pada google chrom

[ToReTo]

Ahoj mam problem na notasu se stal absolutne nefunkcni google chrom ..
Po nekolikate reinstalaci problem setrvava (kdyz chci napr kliknout na label mailu chova se jako by nad nim byla neviditelna komponenta a absolutne nereaguje ..), navic porad pada...
Na firefoxu se misto odkazu nacte vzdy nejaka reklama / jina adresa...


zde prikladam log: z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenka at 2016-03-12 18:57:20
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 300 GB (63%) free of 477 GB
Total RAM: 4010 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:57:26, on 12.3.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18231)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Program Files\trend micro\Lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={1CDDBE1D- ... 2015-09-14 22:47:34&v=19.2.0.326&pid=safeguard&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\19.2.0.326\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [MagicPlusHelper] "C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe -update pepperplugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\19.2.0\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Malware Protection - SecureSoft - C:\Users\Lenka\AppData\Roaming\mlwps.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater19.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.2.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe

--
End of file - 9473 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe"
C:\Windows\system32\WLANExt.exe 25479488
\??\C:\Windows\system32\conhost.exe "-14833923982118848751-1735760227-1953737685694186400-1359478256-1244906783177525606
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Users\Lenka\AppData\Roaming\mlwps.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.2.0\ToolbarUpdater.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.2.0\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
\??\C:\Windows\system32\conhost.exe "-2139914063687584972-1129836538-18217867181468605369-9347712601906459303-85389824
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {DEB9CAC0-13DC-46EE-A95A-11DFC1585F61}
"C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PROSet/Wireless
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe17_ Global\UsGthrCtrlFltPipeMssGthrPipe17 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Lenka\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe -check pepperplugin
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-18 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-18 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\19.2.0.326\AVG SafeGuard toolbar_toolbar.dll [2016-01-27 3637832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelPROSet"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2010-12-23 1934608]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2015-06-01 453552]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-05-21 4471536]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe [2015-12-26 1162944]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"vProt"=C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2016-01-27 2586696]
"MagicPlusHelper"=C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe [2014-07-09 2499240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-18 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-18 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-12 18:57:20 ----D---- C:\rsit
2016-03-12 18:57:20 ----D---- C:\Program Files\trend micro
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\ucrtbase.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-10 12:07:56 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-10 12:07:55 ----A---- C:\Windows\system32\win32k.sys
2016-03-10 12:07:52 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-03-10 12:07:52 ----A---- C:\Windows\system32\wucltux.dll
2016-03-10 12:07:52 ----A---- C:\Windows\system32\wuaueng.dll
2016-03-10 12:07:52 ----A---- C:\Windows\system32\wuapi.dll
2016-03-10 12:07:51 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-03-10 12:07:51 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-03-10 12:07:51 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-03-10 12:07:51 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wuwebv.dll
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wups2.dll
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wups.dll
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wudriver.dll
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wuauclt.exe
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wuapp.exe
2016-03-10 12:07:51 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-03-10 12:07:51 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-03-10 12:07:48 ----A---- C:\Windows\system32\drivers\ntfs.sys
2016-03-10 12:07:47 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-03-10 12:07:45 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-03-10 12:07:45 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-03-10 12:07:45 ----A---- C:\Windows\system32\oleaut32.dll
2016-03-10 12:07:45 ----A---- C:\Windows\system32\asycfilt.dll
2016-03-10 12:07:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-03-10 12:07:37 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-03-10 12:07:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-03-10 12:07:37 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-03-10 12:07:37 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-03-10 12:07:37 ----A---- C:\Windows\system32\iertutil.dll
2016-03-10 12:07:37 ----A---- C:\Windows\system32\iernonce.dll
2016-03-10 12:07:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-03-10 12:07:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-03-10 12:07:36 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-03-10 12:07:36 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-10 12:07:36 ----A---- C:\Windows\system32\inseng.dll
2016-03-10 12:07:36 ----A---- C:\Windows\system32\ie4uinit.exe
2016-03-10 12:07:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-03-10 12:07:34 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-03-10 12:07:34 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-03-10 12:07:34 ----A---- C:\Windows\system32\urlmon.dll
2016-03-10 12:07:34 ----A---- C:\Windows\system32\occache.dll
2016-03-10 12:07:34 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-03-10 12:07:34 ----A---- C:\Windows\system32\iedkcs32.dll
2016-03-10 12:07:32 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-03-10 12:07:32 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-03-10 12:07:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-03-10 12:07:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-03-10 12:07:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-03-10 12:07:32 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-03-10 12:07:32 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-10 12:07:32 ----A---- C:\Windows\system32\msfeeds.dll
2016-03-10 12:07:32 ----A---- C:\Windows\system32\dxtrans.dll
2016-03-10 12:07:31 ----A---- C:\Windows\system32\iesetup.dll
2016-03-10 12:07:31 ----A---- C:\Windows\system32\ieapfltr.dll
2016-03-10 12:07:30 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-03-10 12:07:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-03-10 12:07:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-03-10 12:07:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-03-10 12:07:30 ----A---- C:\Windows\system32\vbscript.dll
2016-03-10 12:07:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-03-10 12:07:29 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-03-10 12:07:29 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-03-10 12:07:29 ----A---- C:\Windows\system32\jsproxy.dll
2016-03-10 12:07:29 ----A---- C:\Windows\system32\dxtmsft.dll
2016-03-10 12:07:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-03-10 12:07:28 ----A---- C:\Windows\system32\mshtmled.dll
2016-03-10 12:07:28 ----A---- C:\Windows\system32\ieui.dll
2016-03-10 12:07:28 ----A---- C:\Windows\system32\ieframe.dll
2016-03-10 12:07:27 ----A---- C:\Windows\system32\webcheck.dll
2016-03-10 12:07:27 ----A---- C:\Windows\system32\jscript9diag.dll
2016-03-10 12:07:27 ----A---- C:\Windows\system32\jscript9.dll
2016-03-10 12:07:27 ----A---- C:\Windows\system32\jscript.dll
2016-03-10 12:07:27 ----A---- C:\Windows\system32\ieUnatt.exe
2016-03-10 12:07:26 ----A---- C:\Windows\system32\wininet.dll
2016-03-10 12:07:26 ----A---- C:\Windows\system32\msrating.dll
2016-03-10 12:07:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-03-10 12:07:25 ----A---- C:\Windows\system32\mshtml.dll
2016-03-10 12:06:39 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-03-10 12:06:39 ----A---- C:\Windows\system32\ntdll.dll
2016-03-10 12:06:38 ----A---- C:\Windows\system32\KernelBase.dll
2016-03-10 12:06:37 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-03-10 12:06:37 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-03-10 12:06:37 ----A---- C:\Windows\system32\kerberos.dll
2016-03-10 12:06:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-03-10 12:06:35 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-03-10 12:06:35 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-03-10 12:06:35 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-03-10 12:06:35 ----A---- C:\Windows\system32\rpcrt4.dll
2016-03-10 12:06:35 ----A---- C:\Windows\system32\lsasrv.dll
2016-03-10 12:06:35 ----A---- C:\Windows\system32\kernel32.dll
2016-03-10 12:06:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-03-10 12:06:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-03-10 12:06:35 ----A---- C:\Windows\system32\advapi32.dll
2016-03-10 12:06:34 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-03-10 12:06:34 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-03-10 12:06:34 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-03-10 12:06:34 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\wow64win.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\wow64.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\winsrv.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\wdigest.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\TSpkg.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\sspicli.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\srcore.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\smss.exe
2016-03-10 12:06:34 ----A---- C:\Windows\system32\schannel.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\ncrypt.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\msv1_0.dll
2016-03-10 12:06:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-03-10 12:06:34 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-03-10 12:06:34 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-03-10 12:06:34 ----A---- C:\Windows\system32\conhost.exe
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-10 12:06:33 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\user.exe
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-03-10 12:06:33 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\wow64cpu.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\sspisrv.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\srclient.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\secur32.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\rstrui.exe
2016-03-10 12:06:33 ----A---- C:\Windows\system32\ntvdm64.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\lsass.exe
2016-03-10 12:06:33 ----A---- C:\Windows\system32\csrsrv.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\cryptbase.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\credssp.dll
2016-03-10 12:06:33 ----A---- C:\Windows\system32\auditpol.exe
2016-03-10 12:06:33 ----A---- C:\Windows\system32\apisetschema.dll
2016-03-10 12:06:32 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-03-10 12:06:32 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-03-10 12:06:32 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-03-10 12:06:32 ----A---- C:\Windows\system32\msobjs.dll
2016-03-10 12:06:32 ----A---- C:\Windows\system32\msaudite.dll
2016-03-10 12:06:32 ----A---- C:\Windows\system32\adtschema.dll
2016-03-10 12:05:59 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-03-10 12:05:59 ----A---- C:\Windows\system32\mfds.dll
2016-03-10 12:05:57 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-03-10 12:05:57 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-03-10 12:05:57 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-03-10 12:05:57 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-03-10 12:05:57 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-03-10 12:05:57 ----A---- C:\Windows\system32\lpk.dll
2016-03-10 12:05:57 ----A---- C:\Windows\system32\fontsub.dll
2016-03-10 12:05:57 ----A---- C:\Windows\system32\dciman32.dll
2016-03-10 12:05:57 ----A---- C:\Windows\system32\atmlib.dll
2016-03-10 12:05:57 ----A---- C:\Windows\system32\atmfd.dll
2016-03-10 12:05:55 ----A---- C:\Windows\system32\seclogon.dll
2016-03-10 12:05:54 ----A---- C:\Windows\system32\wmp.dll
2016-03-10 12:05:53 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-03-10 12:05:52 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2016-03-10 12:05:52 ----A---- C:\Windows\system32\spwmp.dll
2016-03-10 12:05:52 ----A---- C:\Windows\system32\dxmasf.dll
2016-03-10 12:05:51 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-03-10 12:05:51 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2016-03-10 12:05:51 ----A---- C:\Windows\system32\wmploc.DLL
2016-03-10 12:05:50 ----A---- C:\Windows\system32\appraiser.dll
2016-03-10 12:05:49 ----A---- C:\Windows\system32\invagent.dll
2016-03-10 12:05:49 ----A---- C:\Windows\system32\generaltel.dll
2016-03-10 12:05:49 ----A---- C:\Windows\system32\devinv.dll
2016-03-10 12:05:49 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-03-10 12:05:49 ----A---- C:\Windows\system32\aeinv.dll
2016-03-10 12:05:49 ----A---- C:\Windows\system32\acmigration.dll
2016-03-08 22:24:19 ----RD---- C:\Program Files (x86)\Skype
2016-02-19 11:03:17 ----D---- C:\Program Files (x86)\SKF Viewer

======List of files/folders modified in the last 1 month======

2016-03-12 18:57:21 ----D---- C:\Windows\Temp
2016-03-12 18:57:20 ----RD---- C:\Program Files
2016-03-12 18:41:58 ----D---- C:\Users\Lenka\AppData\Roaming\Skype
2016-03-12 17:52:34 ----D---- C:\Windows\system32\Tasks
2016-03-12 17:47:27 ----D---- C:\Windows\System32
2016-03-12 17:47:27 ----D---- C:\Windows\inf
2016-03-12 17:47:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-12 17:45:05 ----D---- C:\Windows\system32\config
2016-03-11 23:00:19 ----D---- C:\Windows\Microsoft.NET
2016-03-11 22:57:09 ----RSD---- C:\Windows\assembly
2016-03-11 13:13:03 ----D---- C:\Windows\winsxs
2016-03-11 13:10:06 ----D---- C:\Windows\SysWOW64
2016-03-11 13:10:04 ----D---- C:\Windows\SYSWOW64\en-US
2016-03-11 13:10:04 ----D---- C:\Windows\system32\en-US
2016-03-11 13:10:04 ----D---- C:\Windows\system32\drivers
2016-03-11 13:10:03 ----D---- C:\Program Files\Internet Explorer
2016-03-11 13:09:58 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-11 13:09:51 ----D---- C:\Windows\AppPatch
2016-03-11 13:09:47 ----D---- C:\Program Files\Windows Media Player
2016-03-11 13:09:47 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-11 13:09:44 ----D---- C:\Windows\system32\DriverStore
2016-03-10 16:14:59 ----SHD---- C:\Windows\Installer
2016-03-10 16:14:58 ----SHD---- C:\Config.Msi
2016-03-10 16:07:53 ----D---- C:\ProgramData\Microsoft Help
2016-03-10 16:06:40 ----D---- C:\Windows\system32\appraiser
2016-03-10 16:05:12 ----SHD---- C:\System Volume Information
2016-03-10 14:45:04 ----HD---- C:\Windows\system32\WLANProfiles
2016-03-10 12:05:35 ----D---- C:\Windows\system32\catroot2
2016-03-10 11:40:19 ----D---- C:\Program Files (x86)\TeamViewer
2016-03-08 22:24:20 ----D---- C:\Program Files (x86)\Common Files
2016-03-08 22:24:19 ----RD---- C:\Program Files (x86)
2016-03-08 22:24:17 ----D---- C:\ProgramData\Skype
2016-03-06 16:45:52 ----D---- C:\Windows\Prefetch
2016-03-06 16:44:25 ----D---- C:\KMPlayer
2016-03-03 09:41:11 ----D---- C:\Windows\system32\NDF
2016-02-29 23:25:29 ----SD---- C:\Windows\SYSWOW64\GWX
2016-02-29 23:25:29 ----SD---- C:\Windows\system32\GWX
2016-02-28 21:17:57 ----D---- C:\Program Files (x86)\Google
2016-02-28 21:17:42 ----D---- C:\Windows\Tasks
2016-02-28 21:08:38 ----SD---- C:\Users\Lenka\AppData\Roaming\Microsoft
2016-02-21 19:12:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-02-16 18:15:39 ----D---- C:\Windows\rescache
2016-02-15 20:22:16 ----D---- C:\Program Files\Windows Journal
2016-02-15 20:22:15 ----SD---- C:\Windows\system32\CompatTel
2016-02-15 20:21:53 ----D---- C:\Windows\en-US
2016-02-15 20:21:51 ----D---- C:\Windows

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-06-16 30264]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2010-12-21 8505856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 cpuz134;cpuz134; \??\C:\Users\Lenka\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 leusbser;Lenovo Inc. USB Device for Serial Communication; C:\Windows\system32\DRIVERS\leusbser.sys [2013-08-01 238080]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-28 192216]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-12-23 1515792]
R2 Live Malware Protection;Live Malware Protection; C:\Users\Lenka\AppData\Roaming\mlwps.exe [2015-11-26 203776]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-29 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-12-23 845584]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 vToolbarUpdater19.2.0;vToolbarUpdater19.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.2.0\ToolbarUpdater.exe [2016-01-27 1875528]
R2 ZcfgSvc7;Intel(R) PROSet/Wireless ZeroConfig Service; C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe [2010-12-23 992256]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-05-21 1272560]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-02-08 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-18 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-11 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.