Podivné soubory

[LosMajos]

Zdravím, kamoš se snažil dát do GTA V módy nebo co to je, ale nějak mu to nešlo. Jak jsem odstraňoval stáhnuté soubory a zjistil že je tam pár souborů které nejdou odstranit. Jmenují se etilqs_k0nJAdfELjZOpla a etilqs_mOfa6MU5sZbf8nB . Bylo jich tam víc ale ty šly odstranit. Pokaždé co spustím Mozilu vytvoří se tam nové. Párkrát upozornil defender na vir. Ten jsem odstranil. Můžete mi prosím pomoc? Děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Pepa7 at 2015-12-29 00:33:11
Microsoft Windows 8.1
System drive C: has 722 GB (76%) free of 954 GB
Total RAM: 8088 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:35:16, on 29. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Pepa7.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - Global Startup: Dual Smart Solution.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SuperRAIDSvc - Micro-Star International - C:\MSI\Smart Utilities\SuperRAIDSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe

--
End of file - 7830 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
dashost.exe {9c087857-59ac-40f4-a3c155a91e58d73d}
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
"C:\MSI\Smart Utilities\SuperRAIDSvc.exe"

taskeng.exe {12BB48DE-54DB-419D-B823-BD59C4B6E04C}
taskhostex.exe
"C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe" /s
C:\WINDOWS\SysWOW64\muachost.exe
"C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe" /hw
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\AMD\CNext\CNext\cnext.exe" atlogon
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup

"C:\WINDOWS\system32\GWX\GWX.exe"
raptr_im.exe
"C:\Program Files (x86)\Raptr\raptr_ep64.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Pepa7\AppData\Local\Steam\htmlcache" -steampid=3612 -buildid=1450127196 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey A1BD1CB2-9C41-B0B6-B315-BDCE79F1B8D7 -Reinvoke
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\Users\Pepa7\Desktop\a.txt
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

"C:\Users\Pepa7\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Pepa7\AppData\Roaming\Mozilla\Firefox\Profiles\izam6xh7.default-1442147379569

prefs.js - "browser.startup.homepage" - "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2014-08-04 36352]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-30 13672664]
"StartCN"=C:\Program Files\AMD\CNext\CNext\cnext.exe [2015-12-04 4867784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-12-14 3013712]
"Bloody2"=C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [2015-06-16 18923008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Raptr"=C:\Program Files (x86)\Raptr\raptrstub.exe [2015-12-11 56080]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Dual Smart Solution.lnk - C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-29 00:33:11 ----D---- C:\rsit
2015-12-29 00:02:16 ----D---- C:\AdwCleaner
2015-12-26 01:22:20 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2015-12-24 20:07:20 ----D---- C:\Program Files (x86)\Bloody5
2015-12-24 00:18:50 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-18 20:37:07 ----D---- C:\Program Files (x86)\AMD
2015-12-12 13:12:15 ----D---- C:\Program Files (x86)\Steam
2015-12-09 13:55:43 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-12-09 13:54:48 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-09 13:54:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-09 13:54:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-09 13:54:46 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-09 13:54:45 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-09 13:54:45 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-09 13:54:43 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-09 13:54:43 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-09 13:54:41 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-12-09 13:53:42 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-12-09 13:53:40 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-09 13:53:40 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\winresume.exe
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\winload.exe
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-12-09 13:53:14 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-12-09 13:53:14 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-12-09 13:53:12 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-09 13:53:11 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-09 13:46:57 ----D---- C:\WINDOWS\CbsTemp
2015-12-07 15:26:23 ----D---- C:\Program Files (x86)\MSI Kombustor 2.6
2015-12-07 15:20:31 ----D---- C:\Program Files\MSI Kombustor 3
2015-12-05 05:10:44 ----SHD---- C:\$RECYCLE.BIN
2015-12-05 04:55:34 ----D---- C:\WINDOWS\Temp
2015-12-05 04:55:34 ----A---- C:\WINDOWS\zoek-delete.exe
2015-12-04 18:45:46 ----A---- C:\WINDOWS\system32\amdave64.dll
2015-12-04 18:45:40 ----A---- C:\WINDOWS\system32\amdmiracast.dll
2015-12-04 18:45:38 ----A---- C:\WINDOWS\system32\amdhcp64.dll
2015-12-04 18:45:36 ----A---- C:\WINDOWS\SYSWOW64\amdhcp32.dll
2015-12-04 18:45:34 ----A---- C:\WINDOWS\system32\atimpc64.dll
2015-12-04 18:45:32 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2015-12-04 18:45:26 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2015-12-04 18:45:24 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2015-12-04 18:45:16 ----A---- C:\WINDOWS\system32\atiu9p64.dll
2015-12-04 18:44:32 ----A---- C:\WINDOWS\system32\atiumd6a.dll
2015-12-04 18:44:26 ----A---- C:\WINDOWS\system32\atiumd64.dll
2015-12-04 18:41:48 ----A---- C:\WINDOWS\system32\drivers\amdacpksd.sys
2015-12-04 18:38:22 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2015-12-04 18:33:06 ----A---- C:\WINDOWS\system32\clinfo.exe
2015-12-04 18:33:02 ----A---- C:\WINDOWS\system32\amdocl64.dll
2015-12-04 18:30:42 ----A---- C:\WINDOWS\system32\OpenCL.dll
2015-12-04 18:30:40 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2015-12-04 18:29:14 ----A---- C:\WINDOWS\system32\amdocl12cl64.dll
2015-12-04 18:08:28 ----A---- C:\WINDOWS\system32\amdlvr64.dll
2015-12-04 18:08:14 ----A---- C:\WINDOWS\SYSWOW64\amdlvr32.dll
2015-12-04 18:08:00 ----A---- C:\WINDOWS\system32\mantle64.dll
2015-12-04 18:07:56 ----A---- C:\WINDOWS\SYSWOW64\mantle32.dll
2015-12-04 18:07:50 ----A---- C:\WINDOWS\system32\amdmantle64.dll
2015-12-04 18:03:02 ----A---- C:\WINDOWS\SYSWOW64\amdmantle32.dll
2015-12-04 18:00:12 ----A---- C:\WINDOWS\system32\amdhdl64.dll
2015-12-04 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\amdhdl32.dll
2015-12-04 17:59:28 ----A---- C:\WINDOWS\system32\atio6axx.dll
2015-12-04 17:59:10 ----A---- C:\WINDOWS\system32\mantleaxl64.dll
2015-12-04 17:59:06 ----A---- C:\WINDOWS\SYSWOW64\mantleaxl32.dll
2015-12-04 17:53:42 ----A---- C:\WINDOWS\system32\amdmmcl6.dll
2015-12-04 17:53:38 ----A---- C:\WINDOWS\SYSWOW64\amdmmcl.dll
2015-12-04 17:53:36 ----A---- C:\WINDOWS\SYSWOW64\atioglxx.dll
2015-12-04 17:51:46 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2015-12-04 17:51:44 ----A---- C:\WINDOWS\system32\aticalrt64.dll
2015-12-04 17:51:42 ----A---- C:\WINDOWS\SYSWOW64\aticalrt.dll
2015-12-04 17:51:40 ----A---- C:\WINDOWS\SYSWOW64\aticalcl.dll
2015-12-04 17:51:40 ----A---- C:\WINDOWS\system32\aticalcl64.dll
2015-12-04 17:51:34 ----A---- C:\WINDOWS\system32\aticaldd64.dll
2015-12-04 17:50:44 ----A---- C:\WINDOWS\SYSWOW64\aticaldd.dll
2015-12-04 17:47:26 ----A---- C:\WINDOWS\system32\atidemgy.dll
2015-12-04 17:47:24 ----A---- C:\WINDOWS\system32\dgtrayicon.exe
2015-12-04 17:47:20 ----A---- C:\WINDOWS\SYSWOW64\atieah32.exe
2015-12-04 17:47:20 ----A---- C:\WINDOWS\system32\atieah64.exe
2015-12-04 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\amdgfxinfo32.dll
2015-12-04 17:47:18 ----A---- C:\WINDOWS\system32\amdgfxinfo64.dll
2015-12-04 17:47:16 ----A---- C:\WINDOWS\system32\atimuixx.dll
2015-12-04 17:47:14 ----A---- C:\WINDOWS\system32\atieclxx.exe
2015-12-04 17:47:06 ----A---- C:\WINDOWS\system32\atiesrxx.exe
2015-12-04 17:46:54 ----A---- C:\WINDOWS\system32\atitmm64.dll
2015-12-04 17:43:32 ----A---- C:\WINDOWS\system32\atisamu64.dll
2015-12-04 17:43:30 ----A---- C:\WINDOWS\SYSWOW64\atisamu32.dll
2015-12-04 17:43:12 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2015-12-04 17:43:10 ----A---- C:\WINDOWS\SYSWOW64\atiadlxx.dll
2015-12-04 17:43:06 ----A---- C:\WINDOWS\system32\atig6pxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\SYSWOW64\atiglpxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\system32\atiglpxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\system32\atig6txx.dll
2015-12-04 17:42:56 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2015-12-04 17:42:32 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2015-12-04 17:41:56 ----A---- C:\WINDOWS\system32\hsa-thunk64.dll
2015-12-04 17:41:54 ----A---- C:\WINDOWS\SYSWOW64\hsa-thunk.dll

======List of files/folders modified in the last 1 month======

2015-12-29 00:35:16 ----D---- C:\Program Files\trend micro
2015-12-29 00:23:16 ----D---- C:\Users\Pepa7\AppData\Roaming\Skype
2015-12-29 00:00:24 ----D---- C:\Users\Pepa7\AppData\Roaming\TS3Client
2015-12-29 00:00:01 ----D---- C:\WINDOWS\system32\sru
2015-12-28 23:56:59 ----D---- C:\Users\Pepa7\AppData\Roaming\Raptr
2015-12-28 23:49:48 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-28 23:49:42 ----D---- C:\WINDOWS\system32\drivers
2015-12-28 23:17:21 ----D---- C:\Program Files (x86)\MSI Afterburner
2015-12-28 23:13:49 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-28 22:49:33 ----D---- C:\WINDOWS\system32\Tasks
2015-12-28 22:14:15 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2015-12-27 11:47:28 ----SHD---- C:\System Volume Information
2015-12-27 11:42:40 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-26 23:37:33 ----D---- C:\Program Files (x86)\Rockstar Games
2015-12-26 23:37:17 ----D---- C:\Program Files\Rockstar Games
2015-12-26 01:22:21 ----SHD---- C:\WINDOWS\Installer
2015-12-26 01:22:20 ----RD---- C:\Program Files (x86)
2015-12-23 12:29:42 ----D---- C:\WINDOWS\system32\config
2015-12-23 12:24:01 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-23 12:23:48 ----D---- C:\WINDOWS\WinSxS
2015-12-21 14:20:42 ----D---- C:\Windows
2015-12-18 20:41:18 ----HD---- C:\ProgramData
2015-12-18 20:39:44 ----D---- C:\WINDOWS\SysWOW64
2015-12-18 20:39:44 ----D---- C:\WINDOWS\System32
2015-12-18 20:34:56 ----D---- C:\WINDOWS\Inf
2015-12-18 20:34:55 ----D---- C:\WINDOWS\system32\catroot
2015-12-18 20:34:26 ----D---- C:\Program Files\AMD
2015-12-18 20:33:11 ----D---- C:\AMD
2015-12-18 10:58:53 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-12-18 10:58:53 ----SD---- C:\WINDOWS\system32\GWX
2015-12-17 17:28:15 ----D---- C:\Program Files (x86)\Raptr
2015-12-13 11:05:22 ----D---- C:\WINDOWS\Tasks
2015-12-12 14:43:14 ----D---- C:\Program Files (x86)\Origin Games
2015-12-12 14:37:18 ----RSD---- C:\WINDOWS\assembly
2015-12-12 12:03:56 ----D---- C:\WINDOWS\rescache
2015-12-10 15:29:18 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-10 15:29:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 20:48:53 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-09 20:48:53 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-09 20:48:52 ----D---- C:\Program Files\Internet Explorer
2015-12-09 20:48:52 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-09 18:09:03 ----D---- C:\WINDOWS\system32\MRT
2015-12-09 18:05:39 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 13:52:56 ----D---- C:\WINDOWS\system32\catroot2
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-07 19:12:25 ----D---- C:\ProgramData\Origin
2015-12-07 15:20:31 ----RD---- C:\Program Files
2015-12-06 17:34:36 ----D---- C:\WINDOWS\AppReadiness
2015-12-06 11:30:15 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2015-12-05 19:10:25 ----A---- C:\DelFix.txt
2015-12-05 13:26:27 ----D---- C:\Program Files (x86)\Origin
2015-12-05 13:02:25 ----D---- C:\Users\Pepa7\AppData\Roaming\.minecraft
2015-12-05 12:31:06 ----D---- C:\WINDOWS\system32\NDF
2015-12-05 04:46:50 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-04 18:45:44 ----A---- C:\WINDOWS\SYSWOW64\amdave32.dll
2015-12-04 18:45:20 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2015-12-04 18:45:18 ----A---- C:\WINDOWS\SYSWOW64\atiuxpag.dll
2015-12-04 18:45:14 ----A---- C:\WINDOWS\SYSWOW64\atiu9pag.dll
2015-12-04 18:45:12 ----A---- C:\WINDOWS\system32\aticfx64.dll
2015-12-04 18:45:08 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2015-12-04 18:45:00 ----A---- C:\WINDOWS\system32\atidxx64.dll
2015-12-04 18:44:56 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2015-12-04 18:44:48 ----A---- C:\WINDOWS\SYSWOW64\atiumdva.dll
2015-12-04 18:44:40 ----A---- C:\WINDOWS\SYSWOW64\atiumdag.dll
2015-12-04 18:31:48 ----A---- C:\WINDOWS\SYSWOW64\amdocl.dll
2015-12-04 18:29:08 ----A---- C:\WINDOWS\SYSWOW64\amdocl12cl.dll
2015-12-04 17:57:06 ----A---- C:\WINDOWS\system32\coinst_15.30.dll
2015-12-04 17:43:10 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2015-12-04 17:43:00 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2015-12-04 16:47:09 ----D---- C:\WINDOWS\Prefetch
2015-12-02 21:09:29 ----D---- C:\ProgramData\Skype
2015-12-01 18:19:27 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2014-08-04 670568]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-03-13 157016]
R1 ndisrd;@oem18.inf,%ndisrd_Desc%;WinpkFilter LightWeight Filter; C:\WINDOWS\system32\DRIVERS\ndisrd.sys [2011-09-14 32360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 iocbios2;iocbios2; \??\C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [2014-06-17 28912]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 AcpiCtlDrv;AcpiCtlDrv; C:\WINDOWS\System32\drivers\AcpiCtlDrv.sys [2012-07-17 25880]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-12-04 23961088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-12-04 671232]
R3 athur;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw8x.sys [2013-06-02 2919936]
R3 AtiHDAudioService;@oem29.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWB6.sys [2015-07-15 102912]
R3 ICCWDT;@oem22.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2013-08-13 27608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-07-15 4012632]
R3 IntcDAud;@oem10.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-05-29 460048]
R3 iwdbus;@oem9.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-05-26 30512]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2015-12-29 192216]
R3 MEIx64;@oem15.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2015-01-06 129312]
R3 NTIOLib_MSI_RAID;NTIOLib_MSI_RAID; \??\C:\MSI\Smart Utilities\NTIOLib_X64.sys [2014-03-17 13808]
R3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2015-06-02 13536]
R3 RTL8168;@oem16.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-07-18 874712]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 amdkmafd;@oem1.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2015-01-20 44296]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-09 4928256]
S3 intaud_WaveExtensible;@oem8.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-05-26 42288]
S3 KYEGKB;@oem13.inf,%KYEGKB.SvcDesc%;IMPERATOR Gaming Keyboard; C:\WINDOWS\system32\drivers\KYEGKB.sys [2011-09-05 25600]
S3 LGDDCDevice;LGDDCDevice; \??\C:\WINDOWS\system32\LGI2CDriver.sys []
S3 LGII2CDevice;LGII2CDevice; \??\C:\WINDOWS\system32\LGPII2CDriver.sys []
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-12-04 246272]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-07-29 22184]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2014-08-04 16232]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-09 355232]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2015-07-30 1741992]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-12-26 76152]
R2 SuperRAIDSvc;SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [2014-08-13 29648]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2014-02-18 171480]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-14 836176]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-28 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-09 288688]
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2015-07-27 245544]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2015-03-20 344288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-05-13 887256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-24 146888]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-12-05 2104840]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[LosMajos]

# AdwCleaner v5.026 - Logfile created 29/12/2015 at 14:31:46
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Pepa7 - PEPA
# Running from : C:\Users\Pepa7\Desktop\adwcleaner_5.026.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [651 bytes] ##########

[Rudy]

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT. Ten soubor, bohužel, není v logu vidět. Dejte mi přesnou cestu k němu.

[LosMajos]

Logfile of random's system information tool 1.10 (written by random/random)
Run by Pepa7 at 2015-12-29 17:41:55
Microsoft Windows 8.1
System drive C: has 720 GB (75%) free of 954 GB
Total RAM: 8088 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:41:59, on 29. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Pepa7.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - Global Startup: Dual Smart Solution.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SuperRAIDSvc - Micro-Star International - C:\MSI\Smart Utilities\SuperRAIDSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe

--
End of file - 7726 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
dashost.exe {c9eb1e03-bec9-47de-91cb554be5e874a2}
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
"C:\MSI\Smart Utilities\SuperRAIDSvc.exe"
taskeng.exe {1EDE17E4-62D8-4137-B305-3FEF039D9A14}
taskhostex.exe
"C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe" /s
"C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe" /hw
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SysWOW64\muachost.exe

C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding

"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\AMD\CNext\CNext\cnext.exe" atlogon
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Pepa7\AppData\Local\Steam\htmlcache" -steampid=3932 -buildid=1450127196 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService

raptr_im.exe
"C:\Program Files (x86)\Raptr\raptr_ep64.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey F101C332-E790-9E2B-E168-D45ADA162E8B -Reinvoke
"C:\Users\Pepa7\Downloads\RSITx64(1).exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Pepa7\AppData\Roaming\Mozilla\Firefox\Profiles\izam6xh7.default-1442147379569

prefs.js - "browser.startup.homepage" - "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2014-08-04 36352]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-30 13672664]
"StartCN"=C:\Program Files\AMD\CNext\CNext\cnext.exe [2015-12-04 4867784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-12-14 3013712]
"Bloody2"=C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [2015-06-16 18923008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Raptr"=C:\Program Files (x86)\Raptr\raptrstub.exe [2015-12-11 56080]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Dual Smart Solution.lnk - C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-29 17:35:47 ----D---- C:\_OTM
2015-12-29 12:24:29 ----A---- C:\WINDOWS\ntbtlog.txt
2015-12-29 03:00:52 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-29 00:33:11 ----D---- C:\rsit
2015-12-29 00:02:16 ----D---- C:\AdwCleaner
2015-12-26 01:22:20 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2015-12-24 20:07:20 ----D---- C:\Program Files (x86)\Bloody5
2015-12-18 20:37:07 ----D---- C:\Program Files (x86)\AMD
2015-12-12 13:12:15 ----D---- C:\Program Files (x86)\Steam
2015-12-09 13:55:43 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-12-09 13:54:48 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-09 13:54:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-09 13:54:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-09 13:54:46 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-09 13:54:45 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-09 13:54:45 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-09 13:54:43 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-09 13:54:43 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-09 13:54:41 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-12-09 13:53:42 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-12-09 13:53:40 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-09 13:53:40 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\winresume.exe
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\winload.exe
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-12-09 13:53:14 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-12-09 13:53:14 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-12-09 13:53:12 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-09 13:53:11 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-09 13:46:57 ----D---- C:\WINDOWS\CbsTemp
2015-12-07 15:26:23 ----D---- C:\Program Files (x86)\MSI Kombustor 2.6
2015-12-07 15:20:31 ----D---- C:\Program Files\MSI Kombustor 3
2015-12-05 05:10:44 ----SHD---- C:\$RECYCLE.BIN
2015-12-05 04:55:34 ----D---- C:\WINDOWS\Temp
2015-12-05 04:55:34 ----A---- C:\WINDOWS\zoek-delete.exe
2015-12-04 18:45:46 ----A---- C:\WINDOWS\system32\amdave64.dll
2015-12-04 18:45:40 ----A---- C:\WINDOWS\system32\amdmiracast.dll
2015-12-04 18:45:38 ----A---- C:\WINDOWS\system32\amdhcp64.dll
2015-12-04 18:45:36 ----A---- C:\WINDOWS\SYSWOW64\amdhcp32.dll
2015-12-04 18:45:34 ----A---- C:\WINDOWS\system32\atimpc64.dll
2015-12-04 18:45:32 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2015-12-04 18:45:26 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2015-12-04 18:45:24 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2015-12-04 18:45:16 ----A---- C:\WINDOWS\system32\atiu9p64.dll
2015-12-04 18:44:32 ----A---- C:\WINDOWS\system32\atiumd6a.dll
2015-12-04 18:44:26 ----A---- C:\WINDOWS\system32\atiumd64.dll
2015-12-04 18:41:48 ----A---- C:\WINDOWS\system32\drivers\amdacpksd.sys
2015-12-04 18:38:22 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2015-12-04 18:33:06 ----A---- C:\WINDOWS\system32\clinfo.exe
2015-12-04 18:33:02 ----A---- C:\WINDOWS\system32\amdocl64.dll
2015-12-04 18:30:42 ----A---- C:\WINDOWS\system32\OpenCL.dll
2015-12-04 18:30:40 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2015-12-04 18:29:14 ----A---- C:\WINDOWS\system32\amdocl12cl64.dll
2015-12-04 18:08:28 ----A---- C:\WINDOWS\system32\amdlvr64.dll
2015-12-04 18:08:14 ----A---- C:\WINDOWS\SYSWOW64\amdlvr32.dll
2015-12-04 18:08:00 ----A---- C:\WINDOWS\system32\mantle64.dll
2015-12-04 18:07:56 ----A---- C:\WINDOWS\SYSWOW64\mantle32.dll
2015-12-04 18:07:50 ----A---- C:\WINDOWS\system32\amdmantle64.dll
2015-12-04 18:03:02 ----A---- C:\WINDOWS\SYSWOW64\amdmantle32.dll
2015-12-04 18:00:12 ----A---- C:\WINDOWS\system32\amdhdl64.dll
2015-12-04 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\amdhdl32.dll
2015-12-04 17:59:28 ----A---- C:\WINDOWS\system32\atio6axx.dll
2015-12-04 17:59:10 ----A---- C:\WINDOWS\system32\mantleaxl64.dll
2015-12-04 17:59:06 ----A---- C:\WINDOWS\SYSWOW64\mantleaxl32.dll
2015-12-04 17:53:42 ----A---- C:\WINDOWS\system32\amdmmcl6.dll
2015-12-04 17:53:38 ----A---- C:\WINDOWS\SYSWOW64\amdmmcl.dll
2015-12-04 17:53:36 ----A---- C:\WINDOWS\SYSWOW64\atioglxx.dll
2015-12-04 17:51:46 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2015-12-04 17:51:44 ----A---- C:\WINDOWS\system32\aticalrt64.dll
2015-12-04 17:51:42 ----A---- C:\WINDOWS\SYSWOW64\aticalrt.dll
2015-12-04 17:51:40 ----A---- C:\WINDOWS\SYSWOW64\aticalcl.dll
2015-12-04 17:51:40 ----A---- C:\WINDOWS\system32\aticalcl64.dll
2015-12-04 17:51:34 ----A---- C:\WINDOWS\system32\aticaldd64.dll
2015-12-04 17:50:44 ----A---- C:\WINDOWS\SYSWOW64\aticaldd.dll
2015-12-04 17:47:26 ----A---- C:\WINDOWS\system32\atidemgy.dll
2015-12-04 17:47:24 ----A---- C:\WINDOWS\system32\dgtrayicon.exe
2015-12-04 17:47:20 ----A---- C:\WINDOWS\SYSWOW64\atieah32.exe
2015-12-04 17:47:20 ----A---- C:\WINDOWS\system32\atieah64.exe
2015-12-04 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\amdgfxinfo32.dll
2015-12-04 17:47:18 ----A---- C:\WINDOWS\system32\amdgfxinfo64.dll
2015-12-04 17:47:16 ----A---- C:\WINDOWS\system32\atimuixx.dll
2015-12-04 17:47:14 ----A---- C:\WINDOWS\system32\atieclxx.exe
2015-12-04 17:47:06 ----A---- C:\WINDOWS\system32\atiesrxx.exe
2015-12-04 17:46:54 ----A---- C:\WINDOWS\system32\atitmm64.dll
2015-12-04 17:43:32 ----A---- C:\WINDOWS\system32\atisamu64.dll
2015-12-04 17:43:30 ----A---- C:\WINDOWS\SYSWOW64\atisamu32.dll
2015-12-04 17:43:12 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2015-12-04 17:43:10 ----A---- C:\WINDOWS\SYSWOW64\atiadlxx.dll
2015-12-04 17:43:06 ----A---- C:\WINDOWS\system32\atig6pxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\SYSWOW64\atiglpxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\system32\atiglpxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\system32\atig6txx.dll
2015-12-04 17:42:56 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2015-12-04 17:42:32 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2015-12-04 17:41:56 ----A---- C:\WINDOWS\system32\hsa-thunk64.dll
2015-12-04 17:41:54 ----A---- C:\WINDOWS\SYSWOW64\hsa-thunk.dll

======List of files/folders modified in the last 1 month======

2015-12-29 17:41:56 ----D---- C:\Program Files\trend micro
2015-12-29 17:39:37 ----D---- C:\Users\Pepa7\AppData\Roaming\Raptr
2015-12-29 17:35:36 ----D---- C:\Users\Pepa7\AppData\Roaming\Skype
2015-12-29 17:00:00 ----D---- C:\WINDOWS\system32\sru
2015-12-29 12:56:35 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-29 12:43:55 ----D---- C:\WINDOWS\system32\drivers
2015-12-29 12:37:35 ----SHD---- C:\System Volume Information
2015-12-29 12:32:57 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-29 12:25:59 ----RD---- C:\Program Files (x86)
2015-12-29 12:24:29 ----D---- C:\Windows
2015-12-29 00:00:24 ----D---- C:\Users\Pepa7\AppData\Roaming\TS3Client
2015-12-28 23:49:48 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-28 23:17:21 ----D---- C:\Program Files (x86)\MSI Afterburner
2015-12-28 22:49:33 ----D---- C:\WINDOWS\system32\Tasks
2015-12-28 22:14:15 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2015-12-26 23:37:33 ----D---- C:\Program Files (x86)\Rockstar Games
2015-12-26 23:37:17 ----D---- C:\Program Files\Rockstar Games
2015-12-26 01:22:21 ----SHD---- C:\WINDOWS\Installer
2015-12-23 12:29:42 ----D---- C:\WINDOWS\system32\config
2015-12-23 12:24:01 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-23 12:23:48 ----D---- C:\WINDOWS\WinSxS
2015-12-18 20:41:18 ----HD---- C:\ProgramData
2015-12-18 20:39:44 ----D---- C:\WINDOWS\SysWOW64
2015-12-18 20:39:44 ----D---- C:\WINDOWS\System32
2015-12-18 20:34:56 ----D---- C:\WINDOWS\Inf
2015-12-18 20:34:55 ----D---- C:\WINDOWS\system32\catroot
2015-12-18 20:34:26 ----D---- C:\Program Files\AMD
2015-12-18 20:33:11 ----D---- C:\AMD
2015-12-18 10:58:53 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-12-18 10:58:53 ----SD---- C:\WINDOWS\system32\GWX
2015-12-17 17:28:15 ----D---- C:\Program Files (x86)\Raptr
2015-12-13 11:05:22 ----D---- C:\WINDOWS\Tasks
2015-12-12 14:43:14 ----D---- C:\Program Files (x86)\Origin Games
2015-12-12 14:37:18 ----RSD---- C:\WINDOWS\assembly
2015-12-12 12:03:56 ----D---- C:\WINDOWS\rescache
2015-12-10 15:29:18 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-10 15:29:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 20:48:53 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-09 20:48:53 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-09 20:48:52 ----D---- C:\Program Files\Internet Explorer
2015-12-09 20:48:52 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-09 18:09:03 ----D---- C:\WINDOWS\system32\MRT
2015-12-09 18:05:39 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 13:52:56 ----D---- C:\WINDOWS\system32\catroot2
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-07 19:12:25 ----D---- C:\ProgramData\Origin
2015-12-07 15:20:31 ----RD---- C:\Program Files
2015-12-06 17:34:36 ----D---- C:\WINDOWS\AppReadiness
2015-12-06 11:30:15 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2015-12-05 19:10:25 ----A---- C:\DelFix.txt
2015-12-05 13:26:27 ----D---- C:\Program Files (x86)\Origin
2015-12-05 13:02:25 ----D---- C:\Users\Pepa7\AppData\Roaming\.minecraft
2015-12-05 12:31:06 ----D---- C:\WINDOWS\system32\NDF
2015-12-05 04:46:50 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-04 18:45:44 ----A---- C:\WINDOWS\SYSWOW64\amdave32.dll
2015-12-04 18:45:20 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2015-12-04 18:45:18 ----A---- C:\WINDOWS\SYSWOW64\atiuxpag.dll
2015-12-04 18:45:14 ----A---- C:\WINDOWS\SYSWOW64\atiu9pag.dll
2015-12-04 18:45:12 ----A---- C:\WINDOWS\system32\aticfx64.dll
2015-12-04 18:45:08 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2015-12-04 18:45:00 ----A---- C:\WINDOWS\system32\atidxx64.dll
2015-12-04 18:44:56 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2015-12-04 18:44:48 ----A---- C:\WINDOWS\SYSWOW64\atiumdva.dll
2015-12-04 18:44:40 ----A---- C:\WINDOWS\SYSWOW64\atiumdag.dll
2015-12-04 18:31:48 ----A---- C:\WINDOWS\SYSWOW64\amdocl.dll
2015-12-04 18:29:08 ----A---- C:\WINDOWS\SYSWOW64\amdocl12cl.dll
2015-12-04 17:57:06 ----A---- C:\WINDOWS\system32\coinst_15.30.dll
2015-12-04 17:43:10 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2015-12-04 17:43:00 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2015-12-04 16:47:09 ----D---- C:\WINDOWS\Prefetch
2015-12-02 21:09:29 ----D---- C:\ProgramData\Skype
2015-12-01 18:19:27 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2014-08-04 670568]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-03-13 157016]
R1 ndisrd;@oem18.inf,%ndisrd_Desc%;WinpkFilter LightWeight Filter; C:\WINDOWS\system32\DRIVERS\ndisrd.sys [2011-09-14 32360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 iocbios2;iocbios2; \??\C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [2014-06-17 28912]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 AcpiCtlDrv;AcpiCtlDrv; C:\WINDOWS\System32\drivers\AcpiCtlDrv.sys [2012-07-17 25880]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-12-04 23961088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-12-04 671232]
R3 athur;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw8x.sys [2013-06-02 2919936]
R3 AtiHDAudioService;@oem29.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWB6.sys [2015-07-15 102912]
R3 ICCWDT;@oem22.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2013-08-13 27608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-07-15 4012632]
R3 IntcDAud;@oem10.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-05-29 460048]
R3 iwdbus;@oem9.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-05-26 30512]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MEIx64;@oem15.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2015-01-06 129312]
R3 NTIOLib_MSI_RAID;NTIOLib_MSI_RAID; \??\C:\MSI\Smart Utilities\NTIOLib_X64.sys [2014-03-17 13808]
R3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2015-06-02 13536]
R3 RTL8168;@oem16.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-07-18 874712]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 amdkmafd;@oem1.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2015-01-20 44296]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-09 4928256]
S3 intaud_WaveExtensible;@oem8.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-05-26 42288]
S3 KYEGKB;@oem13.inf,%KYEGKB.SvcDesc%;IMPERATOR Gaming Keyboard; C:\WINDOWS\system32\drivers\KYEGKB.sys [2011-09-05 25600]
S3 LGDDCDevice;LGDDCDevice; \??\C:\WINDOWS\system32\LGI2CDriver.sys []
S3 LGII2CDevice;LGII2CDevice; \??\C:\WINDOWS\system32\LGPII2CDriver.sys []
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-12-04 246272]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-07-29 22184]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2014-08-04 16232]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-09 355232]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2015-07-30 1741992]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-12-26 76152]
R2 SuperRAIDSvc;SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [2014-08-13 29648]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2014-02-18 171480]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-14 836176]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-28 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-09 288688]
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2015-07-27 245544]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2015-03-20 344288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-05-13 887256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-29 146888]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-12-05 2104840]

-----------------EOF-----------------

[LosMajos]

Cesta k souborům je C:\Users\Pepa7\AppData\Local\Temp . Po restartu po použití OTM tam ty soubory nebyly, jak zapnu Mozillu tak se tam objeví..

[LosMajos]

https://ctrlv.cz/7bx1 obrázek se soubory..

[Rudy]

Znovu spusťte OTM tímto skriptem:

:files
C:\Users\Pepa7\AppData\Local\Temp

:commands
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

[LosMajos]

Logfile of random's system information tool 1.10 (written by random/random)
Run by Pepa7 at 2015-12-29 18:23:56
Microsoft Windows 8.1
System drive C: has 720 GB (75%) free of 954 GB
Total RAM: 8088 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:24:00, on 29. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\WINDOWS\SysWOW64\muachost.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Pepa7.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - Global Startup: Dual Smart Solution.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SuperRAIDSvc - Micro-Star International - C:\MSI\Smart Utilities\SuperRAIDSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe

--
End of file - 7787 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {a485c0e4-f121-4e03-94b7e5680c8eb224}
"C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe"
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
C:\WINDOWS\SysWOW64\PnkBstrA.exe
"C:\MSI\Smart Utilities\SuperRAIDSvc.exe"

C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskeng.exe {8709DB54-2B95-4320-B203-6BD08EC2F3D2}
taskhostex.exe
"C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe" /s
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\SysWOW64\muachost.exe
"C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe" /hw

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\AMD\CNext\CNext\cnext.exe" atlogon
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
raptr_im.exe
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Pepa7\AppData\Local\Steam\htmlcache" -steampid=3848 -buildid=1450127196 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Raptr\raptr_ep64.exe"

"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 3F760C72-7690-7B0F-B2CE-5CC9FA2C50F5 -Reinvoke
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="3172.0.2089277547\1225203996" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3172 "\\.\pipe\gecko-crash-server-pipe.3172" tab
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Users\Pepa7\Downloads\RSITx64(1).exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Pepa7\AppData\Roaming\Mozilla\Firefox\Profiles\izam6xh7.default-1442147379569

prefs.js - "browser.startup.homepage" - "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.7.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2014-08-04 36352]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-30 13672664]
"StartCN"=C:\Program Files\AMD\CNext\CNext\cnext.exe [2015-12-04 4867784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-12-14 3013712]
"Bloody2"=C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe [2015-06-16 18923008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Raptr"=C:\Program Files (x86)\Raptr\raptrstub.exe [2015-12-11 56080]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Dual Smart Solution.lnk - C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-29 17:35:47 ----D---- C:\_OTM
2015-12-29 12:24:29 ----A---- C:\WINDOWS\ntbtlog.txt
2015-12-29 03:00:52 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-29 00:33:11 ----D---- C:\rsit
2015-12-29 00:02:16 ----D---- C:\AdwCleaner
2015-12-26 01:22:20 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2015-12-24 20:07:20 ----D---- C:\Program Files (x86)\Bloody5
2015-12-18 20:37:07 ----D---- C:\Program Files (x86)\AMD
2015-12-12 13:12:15 ----D---- C:\Program Files (x86)\Steam
2015-12-09 13:55:43 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-12-09 13:54:50 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-09 13:54:49 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-12-09 13:54:48 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-09 13:54:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-09 13:54:47 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-09 13:54:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-09 13:54:46 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-09 13:54:45 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-09 13:54:45 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-09 13:54:43 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-09 13:54:43 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-09 13:54:42 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-09 13:54:41 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-09 13:54:40 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-12-09 13:54:39 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-12-09 13:53:42 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-12-09 13:53:41 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-12-09 13:53:40 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-09 13:53:40 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\winresume.exe
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\winload.exe
2015-12-09 13:53:38 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2015-12-09 13:53:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-09 13:53:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-12-09 13:53:14 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-12-09 13:53:14 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-12-09 13:53:12 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-09 13:53:11 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-09 13:46:57 ----D---- C:\WINDOWS\CbsTemp
2015-12-07 15:26:23 ----D---- C:\Program Files (x86)\MSI Kombustor 2.6
2015-12-07 15:20:31 ----D---- C:\Program Files\MSI Kombustor 3
2015-12-05 05:10:44 ----SHD---- C:\$RECYCLE.BIN
2015-12-05 04:55:34 ----D---- C:\WINDOWS\Temp
2015-12-05 04:55:34 ----A---- C:\WINDOWS\zoek-delete.exe
2015-12-04 18:45:46 ----A---- C:\WINDOWS\system32\amdave64.dll
2015-12-04 18:45:40 ----A---- C:\WINDOWS\system32\amdmiracast.dll
2015-12-04 18:45:38 ----A---- C:\WINDOWS\system32\amdhcp64.dll
2015-12-04 18:45:36 ----A---- C:\WINDOWS\SYSWOW64\amdhcp32.dll
2015-12-04 18:45:34 ----A---- C:\WINDOWS\system32\atimpc64.dll
2015-12-04 18:45:32 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2015-12-04 18:45:26 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2015-12-04 18:45:24 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2015-12-04 18:45:16 ----A---- C:\WINDOWS\system32\atiu9p64.dll
2015-12-04 18:44:32 ----A---- C:\WINDOWS\system32\atiumd6a.dll
2015-12-04 18:44:26 ----A---- C:\WINDOWS\system32\atiumd64.dll
2015-12-04 18:41:48 ----A---- C:\WINDOWS\system32\drivers\amdacpksd.sys
2015-12-04 18:38:22 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2015-12-04 18:33:06 ----A---- C:\WINDOWS\system32\clinfo.exe
2015-12-04 18:33:02 ----A---- C:\WINDOWS\system32\amdocl64.dll
2015-12-04 18:30:42 ----A---- C:\WINDOWS\system32\OpenCL.dll
2015-12-04 18:30:40 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2015-12-04 18:29:14 ----A---- C:\WINDOWS\system32\amdocl12cl64.dll
2015-12-04 18:08:28 ----A---- C:\WINDOWS\system32\amdlvr64.dll
2015-12-04 18:08:14 ----A---- C:\WINDOWS\SYSWOW64\amdlvr32.dll
2015-12-04 18:08:00 ----A---- C:\WINDOWS\system32\mantle64.dll
2015-12-04 18:07:56 ----A---- C:\WINDOWS\SYSWOW64\mantle32.dll
2015-12-04 18:07:50 ----A---- C:\WINDOWS\system32\amdmantle64.dll
2015-12-04 18:03:02 ----A---- C:\WINDOWS\SYSWOW64\amdmantle32.dll
2015-12-04 18:00:12 ----A---- C:\WINDOWS\system32\amdhdl64.dll
2015-12-04 18:00:10 ----A---- C:\WINDOWS\SYSWOW64\amdhdl32.dll
2015-12-04 17:59:28 ----A---- C:\WINDOWS\system32\atio6axx.dll
2015-12-04 17:59:10 ----A---- C:\WINDOWS\system32\mantleaxl64.dll
2015-12-04 17:59:06 ----A---- C:\WINDOWS\SYSWOW64\mantleaxl32.dll
2015-12-04 17:53:42 ----A---- C:\WINDOWS\system32\amdmmcl6.dll
2015-12-04 17:53:38 ----A---- C:\WINDOWS\SYSWOW64\amdmmcl.dll
2015-12-04 17:53:36 ----A---- C:\WINDOWS\SYSWOW64\atioglxx.dll
2015-12-04 17:51:46 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2015-12-04 17:51:44 ----A---- C:\WINDOWS\system32\aticalrt64.dll
2015-12-04 17:51:42 ----A---- C:\WINDOWS\SYSWOW64\aticalrt.dll
2015-12-04 17:51:40 ----A---- C:\WINDOWS\SYSWOW64\aticalcl.dll
2015-12-04 17:51:40 ----A---- C:\WINDOWS\system32\aticalcl64.dll
2015-12-04 17:51:34 ----A---- C:\WINDOWS\system32\aticaldd64.dll
2015-12-04 17:50:44 ----A---- C:\WINDOWS\SYSWOW64\aticaldd.dll
2015-12-04 17:47:26 ----A---- C:\WINDOWS\system32\atidemgy.dll
2015-12-04 17:47:24 ----A---- C:\WINDOWS\system32\dgtrayicon.exe
2015-12-04 17:47:20 ----A---- C:\WINDOWS\SYSWOW64\atieah32.exe
2015-12-04 17:47:20 ----A---- C:\WINDOWS\system32\atieah64.exe
2015-12-04 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\amdgfxinfo32.dll
2015-12-04 17:47:18 ----A---- C:\WINDOWS\system32\amdgfxinfo64.dll
2015-12-04 17:47:16 ----A---- C:\WINDOWS\system32\atimuixx.dll
2015-12-04 17:47:14 ----A---- C:\WINDOWS\system32\atieclxx.exe
2015-12-04 17:47:06 ----A---- C:\WINDOWS\system32\atiesrxx.exe
2015-12-04 17:46:54 ----A---- C:\WINDOWS\system32\atitmm64.dll
2015-12-04 17:43:32 ----A---- C:\WINDOWS\system32\atisamu64.dll
2015-12-04 17:43:30 ----A---- C:\WINDOWS\SYSWOW64\atisamu32.dll
2015-12-04 17:43:12 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2015-12-04 17:43:10 ----A---- C:\WINDOWS\SYSWOW64\atiadlxx.dll
2015-12-04 17:43:06 ----A---- C:\WINDOWS\system32\atig6pxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\SYSWOW64\atiglpxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\system32\atiglpxx.dll
2015-12-04 17:43:04 ----A---- C:\WINDOWS\system32\atig6txx.dll
2015-12-04 17:42:56 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2015-12-04 17:42:32 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2015-12-04 17:41:56 ----A---- C:\WINDOWS\system32\hsa-thunk64.dll
2015-12-04 17:41:54 ----A---- C:\WINDOWS\SYSWOW64\hsa-thunk.dll

======List of files/folders modified in the last 1 month======

2015-12-29 18:23:58 ----D---- C:\Program Files\trend micro
2015-12-29 18:22:51 ----D---- C:\Users\Pepa7\AppData\Roaming\Raptr
2015-12-29 18:00:01 ----D---- C:\WINDOWS\system32\sru
2015-12-29 17:35:36 ----D---- C:\Users\Pepa7\AppData\Roaming\Skype
2015-12-29 12:56:35 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-29 12:43:55 ----D---- C:\WINDOWS\system32\drivers
2015-12-29 12:37:35 ----SHD---- C:\System Volume Information
2015-12-29 12:32:57 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-29 12:25:59 ----RD---- C:\Program Files (x86)
2015-12-29 12:24:29 ----D---- C:\Windows
2015-12-29 00:00:24 ----D---- C:\Users\Pepa7\AppData\Roaming\TS3Client
2015-12-28 23:49:48 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-28 23:17:21 ----D---- C:\Program Files (x86)\MSI Afterburner
2015-12-28 22:49:33 ----D---- C:\WINDOWS\system32\Tasks
2015-12-28 22:14:15 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2015-12-26 23:37:33 ----D---- C:\Program Files (x86)\Rockstar Games
2015-12-26 23:37:17 ----D---- C:\Program Files\Rockstar Games
2015-12-26 01:22:21 ----SHD---- C:\WINDOWS\Installer
2015-12-23 12:29:42 ----D---- C:\WINDOWS\system32\config
2015-12-23 12:24:01 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-23 12:23:48 ----D---- C:\WINDOWS\WinSxS
2015-12-18 20:41:18 ----HD---- C:\ProgramData
2015-12-18 20:39:44 ----D---- C:\WINDOWS\SysWOW64
2015-12-18 20:39:44 ----D---- C:\WINDOWS\System32
2015-12-18 20:34:56 ----D---- C:\WINDOWS\Inf
2015-12-18 20:34:55 ----D---- C:\WINDOWS\system32\catroot
2015-12-18 20:34:26 ----D---- C:\Program Files\AMD
2015-12-18 20:33:11 ----D---- C:\AMD
2015-12-18 10:58:53 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-12-18 10:58:53 ----SD---- C:\WINDOWS\system32\GWX
2015-12-17 17:28:15 ----D---- C:\Program Files (x86)\Raptr
2015-12-13 11:05:22 ----D---- C:\WINDOWS\Tasks
2015-12-12 14:43:14 ----D---- C:\Program Files (x86)\Origin Games
2015-12-12 14:37:18 ----RSD---- C:\WINDOWS\assembly
2015-12-12 12:03:56 ----D---- C:\WINDOWS\rescache
2015-12-10 15:29:18 ----D---- C:\Program Files\Microsoft Silverlight
2015-12-10 15:29:17 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 20:48:53 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-09 20:48:53 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-09 20:48:52 ----D---- C:\Program Files\Internet Explorer
2015-12-09 20:48:52 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-09 18:09:03 ----D---- C:\WINDOWS\system32\MRT
2015-12-09 18:05:39 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 13:52:56 ----D---- C:\WINDOWS\system32\catroot2
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-07 19:12:25 ----D---- C:\ProgramData\Origin
2015-12-07 15:20:31 ----RD---- C:\Program Files
2015-12-06 17:34:36 ----D---- C:\WINDOWS\AppReadiness
2015-12-06 11:30:15 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2015-12-05 19:10:25 ----A---- C:\DelFix.txt
2015-12-05 13:26:27 ----D---- C:\Program Files (x86)\Origin
2015-12-05 13:02:25 ----D---- C:\Users\Pepa7\AppData\Roaming\.minecraft
2015-12-05 12:31:06 ----D---- C:\WINDOWS\system32\NDF
2015-12-05 04:46:50 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-04 18:45:44 ----A---- C:\WINDOWS\SYSWOW64\amdave32.dll
2015-12-04 18:45:20 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2015-12-04 18:45:18 ----A---- C:\WINDOWS\SYSWOW64\atiuxpag.dll
2015-12-04 18:45:14 ----A---- C:\WINDOWS\SYSWOW64\atiu9pag.dll
2015-12-04 18:45:12 ----A---- C:\WINDOWS\system32\aticfx64.dll
2015-12-04 18:45:08 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2015-12-04 18:45:00 ----A---- C:\WINDOWS\system32\atidxx64.dll
2015-12-04 18:44:56 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2015-12-04 18:44:48 ----A---- C:\WINDOWS\SYSWOW64\atiumdva.dll
2015-12-04 18:44:40 ----A---- C:\WINDOWS\SYSWOW64\atiumdag.dll
2015-12-04 18:31:48 ----A---- C:\WINDOWS\SYSWOW64\amdocl.dll
2015-12-04 18:29:08 ----A---- C:\WINDOWS\SYSWOW64\amdocl12cl.dll
2015-12-04 17:57:06 ----A---- C:\WINDOWS\system32\coinst_15.30.dll
2015-12-04 17:43:10 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2015-12-04 17:43:00 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2015-12-04 16:47:09 ----D---- C:\WINDOWS\Prefetch
2015-12-02 21:09:29 ----D---- C:\ProgramData\Skype
2015-12-01 18:19:27 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2014-08-04 670568]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-03-13 157016]
R1 ndisrd;@oem18.inf,%ndisrd_Desc%;WinpkFilter LightWeight Filter; C:\WINDOWS\system32\DRIVERS\ndisrd.sys [2011-09-14 32360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 iocbios2;iocbios2; \??\C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [2014-06-17 28912]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 AcpiCtlDrv;AcpiCtlDrv; C:\WINDOWS\System32\drivers\AcpiCtlDrv.sys [2012-07-17 25880]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-12-04 23961088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-12-04 671232]
R3 athur;@oem7.inf,%ATHR.Service.DispName%;Qualcomm Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw8x.sys [2013-06-02 2919936]
R3 AtiHDAudioService;@oem29.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWB6.sys [2015-07-15 102912]
R3 ICCWDT;@oem22.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\WINDOWS\System32\drivers\ICCWDT.sys [2013-08-13 27608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-07-15 4012632]
R3 IntcDAud;@oem10.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-05-29 460048]
R3 iwdbus;@oem9.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-05-26 30512]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MEIx64;@oem15.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2015-01-06 129312]
R3 NTIOLib_MSI_RAID;NTIOLib_MSI_RAID; \??\C:\MSI\Smart Utilities\NTIOLib_X64.sys [2014-03-17 13808]
R3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2015-06-02 13536]
R3 RTL8168;@oem16.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-07-18 874712]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 amdkmafd;@oem1.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2015-01-20 44296]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-09 4928256]
S3 intaud_WaveExtensible;@oem8.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-05-26 42288]
S3 KYEGKB;@oem13.inf,%KYEGKB.SvcDesc%;IMPERATOR Gaming Keyboard; C:\WINDOWS\system32\drivers\KYEGKB.sys [2011-09-05 25600]
S3 LGDDCDevice;LGDDCDevice; \??\C:\WINDOWS\system32\LGI2CDriver.sys []
S3 LGII2CDevice;LGII2CDevice; \??\C:\WINDOWS\system32\LGPII2CDriver.sys []
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-12-04 246272]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2015-07-29 22184]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2014-08-04 16232]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-09 355232]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2015-07-30 1741992]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-12-26 76152]
R2 SuperRAIDSvc;SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [2014-08-13 29648]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2014-02-18 171480]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-12-14 836176]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-28 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-09 288688]
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2015-07-27 245544]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2015-03-20 344288]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-05-13 887256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-29 146888]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-12-05 2104840]

-----------------EOF-----------------





=============================
Jinak soubory tam jsou zase...

[Rudy]

Zkontrolujte je online na www.virustotal.com. Výsledek oznamte.

[LosMajos]

Když se je snažím nahrát na www.virustotal.com tak to píše že soubor je používán. Zjistil jsem že když mozillu zavřu, tak soubory zmizí. Když ji zase zapnu tak se tam zase objeví. A když otevři explorer tak tam tři soubory přiboudou. A když explorer zavřu tak zase zmizí.. Tak já nevím... https://ctrlv.cz/fRQE

[Rudy]

Mají nulovou délku, tím pádem nejsou nebezpečné. Zřejmě patří nějakému rozšíření prohlížeče.

[LosMajos]

Nikdy to tam nebylo. A kdyby to patřilo k mozille tak bych čekal trochu normální jméno.. A ještě když předtím defender hlásil trojana..

[Rudy]

OK. Mozillu zazálohujte pomocí MozBackup: http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/ . Pak Mozillu odinstalujte vč. jejího profilu. Znovu nainstalujte a ze zálohy zpět nakopírujte pouze záložky a hesla. Jsem pžřesvědčen, že patří nějakému rozšíření Mozilly a že to není nic nebezpečného.

[LosMajos]

Pořád to tam je. Ty soubory jsem zkopíroval dal na plochu a otestoval virustotalem. Vše OK. Teď mám puštěný Defender tak pak dám vědět.