 SynTP;@oem42.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-08-27 448312]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 btwavdt;@oem37.inf,%btwavdt.SVCDESC%;Bluetooth AVDT Service; C:\WINDOWS\system32\DRIVERS\btwavdt.sys [2012-08-30 212792]
S3 intaud_WaveExtensible;@oem72.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-09-26 39320]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-06 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2012-09-06 957304]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-09-25 2436280]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2014-01-08 631024]
R2 ExpressCache;ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [2012-03-30 79664]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-11-06 1148744]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\HRY\HiPatchService.exe [2014-08-22 9216]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-08-16 7168]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-11-06 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-11-06 19819848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-11-03 935232]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2014-01-08 154864]
S2 BcmBtRSupport;@oem79.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-09-04 2252504]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-03 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc []
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2014-01-08 284912]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-08-14 150600]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119548
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir gosave 2.0 a kontrola

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 zář 2008 15:13

Re: Vir gosave 2.0 a kontrola

#3 Příspěvek od Kakolukian »

Tak vypadá to, že to už zmizelo =)

# AdwCleaner v4.101 - Report created 14/11/2014 at 19:50:33
# Updated 09/11/2014 by Xplode
# Database : 2014-11-13.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Tadeáš - KAKOLUKIAN-PC
# Running from : C:\Users\Tadeáš\Desktop\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\a086cdaae9cc360b
Folder Deleted : C:\Program Files (x86)\Amazon\ABB
Folder Deleted : C:\Program Files (x86)\Probit Software
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\Tadeáš\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Tadeáš\AppData\Local\torch
Folder Deleted : C:\Users\Tadeáš\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Tadeáš\AppData\Roaming\SimilarSites
Folder Deleted : C:\Users\Tadeáš\AppData\Roaming\Mozilla\Firefox\Profiles\dk1hmkym.default\Extensions\WebSiteRecommendation@weliketheweb.com
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgkhdlemhhhegdamkpmheoefgajcbae
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgkhdlemhhhegdamkpmheoefgajcbae
Folder Deleted : C:\Users\Tadeáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgkhdlemhhhegdamkpmheoefgajcbae
Folder Deleted : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hmgkhdlemhhhegdamkpmheoefgajcbae
Folder Deleted : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hmgkhdlemhhhegdamkpmheoefgajcbae
Folder Deleted : C:\Users\Tadeáš\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hmgkhdlemhhhegdamkpmheoefgajcbae
File Deleted : C:\WINDOWS\System32\log\iSafeKrnlCall.log
File Deleted : C:\Users\Tadeáš\AppData\Roaming\Mozilla\Firefox\Profiles\dk1hmkym.default\searchplugins\Babylon.xml

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v

[dk1hmkym.default\prefs.js] - Line Deleted : user_pref("browser.newtab.url", "hxxp://www.dalesearch.com/?babsrc=NT_ss&mntrId ... 0&tsp=5009");
[dk1hmkym.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename", "DaleSearch");
[dk1hmkym.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "DaleSearch");

-\\ Google Chrome v38.0.2125.111

[C:\Users\Tadeáš\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : hmgkhdlemhhhegdamkpmheoefgajcbae

-\\ Chromium v


-\\ Comodo Dragon v


*************************

AdwCleaner[R0].txt - [3186 octets] - [14/11/2014 19:49:02]
AdwCleaner[S0].txt - [3146 octets] - [14/11/2014 19:50:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3206 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119548
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir gosave 2.0 a kontrola

#4 Příspěvek od Rudy »

To jsem rád, ale ještě poprosím o jeden RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 zář 2008 15:13

Re: Vir gosave 2.0 a kontrola

#5 Příspěvek od Kakolukian »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tadeáš at 2014-11-14 22:25:08
Microsoft Windows 8.1
System drive C: has 216 GB (24%) free of 905 GB
Total RAM: 8058 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:25:12, on 14. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\WINDOWS\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tadeáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\Root\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [IntellingentTouchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\Root\Office15\MSOSB.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem79.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: ExpressCache - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\HRY\HiPatchService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 12400 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 797124350512
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\HRY\HiPatchService.exe
dashost.exe {0a84dafb-1e00-4aca-ada2fb42799e2177}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2454c0a6-88c3-4199-8889-c81ef9b8cfee -SystemEventPortName:HostProcess-29ad24e1-dfbf-4f5b-90de-8443a44debcb -IoCancelEventPortName:HostProcess-8bf6903f-e1ba-4440-90aa-8925d17a0838 -NonStateChangingEventPortName:HostProcess-8378a50e-305c-40a5-b478-e4dc12652bf8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:04d99ddd-3eec-470a-803e-483ad223ec3f -DeviceGroupId:WudfDefaultDevicePool
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 254de47c-9442-44db-932d-9a33b82ce78a 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskhostex.exe
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m
"C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\WINDOWS\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2380.0.1055368232\954799135" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3316 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="DomRel-Enable/control/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/None/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/DevHUPScoringExperiment_Control_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderNoUse/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/OneWeek/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="2380.1.914134532\647085422" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/control/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/None/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/DevHUPScoringExperiment_Control_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderNoUse/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/OneWeek/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="2380.2.1956752163\1258603867" /prefetch:673131151
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe -Embedding
taskeng.exe {E9AE3A96-D250-461E-B423-386C69C67D54}
taskeng.exe {CA965EAD-F770-4E75-8325-CBD46D92BEE5}
"C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/control/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/None/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/DevHUPScoringExperiment_Control_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderNoUse/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/OneWeek/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="2380.11.463310829\1646499518" /prefetch:673131151
"C:\Users\Tadeáš\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-08-26 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-06 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-09-25 2334416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\Root\Office15\OCHelper.dll [2014-08-26 153240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-31 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\Root\Office15\GROOVEEX.DLL [2014-09-25 1729232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-31 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2012-08-27 665400]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-07-11 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-07-11 191544]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-27 2916152]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-11-06 2800296]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-10-24 13662936]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-11-05 1361112]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-11-05 1361112]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-11-06 2464072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"cz.seznam.software.autoupdate"=C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Tadeáš\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2012-08-23 56128]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-11-08 139792]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-11-08 168464]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"IntellingentTouchpad"=C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [2012-07-23 673336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-06 4085896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-03 623616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-14 19:48:59 ----D---- C:\AdwCleaner
2014-11-14 18:52:33 ----D---- C:\rsit
2014-11-14 18:52:33 ----D---- C:\Program Files\trend micro
2014-11-14 18:31:53 ----D---- C:\WINDOWS\SYSWOW64\NV
2014-11-14 18:31:53 ----D---- C:\WINDOWS\system32\NV
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvopencl.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2014-11-14 18:29:36 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvdispgenco6434465.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvdispco6434465.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvcuda.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2014-11-14 18:29:35 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2014-11-14 18:25:01 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2014-11-14 18:25:01 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2014-11-13 08:49:03 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-13 08:49:02 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-13 08:48:46 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-13 08:48:45 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-13 08:48:42 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-13 08:48:41 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-13 08:48:14 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-13 08:48:09 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-13 08:48:04 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-13 08:48:02 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-13 08:48:01 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-13 08:48:00 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-13 08:48:00 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-13 08:48:00 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-13 08:47:59 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-13 08:47:59 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-13 08:47:59 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-13 08:47:58 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-13 08:47:58 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-13 08:47:57 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-13 08:47:56 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-13 08:47:56 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-13 08:47:55 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-13 08:47:55 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-13 08:47:54 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-13 08:47:54 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-13 08:47:53 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-13 08:47:52 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-13 08:47:52 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-13 08:47:50 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-13 08:47:50 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-13 08:47:50 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-13 08:47:49 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-13 08:47:48 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-13 08:47:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-13 08:47:47 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-13 08:47:46 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-13 08:47:45 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-13 08:47:45 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-13 08:47:44 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-13 08:47:44 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-13 08:47:43 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-13 08:47:42 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-13 08:47:41 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\url.dll
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-13 08:47:40 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-13 08:47:39 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-13 08:47:39 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-13 08:46:43 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-13 08:46:43 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-13 08:46:42 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-13 08:46:42 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-13 08:46:42 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-13 08:46:19 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-13 08:46:17 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-13 08:46:17 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-13 08:46:15 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-13 08:46:14 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-13 08:46:13 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-13 08:45:24 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-13 08:45:24 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-13 08:45:22 ----A---- C:\WINDOWS\system32\devinv.dll
2014-11-13 08:45:22 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-11-13 08:45:21 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-11-13 08:45:21 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-11-13 08:45:20 ----A---- C:\WINDOWS\system32\aepic.dll
2014-11-13 08:45:18 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-13 08:45:18 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-13 08:45:18 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-11-13 08:45:17 ----A---- C:\WINDOWS\system32\consent.exe
2014-11-13 08:45:17 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-13 08:45:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-13 08:45:11 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-13 08:45:10 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-13 08:45:09 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-13 08:44:27 ----A---- C:\WINDOWS\system32\user32.dll
2014-11-13 08:44:26 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-11-13 08:44:25 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-11-13 08:44:24 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-11-13 08:44:24 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-11-13 08:44:22 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2014-11-13 08:44:22 ----A---- C:\WINDOWS\system32\winshfhc.dll
2014-11-13 08:43:47 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-13 08:43:45 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-13 08:43:44 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-13 08:43:40 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-13 08:43:40 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-13 08:43:39 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-13 08:43:38 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-13 08:43:38 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-13 08:43:38 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-13 08:43:37 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-13 08:43:36 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-13 08:43:36 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-13 08:43:36 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-13 08:43:34 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-13 08:43:34 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-13 08:43:32 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-13 08:43:29 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-13 08:43:28 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-13 08:43:25 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-13 08:43:24 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-13 08:43:24 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-13 08:43:24 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-13 08:43:23 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-13 08:43:22 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-13 08:43:22 ----A---- C:\WINDOWS\system32\PJLMON.DLL
2014-11-13 08:43:22 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 18:29:48 ----A---- C:\autoexec.bat
2014-11-12 18:15:54 ----D---- C:\WINDOWS\system32\log
2014-10-31 07:38:34 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-10-31 07:38:23 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-10-31 07:38:23 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-10-31 07:38:22 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-10-15 05:22:33 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2014-10-15 05:14:02 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-15 05:14:02 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-15 05:14:00 ----A---- C:\WINDOWS\system32\winbici.dll
2014-10-15 05:12:59 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-15 05:12:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-10-15 05:12:57 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-10-15 05:12:57 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-10-15 05:12:57 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-10-15 05:12:55 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-10-15 05:12:55 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-10-15 05:12:55 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-10-15 05:12:54 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-10-15 05:12:54 ----A---- C:\WINDOWS\system32\propsys.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-10-15 05:12:53 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-10-15 05:12:52 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-10-15 05:12:52 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-10-15 05:12:52 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-15 05:12:51 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-10-15 05:12:50 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-15 05:12:50 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-10-15 05:12:50 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-10-15 05:12:49 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-10-15 05:12:48 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-10-15 05:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-15 05:12:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-15 05:12:36 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-10-15 05:12:36 ----A---- C:\WINDOWS\system32\rastls.dll

======List of files/folders modified in the last 1 month======

2014-11-14 22:22:11 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-14 22:22:07 ----D---- C:\WINDOWS\WinSxS
2014-11-14 22:16:59 ----D---- C:\WINDOWS\Temp
2014-11-14 22:15:46 ----D---- C:\Windows
2014-11-14 22:14:37 ----D---- C:\WINDOWS\system32\config
2014-11-14 22:13:25 ----D---- C:\WINDOWS\Prefetch
2014-11-14 22:07:17 ----SHD---- C:\WINDOWS\Installer
2014-11-14 22:07:17 ----RSD---- C:\WINDOWS\assembly
2014-11-14 22:07:17 ----D---- C:\ProgramData\Microsoft Help
2014-11-14 22:00:01 ----D---- C:\WINDOWS\system32\sru
2014-11-14 21:59:49 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-14 19:57:43 ----RD---- C:\WINDOWS\System32
2014-11-14 19:57:43 ----D---- C:\WINDOWS\Inf
2014-11-14 19:57:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 19:57:20 ----D---- C:\Users\Tadeáš\AppData\Roaming\Seznam.cz
2014-11-14 19:53:33 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-11-14 19:51:20 ----D---- C:\WINDOWS\SysWOW64
2014-11-14 19:50:33 ----RD---- C:\Program Files (x86)
2014-11-14 19:50:33 ----HD---- C:\ProgramData
2014-11-14 19:27:47 ----D---- C:\Share-rapid
2014-11-14 18:52:33 ----D---- C:\Program Files
2014-11-14 18:31:49 ----D---- C:\ProgramData\NVIDIA
2014-11-14 18:30:37 ----D---- C:\WINDOWS\system32\drivers
2014-11-14 18:25:51 ----SHD---- C:\System Volume Information
2014-11-14 18:25:14 ----D---- C:\WINDOWS\Logs
2014-11-14 17:02:52 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-14 17:02:52 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-14 17:02:52 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-14 17:02:51 ----D---- C:\WINDOWS\system32\migration
2014-11-14 17:02:51 ----D---- C:\Program Files\Internet Explorer
2014-11-14 17:02:50 ----SD---- C:\WINDOWS\system32\CompatTel
2014-11-14 17:02:50 ----RD---- C:\WINDOWS\ToastData
2014-11-14 17:02:50 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-14 17:02:44 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-14 17:02:43 ----D---- C:\WINDOWS\apppatch
2014-11-14 16:51:32 ----D---- C:\Program Files\Windows Defender
2014-11-14 16:51:32 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-14 12:44:49 ----D---- C:\HRY
2014-11-14 08:00:58 ----HD---- C:\Program Files\WindowsApps
2014-11-14 08:00:58 ----D---- C:\WINDOWS\AppReadiness
2014-11-13 18:29:11 ----D---- C:\WINDOWS\CbsTemp
2014-11-13 18:28:57 ----D---- C:\WINDOWS\system32\wbem
2014-11-13 18:28:23 ----A---- C:\WINDOWS\win.ini
2014-11-13 18:26:36 ----D---- C:\WINDOWS\system32\MRT
2014-11-13 18:23:23 ----A---- C:\WINDOWS\system32\MRT.exe
2014-11-13 08:40:14 ----D---- C:\WINDOWS\system32\catroot2
2014-11-12 18:47:26 ----D---- C:\WINDOWS\system32\drivers\etc
2014-11-12 18:29:30 ----D---- C:\WINDOWS\system32\Tasks
2014-11-10 12:52:12 ----D---- C:\WINDOWS\debug
2014-11-10 12:01:51 ----D---- C:\Users\Tadeáš\AppData\Roaming\DAEMON Tools Lite
2014-11-07 20:54:35 ----RD---- C:\Users
2014-11-07 20:54:35 ----HD---- C:\WINDOWS\system32\GroupPolicy
2014-11-07 20:54:35 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2014-11-07 20:54:35 ----D---- C:\Program Files (x86)\Google
2014-11-06 19:44:28 ----D---- C:\Users\Tadeáš\AppData\Roaming\Skype
2014-11-06 18:06:52 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2014-11-06 18:06:52 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2014-11-06 18:06:33 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2014-11-06 18:06:33 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\system32\nvinitx.dll
2014-11-04 01:04:30 ----A---- C:\WINDOWS\system32\nvapi64.dll
2014-11-03 23:02:42 ----A---- C:\WINDOWS\system32\nvcpl.dll
2014-11-03 23:02:41 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvshext.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nvmctray.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2014-11-03 23:02:38 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2014-11-02 08:49:10 ----D---- C:\WINDOWS\system32\NDF
2014-10-31 07:38:56 ----D---- C:\ProgramData\Oracle
2014-10-31 07:38:49 ----D---- C:\Program Files (x86)\Common Files
2014-10-31 07:38:14 ----D---- C:\Program Files (x86)\Java
2014-10-30 01:55:02 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-10-25 08:12:26 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-10-25 08:10:20 ----D---- C:\Program Files\Microsoft Office 15
2014-10-23 17:09:57 ----D---- C:\WINDOWS\Tasks
2014-10-16 17:44:02 ----D---- C:\WINDOWS\rescache
2014-10-16 06:56:49 ----D---- C:\WINDOWS\system32\catroot
2014-10-15 23:35:35 ----D---- C:\WINDOWS\MediaViewer
2014-10-15 23:35:35 ----D---- C:\WINDOWS\FileManager
2014-10-15 23:35:35 ----D---- C:\WINDOWS\Camera
2014-10-15 23:35:33 ----D---- C:\WINDOWS\WinStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-08-06 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-08-06 224896]
R0 excsd;ExpressCache Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\excsd.sys [2012-03-30 95024]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-07-11 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-11-04 32576]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-08-06 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-08-06 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-08-06 427360]
R1 dtsoftbus01;@oem50.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2013-10-20 283064]
R1 excfs;ExpressCache File System Filter Driver; C:\WINDOWS\system32\DRIVERS\excfs.sys [2012-03-30 23344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-08-06 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-08-06 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-08-06 92008]
R3 ACPIVPC;@oem46.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-07-11 33560]
R3 bcbtums;@oem79.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 btwampfl;@oem79.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-09-04 166104]
R3 clwvd;@oem63.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\WINDOWS\system32\DRIVERS\clwvd.sys [2012-06-26 36336]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-03 4185600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-11-05 3707864]
R3 IntcDAud;@oem35.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem73.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-09-26 27032]
R3 JMCR;JMCR; C:\WINDOWS\System32\drivers\jmcr.sys [2012-06-22 174176]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem65.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 NETwNe64;@oem92.inf,___ %NIC_Service_DispName_WIN8_64%;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 8 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [2014-02-25 3349984]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-11-04 13207184]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-11-06 19784]
R3 nvvad_WaveExtensible;@oem101.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-10-03 38216]
R3 rtsuvc;@oem4.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2012-06-15 8222736]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-27 43832]
R3 SynTP;@oem42.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-08-27 448312]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 btwavdt;@oem37.inf,%btwavdt.SVCDESC%;Bluetooth AVDT Service; C:\WINDOWS\system32\DRIVERS\btwavdt.sys [2012-08-30 212792]
S3 intaud_WaveExtensible;@oem72.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-09-26 39320]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-06 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2012-09-06 957304]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-09-25 2436280]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2014-01-08 631024]
R2 ExpressCache;ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [2012-03-30 79664]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-11-06 1148744]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\HRY\HiPatchService.exe [2014-08-22 9216]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-08-16 7168]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-11-06 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-11-06 19819848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-11-03 935232]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2014-01-08 154864]
S2 BcmBtRSupport;@oem79.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-09-04 2252504]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-03 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc []
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2014-01-08 284912]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-08-14 150600]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119548
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir gosave 2.0 a kontrola

#6 Příspěvek od Rudy »

Log je již čistý. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. PC by již měl být čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Kakolukian
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 22 zář 2008 15:13

Re: Vir gosave 2.0 a kontrola

#7 Příspěvek od Kakolukian »

Hotovo, děkuji mnohokrát za pomoc. Chodím sem už pár let a vždycky při nějakém problému jste mi pomohli. Takže ještě jednou díky. Můžete to tady uzavřít.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119548
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir gosave 2.0 a kontrola

#8 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“