reduxmedia vyskakování reklam

[detor]

Dobrý den,
v internetovém prohlížeči mám otevřené stránky pouze seznam.cz a idnes.cz a vyskakuje na mě okno antiviru Nod, že zablokoval ip adresu "reduxmedia". Četl jsem, že je to zákeřný spyware, ale bojím se, abych neměl hacknutý router, protože před pár dny se mi pomalu načítaly stránky v internetovém prohlížeči, nějak jsem zjistil, že když ve vlastnostech adaptéru zruším ipv6, problém přestane, v routeru (comtrend O2) jsem měl nastaveny dns cz nic, tak jsem nechal defaultní O2 a vše fungovalo zase normálně, ale na torrentových vyhledávačích při kliknutí na nějaký odkaz na mě začaly vyskakovat reklamy, jak na piratebay, tak na torrent.eu vyskakují ty samé reklamy, nevím, jestli je to schválně a problém není u mě, ale protože nikdy takle hodně a na dvou různých vyhledávačích reklamy nevyskakovaly, tak nevím jestli to s tím taky nesouvisí. Na zkoušku jsem vytáhnul notebook, který jsem aspoň měsíc nepoužil, všechny počítače v síti jsem měl vypnuté a na tom notebooku reklamy vyskakovaly taky, děje se to i na dalším pc v síti, momentálně ty reklamy blokuju rozšířením "popup blocker", ale každopádně Nod křičí (reduxmedia), i když mám v prohlížeči otevřený jenom seznam.cz a idnes.cz, takže nějaký problém tam je a nevím co s tím.

Projel jsem pc, adwcleaner, malwarebytes, junkware remowal tool a problém stále stejný. Přikládám log z RSIT, který při spuštění vyhodí chybu Error5 hijackthis, ale dojede do konce:
Předem děkuji za pomoc.


Logfile of random's system information tool 1.10 (written by random/random)
Run by Guru at 2016-02-13 23:37:47
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 42 GB (37%) free of 114 GB
Total RAM: 8155 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:39:22, on 13.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\UMonit64.exe
C:\Program Files (x86)\SpeedFan\speedfan.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files (x86)\SRWare Iron\chrome.exe
C:\Program Files\trend micro\Guru.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - Global Startup: speedfan.lnk = C:\Program Files (x86)\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O9 - Extra 'Tools' menuitem: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDow ... rtScan.cab
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

--
End of file - 3949 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\igfxCUIService.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\SysWOW64\UMonit64.exe"
"C:\Program Files (x86)\SpeedFan\speedfan.exe"
"C:\Program Files\PeerBlock\peerblock.exe"
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe"
"C:\Program Files\totalcmd\TOTALCMD64.EXE"
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --profile-directory=Default
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=gpu-process --channel="544.0.2064000650\1098817583" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,24,52,62 --gpu-vendor-id=0x10de --gpu-device-id=0x1381 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5850 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.1.429819807\1695835336" --font-cache-shared-handle=1928 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.2.1738368039\252388394" --font-cache-shared-handle=1952 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.3.1736566691\1381082572" --font-cache-shared-handle=2304 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.4.1620336577\1646661975" --font-cache-shared-handle=2320 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.5.193121203\1759088732" --font-cache-shared-handle=2460 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.6.932712329\155759449" --font-cache-shared-handle=2116 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.7.1296710069\157761425" --font-cache-shared-handle=2460 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.8.728115993\1241376221" --font-cache-shared-handle=2728 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.10.879836393\971045894" --font-cache-shared-handle=2860 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.11.747238817\266671439" --font-cache-shared-handle=2936 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.12.1653336641\197774988" --font-cache-shared-handle=5836 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.13.2068320587\1376172813" --font-cache-shared-handle=6668 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.14.645684860\1621770368" --font-cache-shared-handle=3912 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.16.305256101\1831418880" --font-cache-shared-handle=7500 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=ppapi --channel="544.17.201732519\711064450" --ppapi-flash-args --lang=cs --device-scale-factor=1 --font-cache-shared-handle=7800 --ignored=" --type=renderer " /prefetch:-632637702

"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.19.1558093849\1816788520" --font-cache-shared-handle=8036 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.22.909695591\422233136" --font-cache-shared-handle=8584 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.23.1227409201\568813778" --font-cache-shared-handle=8492 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.25.319476357\1875196294" --font-cache-shared-handle=5264 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.26.1739800354\1413733193" --font-cache-shared-handle=7440 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.27.884466701\418355734" --font-cache-shared-handle=9292 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.29.1045608043\2048376983" --font-cache-shared-handle=10088 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.30.34875646\907307413" --font-cache-shared-handle=9836 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.32.2114265772\1374859381" --font-cache-shared-handle=10432 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.35.296950478\1160828552" --font-cache-shared-handle=10868 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.37.1602200336\1694309781" --font-cache-shared-handle=7344 /prefetch:673131151
"C:\Program Files (x86)\SRWare Iron\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncSetAsDefault/Enabled/AutofillClassifier/Enabled/AutofillFieldMetadata/Enabled/AutofillProfileOrderByFrecency/EnabledLimitTo3/AutomaticTabDiscarding/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Enabled/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*ExtensionActionRedesign/Enabled/*ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*PasswordGeneration/Disabled/*QUIC/Enabled/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SRTPromptFieldTrial/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncHttpContentCompression/Enabled/TabSyncByRecency/Enabled/UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="544.38.814977019\258685115" --font-cache-shared-handle=10576 /prefetch:673131151
"C:\Windows\system32\NOTEPAD.EXE" C:\rsit\info.txt
"D:\Downloads\nesetříděno\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe -check pepperplugin

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-07-08 5595848]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-05 1427648]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-10-19 16407296]
"UMonit"=C:\Windows\SysWOW64\UMonit64.exe [2015-10-19 45056]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05 508240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
speedfan.lnk - C:\Program Files (x86)\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-02-13 23:34:21 ----D---- C:\rsit
2016-02-13 23:34:21 ----D---- C:\Program Files\trend micro
2016-02-13 20:53:08 ----D---- C:\AdwCleaner
2016-02-11 22:52:13 ----D---- C:\Program Files (x86)\Comodo
2016-02-10 23:37:58 ----D---- C:\Users\Guru\AppData\Roaming\PDAppFlex
2016-02-09 22:48:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-09 22:48:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-09 22:48:26 ----A---- C:\Windows\system32\iertutil.dll
2016-02-09 22:48:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-09 22:48:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-02-09 22:48:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-09 22:48:25 ----A---- C:\Windows\system32\urlmon.dll
2016-02-09 22:48:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-02-09 22:48:24 ----A---- C:\Windows\system32\mshtml.dll
2016-02-09 22:48:24 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-09 22:48:24 ----A---- C:\Windows\system32\ieui.dll
2016-02-09 22:48:24 ----A---- C:\Windows\system32\ieframe.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-02-09 22:48:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-09 22:48:20 ----A---- C:\Windows\system32\inseng.dll
2016-02-09 22:48:20 ----A---- C:\Windows\system32\iernonce.dll
2016-02-09 22:48:20 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-09 22:48:20 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-09 22:48:20 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-09 22:48:19 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-09 22:48:19 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-02-09 22:48:19 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-09 22:48:19 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-02-09 22:48:19 ----A---- C:\Windows\system32\occache.dll
2016-02-09 22:48:19 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-09 22:48:18 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-02-09 22:48:18 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-02-09 22:48:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-09 22:48:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-02-09 22:48:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-09 22:48:18 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-09 22:48:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-09 22:48:18 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-09 22:48:18 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-09 22:48:17 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-09 22:48:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-02-09 22:48:17 ----A---- C:\Windows\system32\iesetup.dll
2016-02-09 22:48:17 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-09 22:48:16 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-09 22:48:16 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-02-09 22:48:16 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-02-09 22:48:16 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-09 22:48:16 ----A---- C:\Windows\system32\vbscript.dll
2016-02-09 22:48:16 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-09 22:48:16 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-09 22:48:15 ----A---- C:\Windows\system32\webcheck.dll
2016-02-09 22:48:15 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-09 22:48:15 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-09 22:48:15 ----A---- C:\Windows\system32\jscript.dll
2016-02-09 22:48:14 ----A---- C:\Windows\system32\wininet.dll
2016-02-09 22:48:14 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-09 22:48:14 ----A---- C:\Windows\system32\jscript9.dll
2016-02-09 22:48:13 ----A---- C:\Windows\system32\msrating.dll
2016-02-09 22:48:13 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-09 22:48:08 ----A---- C:\Windows\system32\win32k.sys
2016-02-09 22:48:07 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-02-09 22:48:07 ----A---- C:\Windows\system32\InkEd.dll
2016-02-09 22:48:07 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-09 22:48:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-09 22:48:04 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-09 22:48:04 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-09 22:48:04 ----A---- C:\Windows\system32\EncDec.dll
2016-02-09 22:48:04 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-09 22:48:03 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\ntdll.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\kernel32.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\kerberos.dll
2016-02-09 22:48:03 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-09 22:48:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-09 22:48:03 ----A---- C:\Windows\system32\advapi32.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-09 22:48:02 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-02-09 22:48:02 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-02-09 22:48:02 ----A---- C:\Windows\system32\wow64win.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\wow64cpu.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\wow64.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\winsrv.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\wdigest.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\sspicli.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\srcore.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\srclient.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\smss.exe
2016-02-09 22:48:02 ----A---- C:\Windows\system32\schannel.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\secur32.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\rstrui.exe
2016-02-09 22:48:02 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\ntvdm64.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\lsass.exe
2016-02-09 22:48:02 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-09 22:48:02 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-09 22:48:02 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-09 22:48:02 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\credssp.dll
2016-02-09 22:48:02 ----A---- C:\Windows\system32\conhost.exe
2016-02-09 22:48:02 ----A---- C:\Windows\system32\auditpol.exe
2016-02-09 22:48:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-09 22:48:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-09 22:48:01 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-09 22:48:01 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\user.exe
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-02-09 22:48:01 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-02-09 22:48:01 ----A---- C:\Windows\system32\msobjs.dll
2016-02-09 22:48:01 ----A---- C:\Windows\system32\msaudite.dll
2016-02-09 22:48:01 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-09 22:48:01 ----A---- C:\Windows\system32\adtschema.dll
2016-02-09 22:47:51 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-02-09 22:47:51 ----A---- C:\Windows\system32\ole32.dll
2016-02-09 02:12:48 ----SHD---- C:\$RECYCLE.BIN
2016-02-09 02:12:44 ----D---- C:\Windows\temp
2016-02-09 01:46:30 ----D---- C:\Qoobox
2016-02-05 22:53:48 ----D---- C:\Program Files (x86)\Fiddler2
2016-02-04 08:35:57 ----D---- C:\Program Files (x86)\SRWare Iron
2016-01-29 04:25:54 ----D---- C:\ProgramData\HitmanPro
2016-01-16 01:44:46 ----D---- C:\Program Files (x86)\ESET

======List of files/folders modified in the last 1 month======

2016-02-13 23:34:21 ----RD---- C:\Program Files
2016-02-13 20:17:43 ----D---- C:\Windows\system32\config
2016-02-13 20:11:21 ----D---- C:\Windows\System32
2016-02-13 20:11:21 ----D---- C:\Windows\inf
2016-02-13 20:11:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-13 20:06:04 ----D---- C:\Windows\Tasks
2016-02-13 20:06:04 ----D---- C:\Windows\system32\Tasks
2016-02-13 20:06:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-13 20:05:57 ----D---- C:\Program Files (x86)\SpeedFan
2016-02-13 20:05:55 ----D---- C:\Program Files\PeerBlock
2016-02-13 04:38:35 ----D---- C:\Users\Guru\AppData\Roaming\uTorrent
2016-02-11 22:53:26 ----HD---- C:\ProgramData
2016-02-11 22:52:13 ----RD---- C:\Program Files (x86)
2016-02-11 04:56:52 ----D---- C:\Windows\rescache
2016-02-11 03:17:51 ----D---- C:\Users\Guru\AppData\Roaming\MPC-HC
2016-02-10 23:47:22 ----D---- C:\Windows\winsxs
2016-02-10 23:46:47 ----D---- C:\Windows\SYSWOW64\en-US
2016-02-10 23:46:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-10 23:46:47 ----D---- C:\Windows\SysWOW64
2016-02-10 23:46:47 ----D---- C:\Windows\system32\en-US
2016-02-10 23:46:47 ----D---- C:\Windows\system32\cs-CZ
2016-02-10 23:46:47 ----D---- C:\Program Files\Internet Explorer
2016-02-10 23:46:47 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-10 23:36:09 ----D---- C:\Users\Guru\AppData\Roaming\Adobe
2016-02-10 23:35:58 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2016-02-10 23:22:19 ----SHD---- C:\System Volume Information
2016-02-10 23:22:07 ----D---- C:\Windows\system32\catroot
2016-02-10 23:22:06 ----D---- C:\Windows\system32\catroot2
2016-02-10 23:21:08 ----D---- C:\Program Files (x86)\Adobe
2016-02-09 23:19:41 ----D---- C:\Windows\Microsoft.NET
2016-02-09 23:15:51 ----RSD---- C:\Windows\assembly
2016-02-09 22:54:29 ----D---- C:\Windows\system32\drivers
2016-02-09 22:54:28 ----D---- C:\Windows\AppPatch
2016-02-09 22:53:28 ----SHD---- C:\Windows\Installer
2016-02-09 02:21:12 ----D---- C:\Windows\Prefetch
2016-02-09 02:21:03 ----D---- C:\Windows
2016-02-09 01:59:49 ----A---- C:\Windows\system.ini
2016-02-09 01:55:40 ----D---- C:\Windows\system32\drivers\etc
2016-02-09 01:51:12 ----D---- C:\Windows\SYSWOW64\drivers
2016-02-09 01:51:10 ----D---- C:\Program Files (x86)\Common Files
2016-02-09 01:28:39 ----D---- C:\Windows\system32\wfp
2016-02-09 01:28:39 ----D---- C:\Windows\system32\wbem
2016-02-09 01:28:21 ----D---- C:\Windows\system32\DriverStore
2016-02-09 01:28:21 ----D---- C:\Users\Guru\AppData\Roaming\IrfanView
2016-02-09 01:28:21 ----D---- C:\Users\Guru\AppData\Roaming\GHISLER
2016-02-09 01:28:20 ----D---- C:\Windows\registration
2016-02-06 17:54:28 ----D---- C:\Windows\system32\NDF
2016-02-04 09:09:23 ----D---- C:\Users\Guru\AppData\Roaming\Opera Software
2016-02-04 09:09:23 ----D---- C:\Program Files (x86)\Opera
2016-02-02 21:24:37 ----HD---- C:\VTRoot
2016-01-30 00:54:54 ----D---- C:\Program Files\Common Files\Adobe
2016-01-16 03:57:26 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2015-10-30 118560]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2015-10-19 1455552]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2015-10-19 31144]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2015-10-19 22800]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2015-10-19 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2015-10-30 276256]
R0 tib;Acronis TIB Manager; C:\Windows\system32\DRIVERS\tib.sys [2015-11-23 1120032]
R0 tib_mounter;Acronis TIB Mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [2015-11-23 198432]
R0 vididr;Acronis Virtual Disk; C:\Windows\system32\DRIVERS\vididr.sys [2015-11-23 161568]
R0 vidsflt;Acronis Disk Storage Filter; C:\Windows\system32\DRIVERS\vidsflt.sys [2015-11-23 117024]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2015-10-19 199552]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-11-18 21184]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-11-18 806032]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-08-05 45856]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2015-10-19 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-07-14 255240]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-07-14 178520]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-08-05 105096]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2015-10-21 230352]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2015-07-14 168208]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2015-11-23 367200]
R3 GeneStor;Genesys Logic Storage Driver; C:\Windows\system32\DRIVERS\GeneStor.sys [2015-10-19 117224]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-10-19 4615424]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2015-10-19 395024]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2015-10-19 805648]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-10-19 129312]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-11-09 204648]
R3 pbfilter;pbfilter; \??\C:\Program Files\PeerBlock\pbfilter.sys [2015-10-20 22600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2015-10-19 981744]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2015-10-20 12288]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 cpuz135;cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys []
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-10-19 4920720]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-10-19 460048]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-11-12 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-11-12 63704]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-10-30 50472]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2015-10-19 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-06-11 20992]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2015-10-19 31800]
S3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtl8187.sys [2010-01-07 448512]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2015-10-19 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2015-10-19 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2015-11-23 1464096]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2015-10-19 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2015-10-19 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2015-11-18 1144688]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-01-13 82128]
R2 afcdpsrv;Acronis Nonstop Backup Service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2015-11-23 3869688]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-09-03 5542472]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-07-08 1353720]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2015-10-19 18856]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-10-19 344168]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2015-10-19 158496]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2015-10-19 409376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-11-09 938800]
R2 syncagentsrv;Acronis Sync Agent Service; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2015-11-23 7149264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-10-19 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-10-19 124088]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2015-10-20 266240]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-08-05 2265792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-10-19 279144]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-02-09 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2015-10-19 887256]
S3 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-11-12 1135416]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-01-11 146888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2015-10-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-10-20 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Realtek87B;Realtek87B; C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe [2009-12-07 40960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015-09-29 2015936]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-19 50864]
S4 ChromodoUpdater;COMODO Chromodo Update Service; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2016-02-11 1995448]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-19 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-19 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-19 139944]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2015-10-20 279848]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-11-09 417400]

-----------------EOF-----------------

[detor]

Teď, když otevřu nějaké pdfko, tak comodo zahlásí, že se chce to pdf spojit s internetem ip adresa: 23.62.237.14, což je holandská ip, a když na mě řval Nod, tak ip byla taky holandská, viz:
https://www.virustotal.com/en/ip-addres ... formation/

[JaRon]

ahoj,
je ten OS legalny
ak ano vloz log FRST
ak nie, tak sme skoncili ,,,