Zablokovane URL

Zpráva

to_je_jedno · #1 Příspěvek od **to_je_jedno** » 16 črc 2015 16:29

Zdravím! nějaký bordel mě přesměrovává URL.
Prosím o pomoc.
log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by CML at 2015-07-16 17:18:30
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 40 GB (16%) free of 250 GB
Total RAM: 5934 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:19:07, on 16.7.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe
C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe
C:\Program Files (x86)\LG Software\LG Smart Share\DMC\Aggregation.exe
C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
C:\Program Files (x86)\LG Software\LG Smart Share\DMS\AutoThumb.exe
C:\Program Files\trend micro\CML.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 199.59.62.24 www.malwaretips.com
O1 - Hosts: 199.59.62.24 malwareremovalguides.info
O1 - Hosts: 199.59.62.24 onlinevirusrepair.com
O1 - Hosts: 199.59.62.24 enigmasoftware.com
O1 - Hosts: 199.59.62.24 pcrisk.com
O1 - Hosts: 199.59.62.24 malwarebytes.org/
O1 - Hosts: 199.59.62.24 tomshardware.co.uk
O1 - Hosts: 199.59.62.24 malwaretips.com
O1 - Hosts: 199.59.62.24 answers.yahoo.com
O1 - Hosts: 199.59.62.24 www.malwareremovalguides.info
O1 - Hosts: 199.59.62.24 www.onlinevirusrepair.com
O1 - Hosts: 199.59.62.24 www.enigmasoftware.com
O1 - Hosts: 199.59.62.24 www.pcrisk.com
O1 - Hosts: 199.59.62.24 guides.yoosecurity.com
O1 - Hosts: 199.59.62.24 www.malwarebytes.org/
O1 - Hosts: 199.59.62.24 www.tomshardware.co.uk
O1 - Hosts: 199.59.62.24 www.gmail.com
O1 - Hosts: 199.59.62.24 gmail.com
O1 - Hosts: 199.59.62.24 www.hotmail.com
O1 - Hosts: 199.59.62.24 hotmail.com
O1 - Hosts: 199.59.62.24 www.mail.ru
O1 - Hosts: 199.59.62.24 mail.ru
O1 - Hosts: 199.59.62.24 www.torrentz.eu
O1 - Hosts: 199.59.62.24 torrentz.eu
O1 - Hosts: 199.59.62.24 www.kat.ph
O1 - Hosts: 199.59.62.24 kat.ph
O1 - Hosts: 199.59.62.24 www.thepiratebay.se
O1 - Hosts: 199.59.62.24 thepiratebay.se
O1 - Hosts: 199.59.62.24 www.thepiratebay.org
O1 - Hosts: 199.59.62.24 thepiratebay.org
O1 - Hosts: 199.59.62.24 www.ehow.com
O1 - Hosts: 199.59.62.24 ehow.com
O1 - Hosts: 199.59.62.24 www.imeetzu.com
O1 - Hosts: 199.59.62.24 imeetzu.com
O1 - Hosts: 199.59.62.24 www.omegle.com
O1 - Hosts: 199.59.62.24 omegle.com
O1 - Hosts: 199.59.62.24 www.runescape.com
O1 - Hosts: 199.59.62.24 runescape.com
O1 - Hosts: 199.59.62.24 google.com
O1 - Hosts: 199.59.62.24 www.google.com
O1 - Hosts: 199.59.62.24 leagueoflegends.com
O1 - Hosts: 199.59.62.24 www.leagueoflegends.com
O1 - Hosts: 199.59.62.24 www.google.ae
O1 - Hosts: 199.59.62.24 www.google.com.af
O1 - Hosts: 199.59.62.24 www.google.com.ag
O1 - Hosts: 199.59.62.24 www.google.off.ai
O1 - Hosts: 199.59.62.24 www.google.am
O1 - Hosts: 199.59.62.24 www.google.com.ar
O1 - Hosts: 199.59.62.24 www.google.as
O1 - Hosts: 199.59.62.24 www.google.at
O1 - Hosts: 199.59.62.24 www.google.com.au
O1 - Hosts: 199.59.62.24 www.google.az
O1 - Hosts: 199.59.62.24 www.google.ba
O1 - Hosts: 199.59.62.24 www.google.com.bd
O1 - Hosts: 199.59.62.24 www.google.be
O1 - Hosts: 199.59.62.24 www.google.bg
O1 - Hosts: 199.59.62.24 www.google.com.bh
O1 - Hosts: 199.59.62.24 www.google.bi
O1 - Hosts: 199.59.62.24 www.google.com.bo
O1 - Hosts: 199.59.62.24 www.google.com.br
O1 - Hosts: 199.59.62.24 www.google.bs
O1 - Hosts: 199.59.62.24 www.google.co.bw
O1 - Hosts: 199.59.62.24 www.google.com.bz
O1 - Hosts: 199.59.62.24 www.google.ca
O1 - Hosts: 199.59.62.24 www.google.cd
O1 - Hosts: 199.59.62.24 www.google.cg
O1 - Hosts: 199.59.62.24 www.google.ch
O1 - Hosts: 199.59.62.24 www.google.ci
O1 - Hosts: 199.59.62.24 www.google.co.ck
O1 - Hosts: 199.59.62.24 www.google.cl
O1 - Hosts: 199.59.62.24 www.google.cn
O1 - Hosts: 199.59.62.24 www.google.com.co
O1 - Hosts: 199.59.62.24 www.google.co.cr
O1 - Hosts: 199.59.62.24 www.google.com.cu
O1 - Hosts: 199.59.62.24 www.google.cz
O1 - Hosts: 199.59.62.24 www.google.de
O1 - Hosts: 199.59.62.24 www.google.dj
O1 - Hosts: 199.59.62.24 www.google.dk
O1 - Hosts: 199.59.62.24 www.google.dm
O1 - Hosts: 199.59.62.24 www.google.com.do
O1 - Hosts: 199.59.62.24 www.google.com.ec
O1 - Hosts: 199.59.62.24 www.google.ee
O1 - Hosts: 199.59.62.24 www.google.com.eg
O1 - Hosts: 199.59.62.24 www.google.es
O1 - Hosts: 199.59.62.24 www.google.com.et
O1 - Hosts: 199.59.62.24 www.google.fi
O1 - Hosts: 199.59.62.24 www.google.com.fj
O1 - Hosts: 199.59.62.24 www.google.fm
O1 - Hosts: 199.59.62.24 www.google.fr
O1 - Hosts: 199.59.62.24 www.google.ge
O1 - Hosts: 199.59.62.24 www.google.gg
O1 - Hosts: 199.59.62.24 www.google.com.gi
O1 - Hosts: 199.59.62.24 www.google.gl
O1 - Hosts: 199.59.62.24 www.google.gm
O1 - Hosts: 199.59.62.24 www.google.gr
O1 - Hosts: 199.59.62.24 www.google.com.gt
O1 - Hosts: 199.59.62.24 www.google.gy
O1 - Hosts: 199.59.62.24 www.google.com.hk
O1 - Hosts: 199.59.62.24 www.google.hn
O1 - Hosts: 199.59.62.24 www.google.hr
O1 - Hosts: 199.59.62.24 www.google.ht
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ESL Wire] "C:\Program Files\EslWire\wire.exe" --tray
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: SRS Premium Sound.lnk = ?
O4 - Global Startup: Start GeekBuddy.lnk = C:\Program Files\COMODO\GeekBuddy\launcher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESL Wire Helper Service (EslWireHelper) - Unknown owner - C:\Program Files\EslWire\service\WireHelperSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: GeekBuddyRSP Server (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: O&O Defrag - Unknown owner - C:\Windows\system32\oodag.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14611 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k utcsvc
taskeng.exe {85184ECF-C505-496C-A2BF-8B0CCA04635D}
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files\EslWire\service\WireHelperSvc.exe"
"C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -service
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\svchost.exe -k bthaudiosvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\oodag.exe
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\oodtray.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
ATKOSD.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" d246334c-454f-40ce-ab00-2c01842987b7 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files\EslWire\wire.exe" --tray
\??\C:\Windows\system32\conhost.exe "-1581760720-19231438-17227782451836453969-278052908895946161989736945-1329305065
\??\C:\Windows\system32\conhost.exe "-198132538275037539-1222740758-27640890-3184083794386470281890006791-463642472
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
WDC.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\COMODO\GeekBuddy\unit_manager.exe"
"C:\Program Files\COMODO\GeekBuddy\unit" "\"C:/Program Files/COMODO/GeekBuddy/lps-cspm\""
taskeng.exe {F8BF9C3C-66FA-4321-BA6B-C09450380970}
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-27e6e154-5a74-4474-ad4d-e7445ea35f1f -SystemEventPortName:HostProcess-32b62c19-9909-401d-b968-729462cd2176 -IoCancelEventPortName:HostProcess-4f93c31d-f6ef-44f7-9e97-c178c319dfbb -NonStateChangingEventPortName:HostProcess-0b6fb00a-4559-45a4-bcf7-f40e7a26dd95 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1c54dc99-0046-4a5d-a708-74cfcb5e16a9 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\CML\AppData\Local\Steam\htmlcache" -steampid 3236 -buildid 1433441724 -steamid "0" --disable-gpu-compositing --disable-gpu --enable-threaded-compositing --disable-pinch-virtual-viewport --process-per-tab --disable-spell-checking --enable-direct-write
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\wuauclt.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 868 872 880 65536 876
"C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe" start
"C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe" -autoservice
"C:\Users\CML\Downloads\RSITx64.exe"
"C:\Program Files (x86)\LG Software\LG Smart Share\DMC\Aggregation.exe" aggregation
"C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe" -autoservice
"C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe" -autoservice
"C:\Program Files (x86)\LG Software\LG Smart Share\DMS\AutoThumb.exe" -autoservice
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\SysWOW64\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4bf3a9d70813.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf696c47958b4.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf8cfec30a830d.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.3.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default\extensions\
info@djzig.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-07 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-07 210856]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-12-10 9643552]
"OODefragTray"=C:\Windows\system32\oodtray.exe [2009-04-08 3868928]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-06-09 1427648]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-02 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-02 391960]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-02 419096]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-28 2754704]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-23 1571696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-07-02 2892992]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"ESL Wire"=C:\Program Files\EslWire\wire.exe [2014-12-15 3771904]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-06-10 8322328]
"GalaxyClient"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2009-10-21 106496]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2009-10-26 6998656]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2009-08-19 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"tvncontrol"=C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2015-06-10 2327248]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
Start GeekBuddy.lnk - C:\Program Files\COMODO\GeekBuddy\launcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-05-24 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-07-16 17:18:31 ----D---- C:\Program Files\trend micro
2015-07-16 17:18:30 ----D---- C:\rsit
2015-07-13 20:03:54 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-13 20:03:54 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-13 19:57:54 ----A---- C:\Windows\system32\mstscax.dll
2015-07-13 19:57:53 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-07-13 19:57:53 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-07-13 19:57:50 ----A---- C:\Windows\system32\win32k.sys
2015-07-13 19:57:46 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-07-13 19:57:46 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-07-13 19:57:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-07-13 19:57:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-07-13 19:57:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-07-13 19:57:45 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-13 19:57:45 ----A---- C:\Windows\system32\iernonce.dll
2015-07-13 19:57:45 ----A---- C:\Windows\system32\ie4uinit.exe
2015-07-13 19:57:44 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-07-13 19:57:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-07-13 19:57:44 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-07-13 19:57:44 ----A---- C:\Windows\system32\urlmon.dll
2015-07-13 19:57:44 ----A---- C:\Windows\system32\iedkcs32.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-07-13 19:57:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-13 19:57:43 ----A---- C:\Windows\system32\msfeeds.dll
2015-07-13 19:57:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-07-13 19:57:43 ----A---- C:\Windows\system32\dxtrans.dll
2015-07-13 19:57:42 ----A---- C:\Windows\system32\iesetup.dll
2015-07-13 19:57:42 ----A---- C:\Windows\system32\iertutil.dll
2015-07-13 19:57:42 ----A---- C:\Windows\system32\ieapfltr.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-07-13 19:57:41 ----A---- C:\Windows\system32\vbscript.dll
2015-07-13 19:57:41 ----A---- C:\Windows\system32\jsproxy.dll
2015-07-13 19:57:41 ----A---- C:\Windows\system32\ieUnatt.exe
2015-07-13 19:57:40 ----A---- C:\Windows\system32\mshtmled.dll
2015-07-13 19:57:40 ----A---- C:\Windows\system32\ieui.dll
2015-07-13 19:57:40 ----A---- C:\Windows\system32\ieframe.dll
2015-07-13 19:57:40 ----A---- C:\Windows\system32\dxtmsft.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\wininet.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\jscript9diag.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\jscript9.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\jscript.dll
2015-07-13 19:57:38 ----A---- C:\Windows\system32\msrating.dll
2015-07-13 19:57:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-07-13 19:57:38 ----A---- C:\Windows\system32\mshtml.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-07-13 19:57:30 ----A---- C:\Windows\system32\wuauclt.exe
2015-07-13 19:57:30 ----A---- C:\Windows\system32\wuapp.exe
2015-07-13 19:57:30 ----A---- C:\Windows\system32\wuapi.dll
2015-07-13 19:57:30 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wuwebv.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wups2.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wups.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wudriver.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wucltux.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wuaueng.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-07-13 19:57:23 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-07-13 19:57:23 ----A---- C:\Windows\system32\drmv2clt.dll
2015-07-13 19:57:23 ----A---- C:\Windows\system32\blackbox.dll
2015-07-13 19:57:22 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-07-13 19:57:20 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-07-13 19:57:20 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-07-13 19:57:20 ----A---- C:\Windows\system32\mf.dll
2015-07-13 19:57:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-07-13 19:57:19 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-07-13 19:57:14 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-07-13 19:57:14 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-07-13 19:57:14 ----A---- C:\Windows\system32\crypt32.dll
2015-07-13 19:57:13 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-07-13 19:57:13 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-07-13 19:57:13 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\wintrust.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\winresume.exe
2015-07-13 19:57:13 ----A---- C:\Windows\system32\winload.exe
2015-07-13 19:57:13 ----A---- C:\Windows\system32\quartz.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\evr.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-07-13 19:57:13 ----A---- C:\Windows\system32\cryptsvc.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\ci.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\audiosrv.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\qdvd.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\pcasvc.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\mfplat.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\EncDump.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-07-13 19:57:12 ----A---- C:\Windows\system32\cryptui.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\cryptsp.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\AudioSes.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\AudioEng.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\msscp.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\msnetobj.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\drivers\appid.sys
2015-07-13 19:57:11 ----A---- C:\Windows\system32\cryptnet.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\audiodg.exe
2015-07-13 19:57:11 ----A---- C:\Windows\system32\appidsvc.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\appidapi.dll
2015-07-13 19:57:10 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-07-13 19:57:10 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-07-13 19:57:10 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\rrinstaller.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\pcawrk.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\pcalua.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\pcadm.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\msmmsp.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\mfps.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\mfpmp.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-07-13 19:57:09 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-07-13 19:57:09 ----A---- C:\Windows\system32\pcaevts.dll
2015-07-13 19:57:09 ----A---- C:\Windows\system32\mferror.dll
2015-07-13 19:57:09 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-07-13 19:56:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-07-13 19:56:55 ----A---- C:\Windows\system32\UtcResources.dll
2015-07-13 19:56:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-07-13 19:56:55 ----A---- C:\Windows\system32\ntdll.dll
2015-07-13 19:56:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-07-13 19:56:55 ----A---- C:\Windows\system32\diagtrack.dll
2015-07-13 19:56:54 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-07-13 19:56:54 ----A---- C:\Windows\system32\schannel.dll
2015-07-13 19:56:54 ----A---- C:\Windows\system32\kerberos.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\wow64win.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\wow64.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\winsrv.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\TSpkg.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\tdh.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\srcore.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\ncrypt.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\msv1_0.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\KernelBase.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\kernel32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-07-13 19:56:53 ----A---- C:\Windows\system32\conhost.exe
2015-07-13 19:56:53 ----A---- C:\Windows\system32\advapi32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\adtschema.dll
2015-07-13 19:56:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-13 19:56:52 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\wdigest.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\typeperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\tracerpt.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\sspisrv.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\sspicli.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\srclient.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\smss.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\sechost.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\secur32.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\rstrui.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\relog.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\ntvdm64.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\msaudite.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\lsass.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\logman.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-07-13 19:56:52 ----A---- C:\Windows\system32\diskperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\csrsrv.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\credssp.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\auditpol.exe
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\user.exe
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-07-13 19:56:51 ----A---- C:\Windows\system32\wow64cpu.dll
2015-07-13 19:56:51 ----A---- C:\Windows\system32\msobjs.dll
2015-07-13 19:56:51 ----A---- C:\Windows\system32\apisetschema.dll
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDRU.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-07-13 19:56:33 ----A---- C:\Windows\system32\drivers\cng.sys
2015-07-13 19:56:18 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-07-13 19:56:18 ----A---- C:\Windows\system32\certcli.dll
2015-07-13 19:56:12 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-07-13 19:56:12 ----A---- C:\Windows\system32\FntCache.dll
2015-07-13 19:56:12 ----A---- C:\Windows\system32\DWrite.dll
2015-07-13 19:56:08 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2015-07-13 19:56:08 ----A---- C:\Windows\system32\pku2u.dll
2015-07-13 19:56:00 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2015-07-13 19:56:00 ----A---- C:\Windows\system32\poqexec.exe
2015-07-13 19:55:59 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-07-13 19:55:59 ----A---- C:\Windows\system32\shell32.dll
2015-07-13 19:55:55 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-07-13 19:55:52 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-07-13 19:55:52 ----A---- C:\Windows\system32\jnwmon.dll
2015-07-13 19:55:52 ----A---- C:\Windows\system32\InkEd.dll
2015-07-13 19:55:51 ----A---- C:\Windows\system32\profsvc.dll
2015-07-13 19:55:44 ----A---- C:\Windows\system32\msxml3.dll
2015-07-13 19:55:43 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-07-13 19:55:43 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-07-13 19:55:43 ----A---- C:\Windows\system32\msxml3r.dll
2015-07-13 19:55:42 ----A---- C:\Windows\system32\drivers\stream.sys
2015-07-13 19:55:41 ----A---- C:\Windows\system32\wmp.dll
2015-07-13 19:55:40 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-07-13 19:55:39 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-07-13 19:55:39 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-07-13 19:55:39 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-07-13 19:55:39 ----A---- C:\Windows\system32\wmploc.DLL
2015-07-13 19:55:39 ----A---- C:\Windows\system32\spwmp.dll
2015-07-13 19:55:39 ----A---- C:\Windows\system32\dxmasf.dll
2015-07-13 19:55:36 ----A---- C:\Windows\system32\termsrv.dll
2015-07-13 19:55:31 ----A---- C:\Windows\SYSWOW64\mscories.dll
2015-07-13 19:55:31 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2015-07-13 19:55:31 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2015-07-13 19:55:31 ----A---- C:\Windows\system32\mscories.dll
2015-07-13 19:55:31 ----A---- C:\Windows\system32\mscorier.dll
2015-07-13 19:55:31 ----A---- C:\Windows\system32\dfshim.dll
2015-07-13 19:55:30 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-07-13 19:55:30 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-07-13 19:55:29 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2015-07-13 19:55:29 ----A---- C:\Windows\system32\IMJP10K.DLL
2015-07-13 19:55:27 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-07-13 19:55:27 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-07-13 19:55:27 ----A---- C:\Windows\system32\nlasvc.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\ubpm.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\lpk.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\fontsub.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\dciman32.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\atmlib.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\atmfd.dll
2015-07-13 19:55:16 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2015-07-13 19:55:16 ----A---- C:\Windows\system32\gdi32.dll
2015-07-13 19:55:16 ----A---- C:\Windows\system32\comctl32.dll
2015-07-13 19:55:15 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-07-13 19:55:15 ----A---- C:\Windows\system32\oleaut32.dll
2015-07-13 19:55:14 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-07-13 19:55:14 ----A---- C:\Windows\SYSWOW64\charmap.exe
2015-07-13 19:55:14 ----A---- C:\Windows\system32\charmap.exe
2015-07-13 19:55:13 ----A---- C:\Windows\system32\services.exe
2015-07-13 19:55:13 ----A---- C:\Windows\system32\drivers\http.sys
2015-07-13 19:55:12 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-07-13 19:55:12 ----A---- C:\Windows\system32\wpdshext.dll
2015-07-13 19:55:11 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-07-13 19:55:11 ----A---- C:\Windows\system32\tzres.dll
2015-07-13 19:55:05 ----A---- C:\Windows\system32\mstsc.exe
2015-07-13 19:55:04 ----A---- C:\Windows\SYSWOW64\winsta.dll
2015-07-13 19:55:04 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2015-07-13 19:55:04 ----A---- C:\Windows\system32\winsta.dll
2015-07-13 19:55:04 ----A---- C:\Windows\system32\winlogon.exe
2015-07-13 19:55:04 ----A---- C:\Windows\system32\rdpcorekmts.dll
2015-07-13 19:55:04 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2015-07-13 19:55:04 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2015-07-13 19:54:40 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-07-13 19:54:40 ----A---- C:\Windows\system32\msi.dll
2015-07-13 19:54:28 ----A---- C:\Windows\SYSWOW64\packager.dll
2015-07-13 19:54:28 ----A---- C:\Windows\system32\packager.dll
2015-07-13 19:53:29 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WsmWmiPl.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WsmSvc.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WsmAuto.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2015-07-13 19:53:27 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-07-13 19:53:27 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-07-13 19:53:27 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-07-13 19:53:27 ----A---- C:\Windows\system32\shimeng.dll
2015-07-13 19:53:27 ----A---- C:\Windows\system32\sdbinst.exe
2015-07-13 19:53:27 ----A---- C:\Windows\system32\apphelp.dll
2015-07-13 19:53:27 ----A---- C:\Windows\system32\aelupsvc.dll
2015-07-13 19:53:26 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-07-13 19:53:26 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-07-13 19:53:25 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-07-13 19:53:25 ----A---- C:\Windows\system32\scesrv.dll
2015-07-13 19:53:22 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-07-13 19:53:22 ----A---- C:\Windows\system32\msctf.dll
2015-07-13 19:53:21 ----A---- C:\Windows\SYSWOW64\rastls.dll
2015-07-13 19:53:21 ----A---- C:\Windows\system32\rastls.dll
2015-07-13 19:44:30 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-07-13 19:44:30 ----A---- C:\Windows\system32\clfsw32.dll
2015-07-13 19:44:30 ----A---- C:\Windows\system32\clfs.sys
2015-07-13 19:39:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-07-13 19:39:42 ----A---- C:\Windows\system32\WMPhoto.dll
2015-07-09 18:07:18 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2015-07-16 17:18:52 ----D---- C:\Windows\Prefetch
2015-07-16 17:18:31 ----RD---- C:\Program Files
2015-07-16 17:17:47 ----D---- C:\Windows\Temp
2015-07-16 17:17:27 ----D---- C:\Windows\system32\config
2015-07-16 17:14:10 ----D---- C:\Program Files (x86)\Steam
2015-07-16 17:13:57 ----D---- C:\ProgramData\NVIDIA
2015-07-16 16:46:12 ----D---- C:\KMPlayer
2015-07-15 22:39:02 ----SHD---- C:\Windows\Installer
2015-07-15 22:34:24 ----RD---- C:\Program Files (x86)
2015-07-15 22:34:20 ----D---- C:\Windows\Tasks
2015-07-15 19:58:20 ----D---- C:\Windows\SysWOW64
2015-07-15 19:58:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-07-14 18:03:33 ----D---- C:\Windows\rescache
2015-07-14 17:38:43 ----D---- C:\Windows\Microsoft.NET
2015-07-14 17:38:13 ----RSD---- C:\Windows\assembly
2015-07-14 17:26:32 ----D---- C:\Windows\system32\Tasks
2015-07-14 17:18:49 ----AD---- C:\Windows\System32
2015-07-14 17:18:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-07-14 17:18:48 ----D---- C:\Windows\inf
2015-07-14 17:12:45 ----D---- C:\Windows\winsxs
2015-07-14 17:12:41 ----D---- C:\Windows\system32\catroot2
2015-07-14 17:10:35 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-14 17:10:35 ----AD---- C:\Windows
2015-07-14 17:08:00 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-07-14 17:08:00 ----D---- C:\Windows\system32\cs-CZ
2015-07-14 17:07:59 ----D---- C:\Program Files\Windows Media Player
2015-07-14 17:07:59 ----D---- C:\Program Files (x86)\Windows Media Player
2015-07-14 17:07:57 ----SD---- C:\ProgramData\Microsoft
2015-07-14 17:07:57 ----D---- C:\Windows\system32\drivers
2015-07-14 17:07:57 ----D---- C:\Windows\AppPatch
2015-07-14 17:07:55 ----D---- C:\Windows\SYSWOW64\Dism
2015-07-14 17:07:51 ----D---- C:\Windows\system32\en-US
2015-07-14 17:07:51 ----D---- C:\Windows\system32\Dism
2015-07-14 17:07:51 ----D---- C:\Windows\system32\CodeIntegrity
2015-07-14 17:07:51 ----D---- C:\Windows\system32\Boot
2015-07-14 17:07:50 ----D---- C:\Windows\system32\AdvancedInstallers
2015-07-14 17:07:50 ----D---- C:\Program Files\Windows Journal
2015-07-14 17:07:49 ----RSD---- C:\Windows\Fonts
2015-07-14 17:07:44 ----D---- C:\Windows\SYSWOW64\en-US
2015-07-14 17:07:44 ----D---- C:\Program Files\Internet Explorer
2015-07-14 17:07:43 ----D---- C:\Windows\PolicyDefinitions
2015-07-14 17:07:43 ----D---- C:\Program Files (x86)\Internet Explorer
2015-07-14 17:06:29 ----D---- C:\Windows\system32\DriverStore
2015-07-14 17:06:28 ----D---- C:\Windows\system32\drivers\UMDF
2015-07-13 20:43:51 ----D---- C:\Windows\system32\catroot
2015-07-13 20:31:44 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-07-13 20:24:44 ----A---- C:\Windows\system32\HFGService_PS.dll
2015-07-13 20:24:44 ----A---- C:\Windows\system32\HFGService.dll
2015-07-13 20:22:38 ----SHD---- C:\System Volume Information
2015-07-13 20:08:18 ----D---- C:\Windows\system32\MRT
2015-07-13 20:08:18 ----D---- C:\Windows\debug
2015-07-13 20:08:11 ----A---- C:\Windows\system32\MRT.exe
2015-07-13 18:34:36 ----D---- C:\Program Files (x86)\TeamViewer
2015-07-12 21:40:23 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ESLWireAC;ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [2014-01-12 184968]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2015-03-29 31376]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CFRMD;CFRMD; C:\Windows\system32\DRIVERS\CFRMD.sys [2014-06-26 37976]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-06-05 20672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-06-05 797256]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-06-05 45856]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-28 283064]
R1 HMD;COMODO livePCsupport Hardware Monitor Driver; C:\Windows\system32\DRIVERS\hmd.sys [2014-06-26 14888]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-06-05 104584]
R1 TsLwWfF;WiFi Capture Driver; C:\Windows\system32\DRIVERS\TsLwWfF.sys [2013-07-26 29384]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 BthAudioHF;BthAudioHF Service; C:\Windows\system32\DRIVERS\BthAudioHF.sys [2015-07-13 52224]
R3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2015-07-13 29184]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-05-24 12259712]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-12-10 2222624]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-06-10 57344]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\NETw1v64.sys [2009-07-20 7058432]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2009-10-26 75264]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2009-10-26 176640]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-23 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-05-28 38032]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SaiK0CCC;SaiK0CCC; C:\Windows\system32\DRIVERS\SaiK0CCC.sys [2012-09-20 180544]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU0CCC;SaiU0CCC; C:\Windows\system32\DRIVERS\SaiU0CCC.sys [2012-09-20 47168]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 CV2K1;CommView Network Monitor; C:\Windows\system32\DRIVERS\cv2k1.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-09-23 16088]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-04-17 27760]
S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2014-09-23 30424]
S3 NETw5s64;Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2010-03-17 7680512]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;Sony sa0104 ADB Interface; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-14 82128]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-11-09 96896]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [2015-06-10 70848]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-06-09 5541960]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-11-27 2370240]
R2 EslWireHelper;ESL Wire Helper Service; C:\Program Files\EslWire\service\WireHelperSvc.exe [2014-12-15 663056]
R2 GeekBuddyRSP;GeekBuddyRSP Server; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2015-06-10 2327248]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-28 1152656]
R2 HFGService;Handsfree Headset Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-28 1893008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-28 23006864]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-29 932040]
R2 O&O Defrag;O&O Defrag; C:\Windows\system32\oodag.exe [2009-04-08 2020608]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-03-29 76152]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-29 409800]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-06-23 5495056]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-07-02 837312]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-19 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15 268976]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-06-09 2265792]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-05-28 6516280]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-19 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-13 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-07-11 148136]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 16 črc 2015 16:30

Zdravim

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

to_je_jedno · #3 Příspěvek od **to_je_jedno** » 16 črc 2015 17:58

Nevim jestli je normalni ze test trval pres hodinu.
Kazdopadne start systemu trval asi 5 minut. URL uz asi nic neblokuje

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by CML on źt 16.07.2015 at 17:34:27,69.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\CML\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

16.7.2015 17:35:59 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\Program Files\VibrateGameDeviceDriver deleted successfully
C:\PROGRA~3\Comodo Downloader deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\Users\CML\AppData\Roaming\Publish Providers deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1885490803-553739532-2145529505-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.centrum.cz/");
user_pref("browser.search.suggest.enabled", false);

Added to C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\AGEIA Technologies not found
C:\Users\CML\.android deleted
C:\PROGRA~2\GUT8941.tmp deleted
C:\PROGRA~2\GUTCCB2.tmp deleted
C:\PROGRA~2\GUM8940.tmp deleted
C:\PROGRA~2\GUMCCB1.tmp deleted
C:\PROGRA~2\Photoshop CS5 portable deleted
C:\Users\CML\AppData\Roaming\cdr.ini deleted
C:\PROGRA~3\Package Cache deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

ProfilePath: C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default
- LavaFox V2 - %ProfilePath%\extensions\info@djzig.com
- 1-Click YouTube Video Downloader - %ProfilePath%\extensions\YoutubeDownloader@PeterOlayev.com.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default
FD82108FD60B63010325D9AF6F00AF99 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll - Shockwave Flash

==== Chromium Look ======================

==== Chromium Startpages ======================

C:\Users\CML\AppData\Local\Google\Chrome\User Data\Default\Preferences
,"48":"images/icon48.png"},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","identity","metricsPrivate","notifications","pushMessaging","storage","tabs","webstorePrivate","\u003Call_urls>"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\36.0.1985.143\\resources\\google_now","preferences":{},"regular_only_preferences":{},"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"x","creation_flags":137,"events":[],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"has_declarative_rules":{"declarativeContent":{"onPageChanged":false},"declarativeWebRequest":{"onRequest":false}},"install_time":"13034636633733430","lastpingday":"13068288013767809","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"cs","default_locale":"en","description":"RychlĂ˝ e-mail s moĹľnostĂ vyhledĂˇvĂˇnĂ a menĹˇĂm mnoĹľstvĂm spamu.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Gmail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/upda ... k_tries":0}}

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://us.yahoo.com?fr=fp-comodo"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\CML\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\CML\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\CML\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\CML\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\CML\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\CML\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\CML\AppData\Local\Mozilla\Firefox\Profiles\8h9w1e09.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\CML\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1378 folders=353 543613718 bytes)

==== Empty Temp Folders ======================

C:\Users\CML\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\CML\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 16.07.2015 at 18:54:49,78 ======================

#4 Příspěvek od **vyosek** » 17 črc 2015 10:52

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

to_je_jedno · #5 Příspěvek od **to_je_jedno** » 17 črc 2015 14:27

zde log z Adw:
# AdwCleaner v4.208 - Log vytvořen 17/07/2015 v 15:22:25
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-15.1 [Server]
# Operační system : Windows 7 Professional Service Pack 1 (x64)
# Uživatelské jméno : CML - CML-SOWINEC
# Spuštěno z : C:\Users\CML\Downloads\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

Soubor Smazáno : C:\Users\Public\Desktop\GeekBuddy.lnk
Soubor Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\GeekBuddyRSP

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Mozilla Firefox v39.0 (x86 cs)

-\\ Google Chrome v43.0.2357.134

-\\ Comodo Dragon v36.1.1.21

*************************

AdwCleaner[R0].txt - [1036 bytů] - [17/07/2015 15:21:05]
AdwCleaner[S0].txt - [960 bytů] - [17/07/2015 15:22:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1017 bytů] ##########

Problémy se zdají být vyřešeny. Z čeho to mohlo být?
Ješte přikládám aktuální RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by CML at 2015-07-17 15:27:08
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 42 GB (17%) free of 250 GB
Total RAM: 5934 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:27:18, on 17.7.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe
C:\Program Files\trend micro\CML.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ESL Wire] "C:\Program Files\EslWire\wire.exe" --tray
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESL Wire Helper Service (EslWireHelper) - Unknown owner - C:\Program Files\EslWire\service\WireHelperSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: GeekBuddyRSP Server (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: O&O Defrag - Unknown owner - C:\Windows\system32\oodag.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9814 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\svchost.exe -k utcsvc
"taskhost.exe"
taskeng.exe {2DAEC436-456F-44E3-8AB0-2F904C6E164D}
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\EslWire\service\WireHelperSvc.exe"
"C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -service
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\Explorer.EXE
taskeng.exe {3BD59365-3684-4817-9690-5B79C7DB0A2C}
C:\Windows\system32\svchost.exe -k bthaudiosvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\oodag.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\oodtray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files\EslWire\wire.exe" --tray
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" d246334c-454f-40ce-ab00-2c01842987b7 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
\??\C:\Windows\system32\conhost.exe "-1227732636-2010835006819135071-2118507015-16548500976324734421317658011963035002
\??\C:\Windows\system32\conhost.exe "-1581055466-981460881512681632336767686-190561177-1641852304-20542785251266034313
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\NOTEPAD.EXE" C:\AdwCleaner\AdwCleaner[S0].txt
taskeng.exe {ABFDFB33-A8F3-4480-B6C2-B8B6E76142E4}
"C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
ATKOSD.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
WDC.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-bb08eade-cb9d-4c4b-871d-0533ec6d6982 -SystemEventPortName:HostProcess-ecdf7836-4d6a-4f07-999f-04ea1ceb96b3 -IoCancelEventPortName:HostProcess-ef96342b-e918-4162-8fe1-c2dc15b7d231 -NonStateChangingEventPortName:HostProcess-ff991bc3-3081-4c46-8ecd-1bb2f3d85268 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c14e9efc-9edc-4d0f-b81b-746340120346 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\CML\AppData\Local\Steam\htmlcache" -steampid 2800 -buildid 1433441724 -steamid "0" --disable-gpu-compositing --disable-gpu --enable-threaded-compositing --disable-pinch-virtual-viewport --process-per-tab --disable-spell-checking --enable-direct-write
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1885490803-553739532-2145529505-10001_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1885490803-553739532-2145529505-10001 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\CML\Downloads\RSITx64.exe"
"C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe" start
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 872 876 884 65536 880

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4bf3a9d70813.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf696c47958b4.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf8cfec30a830d.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default

prefs.js - "browser.startup.homepage" - "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.3.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

C:\Users\CML\AppData\Roaming\Mozilla\Firefox\Profiles\8h9w1e09.default\extensions\
info@djzig.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-07 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-07 210856]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-12-10 9643552]
"OODefragTray"=C:\Windows\system32\oodtray.exe [2009-04-08 3868928]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-06-09 1427648]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-02 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-02 391960]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-02 419096]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-28 2754704]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-05-23 1571696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-07-02 2892992]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"ESL Wire"=C:\Program Files\EslWire\wire.exe [2014-12-15 3771904]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-06-10 8322328]
"GalaxyClient"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2009-10-21 106496]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2009-10-26 6998656]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2009-08-19 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"tvncontrol"=C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2015-06-10 2327248]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-05-24 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-07-17 15:21:01 ----D---- C:\AdwCleaner
2015-07-16 18:55:09 ----SHD---- C:\$RECYCLE.BIN
2015-07-16 18:47:15 ----A---- C:\Windows\zoek-delete.exe
2015-07-16 18:47:13 ----D---- C:\Windows\Temp
2015-07-16 17:33:58 ----D---- C:\zoek_backup
2015-07-16 17:18:31 ----D---- C:\Program Files\trend micro
2015-07-16 17:18:30 ----D---- C:\rsit
2015-07-13 20:03:54 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-13 20:03:54 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-13 19:57:54 ----A---- C:\Windows\system32\mstscax.dll
2015-07-13 19:57:53 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-07-13 19:57:53 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-07-13 19:57:50 ----A---- C:\Windows\system32\win32k.sys
2015-07-13 19:57:46 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-07-13 19:57:46 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-07-13 19:57:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-07-13 19:57:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-07-13 19:57:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-07-13 19:57:45 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-07-13 19:57:45 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-13 19:57:45 ----A---- C:\Windows\system32\iernonce.dll
2015-07-13 19:57:45 ----A---- C:\Windows\system32\ie4uinit.exe
2015-07-13 19:57:44 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-07-13 19:57:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-07-13 19:57:44 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-07-13 19:57:44 ----A---- C:\Windows\system32\urlmon.dll
2015-07-13 19:57:44 ----A---- C:\Windows\system32\iedkcs32.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-07-13 19:57:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-07-13 19:57:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-13 19:57:43 ----A---- C:\Windows\system32\msfeeds.dll
2015-07-13 19:57:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-07-13 19:57:43 ----A---- C:\Windows\system32\dxtrans.dll
2015-07-13 19:57:42 ----A---- C:\Windows\system32\iesetup.dll
2015-07-13 19:57:42 ----A---- C:\Windows\system32\iertutil.dll
2015-07-13 19:57:42 ----A---- C:\Windows\system32\ieapfltr.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-07-13 19:57:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-07-13 19:57:41 ----A---- C:\Windows\system32\vbscript.dll
2015-07-13 19:57:41 ----A---- C:\Windows\system32\jsproxy.dll
2015-07-13 19:57:41 ----A---- C:\Windows\system32\ieUnatt.exe
2015-07-13 19:57:40 ----A---- C:\Windows\system32\mshtmled.dll
2015-07-13 19:57:40 ----A---- C:\Windows\system32\ieui.dll
2015-07-13 19:57:40 ----A---- C:\Windows\system32\ieframe.dll
2015-07-13 19:57:40 ----A---- C:\Windows\system32\dxtmsft.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\wininet.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\jscript9diag.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\jscript9.dll
2015-07-13 19:57:39 ----A---- C:\Windows\system32\jscript.dll
2015-07-13 19:57:38 ----A---- C:\Windows\system32\msrating.dll
2015-07-13 19:57:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-07-13 19:57:38 ----A---- C:\Windows\system32\mshtml.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-07-13 19:57:30 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-07-13 19:57:30 ----A---- C:\Windows\system32\wuauclt.exe
2015-07-13 19:57:30 ----A---- C:\Windows\system32\wuapp.exe
2015-07-13 19:57:30 ----A---- C:\Windows\system32\wuapi.dll
2015-07-13 19:57:30 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wuwebv.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wups2.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wups.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wudriver.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wucltux.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wuaueng.dll
2015-07-13 19:57:29 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-07-13 19:57:23 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-07-13 19:57:23 ----A---- C:\Windows\system32\drmv2clt.dll
2015-07-13 19:57:23 ----A---- C:\Windows\system32\blackbox.dll
2015-07-13 19:57:22 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-07-13 19:57:20 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-07-13 19:57:20 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-07-13 19:57:20 ----A---- C:\Windows\system32\mf.dll
2015-07-13 19:57:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-07-13 19:57:19 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-07-13 19:57:14 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-07-13 19:57:14 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-07-13 19:57:14 ----A---- C:\Windows\system32\crypt32.dll
2015-07-13 19:57:13 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-07-13 19:57:13 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-07-13 19:57:13 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\wintrust.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\winresume.exe
2015-07-13 19:57:13 ----A---- C:\Windows\system32\winload.exe
2015-07-13 19:57:13 ----A---- C:\Windows\system32\quartz.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\evr.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-07-13 19:57:13 ----A---- C:\Windows\system32\cryptsvc.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\ci.dll
2015-07-13 19:57:13 ----A---- C:\Windows\system32\audiosrv.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-07-13 19:57:12 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\qdvd.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\pcasvc.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\mfplat.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\EncDump.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-07-13 19:57:12 ----A---- C:\Windows\system32\cryptui.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\cryptsp.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\AudioSes.dll
2015-07-13 19:57:12 ----A---- C:\Windows\system32\AudioEng.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-07-13 19:57:11 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\msscp.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\msnetobj.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\drivers\appid.sys
2015-07-13 19:57:11 ----A---- C:\Windows\system32\cryptnet.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\audiodg.exe
2015-07-13 19:57:11 ----A---- C:\Windows\system32\appidsvc.dll
2015-07-13 19:57:11 ----A---- C:\Windows\system32\appidapi.dll
2015-07-13 19:57:10 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-07-13 19:57:10 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-07-13 19:57:10 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\rrinstaller.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\pcawrk.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\pcalua.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\pcadm.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\msmmsp.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\mfps.dll
2015-07-13 19:57:10 ----A---- C:\Windows\system32\mfpmp.exe
2015-07-13 19:57:10 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-07-13 19:57:09 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-07-13 19:57:09 ----A---- C:\Windows\system32\pcaevts.dll
2015-07-13 19:57:09 ----A---- C:\Windows\system32\mferror.dll
2015-07-13 19:57:09 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-07-13 19:56:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-07-13 19:56:55 ----A---- C:\Windows\system32\UtcResources.dll
2015-07-13 19:56:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-07-13 19:56:55 ----A---- C:\Windows\system32\ntdll.dll
2015-07-13 19:56:55 ----A---- C:\Windows\system32\lsasrv.dll
2015-07-13 19:56:55 ----A---- C:\Windows\system32\diagtrack.dll
2015-07-13 19:56:54 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-07-13 19:56:54 ----A---- C:\Windows\system32\schannel.dll
2015-07-13 19:56:54 ----A---- C:\Windows\system32\kerberos.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\wow64win.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\wow64.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\winsrv.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\TSpkg.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\tdh.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\srcore.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\ncrypt.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\msv1_0.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\KernelBase.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\kernel32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-07-13 19:56:53 ----A---- C:\Windows\system32\conhost.exe
2015-07-13 19:56:53 ----A---- C:\Windows\system32\advapi32.dll
2015-07-13 19:56:53 ----A---- C:\Windows\system32\adtschema.dll
2015-07-13 19:56:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-13 19:56:52 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-07-13 19:56:52 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\wdigest.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\typeperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\tracerpt.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\sspisrv.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\sspicli.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\srclient.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\smss.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\sechost.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\secur32.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\rstrui.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\relog.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\ntvdm64.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\msaudite.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\lsass.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\logman.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-07-13 19:56:52 ----A---- C:\Windows\system32\diskperf.exe
2015-07-13 19:56:52 ----A---- C:\Windows\system32\csrsrv.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\credssp.dll
2015-07-13 19:56:52 ----A---- C:\Windows\system32\auditpol.exe
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-07-13 19:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\user.exe
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-07-13 19:56:51 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-07-13 19:56:51 ----A---- C:\Windows\system32\wow64cpu.dll
2015-07-13 19:56:51 ----A---- C:\Windows\system32\msobjs.dll
2015-07-13 19:56:51 ----A---- C:\Windows\system32\apisetschema.dll
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDRU.DLL
2015-07-13 19:56:38 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-07-13 19:56:33 ----A---- C:\Windows\system32\drivers\cng.sys
2015-07-13 19:56:18 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-07-13 19:56:18 ----A---- C:\Windows\system32\certcli.dll
2015-07-13 19:56:12 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-07-13 19:56:12 ----A---- C:\Windows\system32\FntCache.dll
2015-07-13 19:56:12 ----A---- C:\Windows\system32\DWrite.dll
2015-07-13 19:56:08 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2015-07-13 19:56:08 ----A---- C:\Windows\system32\pku2u.dll
2015-07-13 19:56:00 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2015-07-13 19:56:00 ----A---- C:\Windows\system32\poqexec.exe
2015-07-13 19:55:59 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-07-13 19:55:59 ----A---- C:\Windows\system32\shell32.dll
2015-07-13 19:55:55 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-07-13 19:55:52 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-07-13 19:55:52 ----A---- C:\Windows\system32\jnwmon.dll
2015-07-13 19:55:52 ----A---- C:\Windows\system32\InkEd.dll
2015-07-13 19:55:51 ----A---- C:\Windows\system32\profsvc.dll
2015-07-13 19:55:44 ----A---- C:\Windows\system32\msxml3.dll
2015-07-13 19:55:43 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-07-13 19:55:43 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-07-13 19:55:43 ----A---- C:\Windows\system32\msxml3r.dll
2015-07-13 19:55:42 ----A---- C:\Windows\system32\drivers\stream.sys
2015-07-13 19:55:41 ----A---- C:\Windows\system32\wmp.dll
2015-07-13 19:55:40 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-07-13 19:55:39 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-07-13 19:55:39 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-07-13 19:55:39 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-07-13 19:55:39 ----A---- C:\Windows\system32\wmploc.DLL
2015-07-13 19:55:39 ----A---- C:\Windows\system32\spwmp.dll
2015-07-13 19:55:39 ----A---- C:\Windows\system32\dxmasf.dll
2015-07-13 19:55:36 ----A---- C:\Windows\system32\termsrv.dll
2015-07-13 19:55:31 ----A---- C:\Windows\SYSWOW64\mscories.dll
2015-07-13 19:55:31 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2015-07-13 19:55:31 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2015-07-13 19:55:31 ----A---- C:\Windows\system32\mscories.dll
2015-07-13 19:55:31 ----A---- C:\Windows\system32\mscorier.dll
2015-07-13 19:55:31 ----A---- C:\Windows\system32\dfshim.dll
2015-07-13 19:55:30 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-07-13 19:55:30 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-07-13 19:55:29 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2015-07-13 19:55:29 ----A---- C:\Windows\system32\IMJP10K.DLL
2015-07-13 19:55:27 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-07-13 19:55:27 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-07-13 19:55:27 ----A---- C:\Windows\system32\nlasvc.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-07-13 19:55:26 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\ubpm.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\lpk.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\fontsub.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\dciman32.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\atmlib.dll
2015-07-13 19:55:26 ----A---- C:\Windows\system32\atmfd.dll
2015-07-13 19:55:16 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2015-07-13 19:55:16 ----A---- C:\Windows\system32\gdi32.dll
2015-07-13 19:55:16 ----A---- C:\Windows\system32\comctl32.dll
2015-07-13 19:55:15 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-07-13 19:55:15 ----A---- C:\Windows\system32\oleaut32.dll
2015-07-13 19:55:14 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-07-13 19:55:14 ----A---- C:\Windows\SYSWOW64\charmap.exe
2015-07-13 19:55:14 ----A---- C:\Windows\system32\charmap.exe
2015-07-13 19:55:13 ----A---- C:\Windows\system32\services.exe
2015-07-13 19:55:13 ----A---- C:\Windows\system32\drivers\http.sys
2015-07-13 19:55:12 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-07-13 19:55:12 ----A---- C:\Windows\system32\wpdshext.dll
2015-07-13 19:55:11 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-07-13 19:55:11 ----A---- C:\Windows\system32\tzres.dll
2015-07-13 19:55:05 ----A---- C:\Windows\system32\mstsc.exe
2015-07-13 19:55:04 ----A---- C:\Windows\SYSWOW64\winsta.dll
2015-07-13 19:55:04 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2015-07-13 19:55:04 ----A---- C:\Windows\system32\winsta.dll
2015-07-13 19:55:04 ----A---- C:\Windows\system32\winlogon.exe
2015-07-13 19:55:04 ----A---- C:\Windows\system32\rdpcorekmts.dll
2015-07-13 19:55:04 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2015-07-13 19:55:04 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2015-07-13 19:54:40 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-07-13 19:54:40 ----A---- C:\Windows\system32\msi.dll
2015-07-13 19:54:28 ----A---- C:\Windows\SYSWOW64\packager.dll
2015-07-13 19:54:28 ----A---- C:\Windows\system32\packager.dll
2015-07-13 19:53:29 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WsmWmiPl.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WsmSvc.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WsmAuto.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2015-07-13 19:53:29 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2015-07-13 19:53:28 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2015-07-13 19:53:27 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-07-13 19:53:27 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-07-13 19:53:27 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-07-13 19:53:27 ----A---- C:\Windows\system32\shimeng.dll
2015-07-13 19:53:27 ----A---- C:\Windows\system32\sdbinst.exe
2015-07-13 19:53:27 ----A---- C:\Windows\system32\apphelp.dll
2015-07-13 19:53:27 ----A---- C:\Windows\system32\aelupsvc.dll
2015-07-13 19:53:26 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-07-13 19:53:26 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-07-13 19:53:25 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-07-13 19:53:25 ----A---- C:\Windows\system32\scesrv.dll
2015-07-13 19:53:22 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-07-13 19:53:22 ----A---- C:\Windows\system32\msctf.dll
2015-07-13 19:53:21 ----A---- C:\Windows\SYSWOW64\rastls.dll
2015-07-13 19:53:21 ----A---- C:\Windows\system32\rastls.dll
2015-07-13 19:44:30 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-07-13 19:44:30 ----A---- C:\Windows\system32\clfsw32.dll
2015-07-13 19:44:30 ----A---- C:\Windows\system32\clfs.sys
2015-07-13 19:39:42 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-07-13 19:39:42 ----A---- C:\Windows\system32\WMPhoto.dll
2015-07-09 18:07:18 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2015-07-17 15:27:18 ----D---- C:\Windows\Prefetch
2015-07-17 15:23:50 ----D---- C:\Program Files (x86)\Steam
2015-07-17 15:23:39 ----D---- C:\ProgramData\NVIDIA
2015-07-17 15:22:48 ----D---- C:\Windows\system32\config
2015-07-16 19:54:19 ----D---- C:\Windows\SysWOW64
2015-07-16 19:54:17 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-07-16 18:53:30 ----AD---- C:\Windows
2015-07-16 18:25:55 ----RD---- C:\Program Files (x86)
2015-07-16 18:25:55 ----HD---- C:\ProgramData
2015-07-16 17:47:07 ----SHD---- C:\System Volume Information
2015-07-16 17:46:50 ----RD---- C:\Program Files
2015-07-16 17:37:05 ----D---- C:\Windows\system32\drivers\etc
2015-07-16 16:46:12 ----D---- C:\KMPlayer
2015-07-15 22:39:02 ----SHD---- C:\Windows\Installer
2015-07-15 22:34:20 ----D---- C:\Windows\Tasks
2015-07-15 19:58:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-07-14 18:03:33 ----D---- C:\Windows\rescache
2015-07-14 17:38:43 ----D---- C:\Windows\Microsoft.NET
2015-07-14 17:38:13 ----RSD---- C:\Windows\assembly
2015-07-14 17:26:32 ----D---- C:\Windows\system32\Tasks
2015-07-14 17:18:49 ----AD---- C:\Windows\System32
2015-07-14 17:18:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-07-14 17:18:48 ----D---- C:\Windows\inf
2015-07-14 17:12:45 ----D---- C:\Windows\winsxs
2015-07-14 17:12:41 ----D---- C:\Windows\system32\catroot2
2015-07-14 17:10:35 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-14 17:08:00 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-07-14 17:08:00 ----D---- C:\Windows\system32\cs-CZ
2015-07-14 17:07:59 ----D---- C:\Program Files\Windows Media Player
2015-07-14 17:07:59 ----D---- C:\Program Files (x86)\Windows Media Player
2015-07-14 17:07:57 ----SD---- C:\ProgramData\Microsoft
2015-07-14 17:07:57 ----D---- C:\Windows\system32\drivers
2015-07-14 17:07:57 ----D---- C:\Windows\AppPatch
2015-07-14 17:07:55 ----D---- C:\Windows\SYSWOW64\Dism
2015-07-14 17:07:51 ----D---- C:\Windows\system32\en-US
2015-07-14 17:07:51 ----D---- C:\Windows\system32\Dism
2015-07-14 17:07:51 ----D---- C:\Windows\system32\CodeIntegrity
2015-07-14 17:07:51 ----D---- C:\Windows\system32\Boot
2015-07-14 17:07:50 ----D---- C:\Windows\system32\AdvancedInstallers
2015-07-14 17:07:50 ----D---- C:\Program Files\Windows Journal
2015-07-14 17:07:49 ----RSD---- C:\Windows\Fonts
2015-07-14 17:07:44 ----D---- C:\Windows\SYSWOW64\en-US
2015-07-14 17:07:44 ----D---- C:\Program Files\Internet Explorer
2015-07-14 17:07:43 ----D---- C:\Windows\PolicyDefinitions
2015-07-14 17:07:43 ----D---- C:\Program Files (x86)\Internet Explorer
2015-07-14 17:06:29 ----D---- C:\Windows\system32\DriverStore
2015-07-14 17:06:28 ----D---- C:\Windows\system32\drivers\UMDF
2015-07-13 20:43:51 ----D---- C:\Windows\system32\catroot
2015-07-13 20:31:44 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-07-13 20:24:44 ----A---- C:\Windows\system32\HFGService_PS.dll
2015-07-13 20:24:44 ----A---- C:\Windows\system32\HFGService.dll
2015-07-13 20:17:08 ----D---- C:\Windows\system32\MRT
2015-07-13 20:08:18 ----D---- C:\Windows\debug
2015-07-13 20:08:11 ----A---- C:\Windows\system32\MRT.exe
2015-07-13 18:34:36 ----D---- C:\Program Files (x86)\TeamViewer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ESLWireAC;ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [2014-01-12 184968]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2015-03-29 31376]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CFRMD;CFRMD; C:\Windows\system32\DRIVERS\CFRMD.sys [2014-06-26 37976]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-06-05 20672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-06-05 797256]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-06-05 45856]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-28 283064]
R1 HMD;COMODO livePCsupport Hardware Monitor Driver; C:\Windows\system32\DRIVERS\hmd.sys [2014-06-26 14888]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-06-05 104584]
R1 TsLwWfF;WiFi Capture Driver; C:\Windows\system32\DRIVERS\TsLwWfF.sys [2013-07-26 29384]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 BthAudioHF;BthAudioHF Service; C:\Windows\system32\DRIVERS\BthAudioHF.sys [2015-07-13 52224]
R3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2015-07-13 29184]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-05-24 12259712]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-12-10 2222624]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-06-10 57344]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\NETw1v64.sys [2009-07-20 7058432]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2009-10-26 75264]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2009-10-26 176640]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-23 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-05-28 38032]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SaiK0CCC;SaiK0CCC; C:\Windows\system32\DRIVERS\SaiK0CCC.sys [2012-09-20 180544]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU0CCC;SaiU0CCC; C:\Windows\system32\DRIVERS\SaiU0CCC.sys [2012-09-20 47168]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 CV2K1;CommView Network Monitor; C:\Windows\system32\DRIVERS\cv2k1.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-09-23 16088]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-04-17 27760]
S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2014-09-23 30424]
S3 NETw5s64;Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2010-03-17 7680512]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;Sony sa0104 ADB Interface; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-14 82128]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-11-09 96896]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [2015-06-10 70848]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-06-09 5541960]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-11-27 2370240]
R2 EslWireHelper;ESL Wire Helper Service; C:\Program Files\EslWire\service\WireHelperSvc.exe [2014-12-15 663056]
R2 GeekBuddyRSP;GeekBuddyRSP Server; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2015-06-10 2327248]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-28 1152656]
R2 HFGService;Handsfree Headset Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-28 1893008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-28 23006864]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-29 932040]
R2 O&O Defrag;O&O Defrag; C:\Windows\system32\oodag.exe [2009-04-08 2020608]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-03-29 76152]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-29 409800]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-06-23 5495056]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-07-02 837312]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-19 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15 268976]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-06-09 2265792]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-05-28 6516280]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-19 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-13 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-07-11 148136]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

#6 Příspěvek od **vyosek** » 17 črc 2015 19:47

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=-
"DAEMON Tools Lite"=-
"GalaxyClient"=-

:files
C:\Windows\tasks\*.job
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]

Nasledne kliknete na Opravit
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

to_je_jedno · #7 Příspěvek od **to_je_jedno** » 18 črc 2015 10:30

All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Steam deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GalaxyClient deleted successfully.
========== FILES ==========
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4bf3a9d70813.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf696c47958b4.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf8cfec30a830d.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: CML
->Temp folder emptied: 2181161 bytes
->Temporary Internet Files folder emptied: 1673841 bytes
->FireFox cache emptied: 157584978 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1560 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 63695745 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 195 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 215,00 mb

[EMPTYFLASH]

User: All Users

User: CML
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0,00 mb

[EMPTYJAVA]

User: All Users

User: CML

User: Default

User: Default User

User: Public

Total Java Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 07182015_112552

Files\Folders moved on Reboot...
C:\Users\CML\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

#8 Příspěvek od **vyosek** » 20 črc 2015 15:59

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

Stahnete a spustte
Ponechte zatrzitkou pouze u volby Remove disinfection tools
Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

VIRY.CZ

Zablokovane URL

Zablokovane URL

Re: Zablokovane URL

Re: Zablokovane URL

Re: Zablokovane URL

Re: Zablokovane URL

Re: Zablokovane URL

Re: Zablokovane URL

Re: Zablokovane URL