V Nastavení siete sa zapína Proxy

[666_peter_666]

Dobrý deň,
na PC sa mi v Nastaveniach siete začal bez príčiny prestavovať slider pre Proxy do polohy "Zapnuté". Samozrejme internet prestal fungovať.
Preskenoval som PC s mojim Bitdefenderom, aj s Malwarebytes, aj so Superantispyware.
Každý niečo našiel, Malwarbytes to označil ako "PM.Optional.ProxyHijacker". Všetky nálezy som vymazal, slider vrátil do polohy "Vypnuté",
ale po reštarte sa nálezy v AV objavili zakaždým znova. Občas sa aj ten slider prestaví.
Okrem toho mi po reštarte vyskočia hlásenia "Obnovili sa výrobné nastavenia predvolenej aplikácie"
Prosím, pozrite sa na priložený log, či tam niečo nenájdete.
Ďakujem vopred,
Peter



Logfile of random's system information tool 1.10 (written by random/random)
Run by BOSS at 2016-07-26 17:14:41
Microsoft Windows 10 Pro
System drive C: has 62 GB (27%) free of 228 GB
Total RAM: 8173 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:15:08, on 26.07.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0494)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\BOSS.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 255.255.255.255 broadcasthost
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [StartMenuX] "C:\Program Files\Start Menu X\StartMenuX.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office16\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: BlackBerry Device Manager - BlackBerry Limited - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: DTSAudioService - DTS - C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESL Wire Helper Service (EslWireHelper) - Unknown owner - C:\Program Files\EslWire\service\WireHelperSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: ProductAgentService - Bitdefender - C:\Program Files\Bitdefender Agent\ProductAgentService.exe
O23 - Service: pSP2clnt - Unknown owner - C:\Program Files\pSP2Clnt\service\pSP2Clnt.exe
O23 - Service: RIM MDNS - Apple Inc. - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
O23 - Service: BlackBerry Link Communication Manager (RIM Tunnel Service) - BlackBerry Limited - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 8240 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe" /service
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\EslWire\service\WireHelperSvc.exe"
"C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe"
"C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe" /service
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
dashost.exe {91e921ef-f5c0-4d2c-a155cc48c04ecb0b}
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Start Menu X\StartMenuX.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files (x86)\totalcmd\TOTALCMD.EXE"
C:\WINDOWS\system32\msiexec.exe /V

"D:\DL\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\update-S-1-5-21-2278359358-1542340132-2198614645-1003.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
C:\WINDOWS\tasks\update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate

=========Mozilla firefox=========

ProfilePath - C:\Users\BOSS\AppData\Roaming\Mozilla\Firefox\Profiles\upqp8kcc.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.101.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0]
"Description"=BlackBerry Web Software Loading Helper Plug-In for Mozilla browsers
"Path"=C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.101.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL


C:\Users\BOSS\AppData\Roaming\Mozilla\Firefox\Profiles\upqp8kcc.default\extensions\
djziggy@gmail.com
info@djzig.com
{8b86149f-01fb-4842-9dd8-4d7eb02fd055}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-26 571456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-26 234560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-26 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2016-06-15 1522480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-26 186944]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"StartMenuX"=C:\Program Files\Start Menu X\StartMenuX.exe [2016-06-10 7941464]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22 598552]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.inf - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.ini - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.txt - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1

======List of files/folders created in the last 1 month======

2016-07-26 17:14:41 ----D---- C:\rsit
2016-07-26 17:14:41 ----D---- C:\Program Files\trend micro
2016-07-26 17:12:00 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-64.dll
2016-07-24 20:13:35 ----D---- C:\Program Files\SUPERAntiSpyware
2016-07-16 23:00:01 ----D---- C:\Program Files (x86)\Google Hacks
2016-07-13 19:02:04 ----D---- C:\Program Files\CMAK
2016-07-13 19:02:04 ----D---- C:\Program Files (x86)\CMAK
2016-07-13 17:43:59 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-07-13 17:43:58 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-07-13 17:43:57 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-07-13 17:43:56 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-07-13 17:43:56 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-07-13 17:43:56 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-07-13 17:43:55 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-07-13 17:43:55 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-07-13 17:43:55 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-07-13 17:43:55 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-07-13 17:43:55 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-07-13 17:43:55 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-07-13 17:43:54 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-07-13 17:43:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-07-13 17:43:54 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-07-13 17:43:54 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-07-13 17:43:53 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-07-13 17:43:53 ----A---- C:\WINDOWS\system32\ole32.dll
2016-07-13 17:43:53 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-07-13 17:43:53 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-07-13 17:43:53 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-07-13 17:43:52 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-07-13 17:43:52 ----A---- C:\WINDOWS\system32\wmp.dll
2016-07-13 17:43:52 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-07-13 17:43:51 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-07-13 17:43:50 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\winmde.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\provops.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\provhandlers.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\provengine.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\propsys.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\localspl.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\d3d9.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\authui.dll
2016-07-13 17:43:50 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\wpdshext.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\wmpps.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\webio.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\twinapi.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\StikyNot.exe
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\SHCore.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\ntprint.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\inetpp.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\duser.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\dui70.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\d3d10.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-07-13 17:43:49 ----A---- C:\WINDOWS\system32\cdd.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\wlanui.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\WPDShServiceObj.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\winsrv.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\RADCUI.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\FntCache.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\d3d10_1.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-07-13 17:43:48 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\wininet.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\twinui.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-07-13 17:43:47 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2016-07-13 17:43:47 ----A---- C:\WINDOWS\explorer.exe
2016-07-13 17:43:46 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\Wpc.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\crypt32.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-07-13 17:43:46 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2016-07-13 17:43:45 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\wmpmde.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\WLanConn.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\winipcsecproc.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\winipcfile.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\shutdownux.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\SettingsHandlers_Maps.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\OneBackupHandler.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\gameux.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\DMRServer.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\dmcsps.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-07-13 17:43:45 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\ntprint.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\WmpDui.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\wlanui.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\winmsipc.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\sud.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\msieftp.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\ListSvc.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\Display.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-07-13 17:43:44 ----A---- C:\WINDOWS\system32\credprovs.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\msscntrs.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\IconCodecService.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\werui.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-07-13 17:43:43 ----A---- C:\WINDOWS\system32\cdpreference.exe
2016-07-13 17:43:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\mos.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-07-13 17:43:42 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\tquery.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\SRH.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\moshost.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-07-13 17:43:41 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\WSShared.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\NotificationController.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\mssrch.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\mf.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-07-13 17:43:40 ----A---- C:\WINDOWS\system32\diagperf.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\winipcsecproc.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\winipcfile.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\wiaaut.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\oemlicense.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\msieftp.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\licensingdiag.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\SYSWOW64\Clipc.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\WSSync.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\WSService.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\WSClient.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\wldp.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\sbe.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\rdpcore.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\phoneactivate.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\mssphtb.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\mssph.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\msscntrs.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\mfpmp.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\GamePanel.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\fhsettingsprovider.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\fhengine.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\fhcfg.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\edputil.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\easwrt.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\ClipUp.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\APHostService.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-07-13 17:43:39 ----A---- C:\WINDOWS\HelpPane.exe
2016-07-13 17:43:38 ----A---- C:\WINDOWS\SYSWOW64\winmsipc.dll
2016-07-13 17:43:38 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-07-13 17:43:38 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-07-13 17:43:38 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-07-13 17:43:38 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-07-13 17:43:38 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2016-07-13 17:43:38 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-07-13 17:43:37 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-07-13 17:43:37 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-07-13 17:43:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-07-13 17:43:37 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-07-13 17:43:37 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-07-13 17:43:37 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-07-13 17:43:36 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\eappcfg.dll
2016-07-13 17:43:35 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-07-13 17:43:34 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2016-07-13 17:43:34 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2016-07-13 17:43:34 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-07-13 17:43:34 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-07-13 17:43:34 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-07-13 17:43:34 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2016-07-13 17:43:33 ----A---- C:\WINDOWS\SYSWOW64\SimCfg.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\SimCfg.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\SimAuth.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\schtasks.exe
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\cscui.dll
2016-07-13 17:43:33 ----A---- C:\WINDOWS\system32\certcli.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\wldp.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryBroker.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\taskcomp.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\SimAuth.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\edputil.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\themeui.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\oemlicense.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\netshell.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\licensingdiag.exe
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\ieui.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\eappprxy.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\eapphost.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\eappgnui.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\Clipc.dll
2016-07-13 17:43:32 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\invagent.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\devinv.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-07-13 17:43:31 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-07-13 17:43:30 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-07-13 17:43:30 ----A---- C:\WINDOWS\system32\shell32.dll
2016-07-13 17:43:29 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-07-13 17:43:29 ----A---- C:\WINDOWS\system32\sppsvc.exe
2016-07-13 17:43:28 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-07-13 17:43:28 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-07-13 17:43:28 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2016-07-13 17:43:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\xpsservices.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\usocore.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\PrintDialogs3D.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\DWrite.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\dbgeng.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-13 17:43:27 ----A---- C:\WINDOWS\system32\aepic.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\ExecModelClient.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\wmicmiplugin.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\winresume.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\winload.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\werconcpl.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\taskeng.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\taskcomp.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\sdengin2.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\rasgcw.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\netcenter.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\LegacyNetUX.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\dot3ui.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\dlnashext.dll
2016-07-13 17:43:26 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\system32\wiaaut.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\system32\sdshext.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\system32\sdrsvc.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-07-13 17:43:25 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-06-28 19:20:50 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2016-06-28 19:20:24 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2016-06-28 19:20:19 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2016-06-28 19:20:13 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2016-06-28 19:20:07 ----D---- C:\ProgramData\Malwarebytes
2016-06-28 19:20:07 ----AD---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-06-28 17:21:32 ----A---- C:\WINDOWS\system32\drivers\VBoxNetLwf.sys
2016-06-28 17:21:32 ----A---- C:\WINDOWS\system32\drivers\VBoxNetAdp6.sys

======List of files/folders modified in the last 1 month======

2016-07-26 17:14:41 ----RD---- C:\Program Files
2016-07-26 17:12:09 ----D---- C:\ProgramData\Oracle
2016-07-26 17:12:03 ----SHD---- C:\WINDOWS\Installer
2016-07-26 17:12:03 ----D---- C:\WINDOWS\Temp
2016-07-26 17:12:03 ----D---- C:\WINDOWS\SysWOW64
2016-07-26 17:12:03 ----D---- C:\Program Files (x86)\Java
2016-07-26 17:12:00 ----D---- C:\Program Files\Java
2016-07-26 17:11:59 ----D---- C:\WINDOWS\System32
2016-07-26 17:11:56 ----D---- C:\Program Files (x86)\Common Files
2016-07-26 17:11:49 ----A---- C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-07-26 17:11:35 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-07-26 17:10:45 ----D---- C:\WINDOWS\system32\drivers\etc
2016-07-26 17:00:07 ----D---- C:\WINDOWS\INF
2016-07-26 17:00:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-26 16:57:47 ----HD---- C:\Program Files\WindowsApps
2016-07-26 16:57:31 ----D---- C:\WINDOWS\AppReadiness
2016-07-26 16:56:25 ----D---- C:\WINDOWS\Prefetch
2016-07-26 16:56:00 ----AD---- C:\Program Files\Bitdefender Agent
2016-07-26 16:55:45 ----D---- C:\WINDOWS\system32\sru
2016-07-26 16:55:10 ----A---- C:\bdlog.txt
2016-07-26 16:54:27 ----D---- C:\WINDOWS\system32\Tasks
2016-07-26 16:54:14 ----D---- C:\WINDOWS\Tasks
2016-07-26 16:53:57 ----D---- C:\Windows
2016-07-25 18:59:09 ----SHD---- C:\System Volume Information
2016-07-25 18:59:09 ----D---- C:\WINDOWS\system32\catroot2
2016-07-25 18:40:23 ----D---- C:\WINDOWS\Microsoft.NET
2016-07-24 20:26:33 ----D---- C:\Program Files (x86)\YTD
2016-07-24 20:14:06 ----HD---- C:\ProgramData
2016-07-24 14:39:51 ----D---- C:\WINDOWS\rescache
2016-07-24 14:30:35 ----RSD---- C:\WINDOWS\assembly
2016-07-16 23:00:01 ----RD---- C:\Program Files (x86)
2016-07-16 20:39:11 ----D---- C:\WINDOWS\system32\CatRoot
2016-07-16 20:37:51 ----D---- C:\WINDOWS\system32\DriverStore
2016-07-16 20:37:51 ----D---- C:\WINDOWS\system32\drivers
2016-07-16 20:37:50 ----DC---- C:\WINDOWS\system32\DRVSTORE
2016-07-16 20:36:48 ----D---- C:\WINDOWS\system32\config
2016-07-16 20:34:05 ----D---- C:\WINDOWS\system32\wbem
2016-07-16 20:33:28 ----D---- C:\Users\BOSS\AppData\Roaming\GHISLER
2016-07-16 20:33:12 ----D---- C:\WINDOWS\registration
2016-07-16 20:33:12 ----D---- C:\Users\BOSS\AppData\Roaming\Skype
2016-07-15 19:02:50 ----D---- C:\x
2016-07-13 19:29:10 ----D---- C:\WINDOWS\WinSxS
2016-07-13 19:02:08 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-07-13 19:02:08 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-07-13 19:02:05 ----D---- C:\WINDOWS\system32\sk-SK
2016-07-13 19:02:05 ----D---- C:\WINDOWS\system32\oobe
2016-07-13 19:02:05 ----D---- C:\WINDOWS\system32\migration
2016-07-13 19:02:05 ----D---- C:\WINDOWS\system32\en-US
2016-07-13 19:02:05 ----D---- C:\WINDOWS\system32\drivers\en-US
2016-07-13 19:02:05 ----D---- C:\WINDOWS\system32\appraiser
2016-07-13 19:02:04 ----RD---- C:\WINDOWS\PrintDialog
2016-07-13 19:02:04 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-07-13 19:02:04 ----RD---- C:\WINDOWS\DevicesFlow
2016-07-13 19:02:04 ----D---- C:\WINDOWS\Provisioning
2016-07-13 19:02:04 ----D---- C:\WINDOWS\PolicyDefinitions
2016-07-13 19:02:04 ----D---- C:\WINDOWS\bcastdvr
2016-07-13 19:02:04 ----D---- C:\WINDOWS\AppPatch
2016-07-13 19:02:04 ----D---- C:\Program Files\Windows Photo Viewer
2016-07-13 19:02:04 ----D---- C:\Program Files\Windows Mail
2016-07-13 19:02:04 ----D---- C:\Program Files\Windows Journal
2016-07-13 19:02:04 ----D---- C:\Program Files\Windows Defender
2016-07-13 19:02:04 ----D---- C:\Program Files\Internet Explorer
2016-07-13 19:02:04 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2016-07-13 19:02:04 ----D---- C:\Program Files (x86)\Windows Mail
2016-07-13 19:02:04 ----D---- C:\Program Files (x86)\Windows Defender
2016-07-13 19:02:04 ----D---- C:\Program Files (x86)\Internet Explorer
2016-07-13 18:56:32 ----D---- C:\WINDOWS\CbsTemp
2016-07-13 17:50:03 ----D---- C:\ProgramData\Microsoft Help
2016-07-10 17:16:54 ----D---- C:\Program Files (x86)\Steam
2016-07-03 15:43:55 ----AD---- C:\Program Files\TeamSpeak 3 Client
2016-07-02 06:37:58 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-06-29 20:45:58 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-29 18:44:04 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2016-06-28 17:54:17 ----D---- C:\WINDOWS\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avc3;avc3; C:\WINDOWS\system32\DRIVERS\avc3.sys [2016-04-29 1623536]
R0 ESLWireAC;ESLWireAC; C:\WINDOWS\system32\drivers\ESLWireACD.sys [2016-07-03 99464]
R0 gzflt;gzflt; C:\WINDOWS\system32\DRIVERS\gzflt.sys [2016-04-29 182936]
R0 ignis;ignis Service; C:\WINDOWS\system32\DRIVERS\ignis.sys [2016-06-28 299816]
R0 trufos;trufos; C:\WINDOWS\system32\DRIVERS\trufos.sys [2016-06-28 520032]
R1 bdfwfpf;bdfwfpf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2016-06-28 128400]
R1 BDVEDISK;BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [2015-12-04 87912]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 LGCoreTemp;Logitech CPU Core Tempurature; \??\C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [2015-06-21 14184]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-12-23 23973888]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-12-23 672256]
R3 AtiHDAudioService;@oem8.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2015-09-21 102912]
R3 avckf;avckf; C:\WINDOWS\system32\DRIVERS\avckf.sys [2016-04-29 842152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-08-09 4504320]
R3 LGBusEnum;@oem19.inf,%LGBusEnum.SVCDESC%;Logitech Gaming Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\LGBusEnum.sys [2015-06-11 37408]
R3 LGJoyXlCore;@oem19.inf,%LGJoyXlCore.SVCDESC%;Logitech Translation Layer Driver (LGS); C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [2015-06-11 68384]
R3 MEIx64;@oem7.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2015-08-09 56344]
R3 rimvndis;@oem375.inf,%rimvndis.DeviceDesc%;BlackBerry Virtual Private Network; C:\WINDOWS\System32\Drivers\rimvndis6_AMD64.sys [2015-03-19 18432]
R3 RimVSerPort;@oem372.inf,%RimVSerPort%;RIM Virtual Serial Port v2; C:\WINDOWS\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2015-10-30 12800]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-10-30 589824]
R3 ssdevfactory;@oem4.inf,%ssdevfactory.SVCDESC%;SteelSeries Device Factory Service; C:\WINDOWS\System32\drivers\ssdevfactory.sys [2015-10-03 40568]
S0 amdkmafd;@oem5.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2015-06-03 31992]
S0 bdelam;bdelam; C:\WINDOWS\system32\drivers\bdelam.sys [2013-09-08 23568]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 AndnetBus;@oem82.inf,%LGSI.Service.Desc%;LGE Mobile USB Composite Device; C:\WINDOWS\System32\drivers\lgandnetbus64.sys [2015-01-21 20992]
S3 AndNetDiag;@oem86.inf,%Lgsi.Service.Name%;LGE AndroidNet USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgandnetdiag64.sys [2015-01-26 30720]
S3 ANDNetModem;@oem92.inf,%LGSI.Service.Name%;LGE AndroidNet USB Modem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem64.sys [2015-01-26 37376]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 blackberryncm;@oem374.inf,%blackberryncm.SVCDESC%;BlackBerryNCM Service; C:\WINDOWS\System32\drivers\blackberryncm6_AMD64.sys [2014-09-08 25088]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-11-22 117248]
S3 cpuz138;cpuz138; \??\C:\WINDOWS\TEMP\cpuz138\cpuz138_x64.sys [2016-04-02 27320]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-08-31 108800]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 GPUZ;GPUZ; \??\C:\WINDOWS\TEMP\GPUZ.sys [2016-04-02 27008]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 nmwcd;@oem142.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem141.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pwdrvio;pwdrvio; \??\C:\WINDOWS\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\WINDOWS\syswow64\pwdspio.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RimUsb;@oem57.inf,%RimUsb.DeviceDesc%;BlackBerry Smartphone; C:\WINDOWS\System32\Drivers\RimUsb_AMD64.sys [2014-05-06 79872]
S3 sshid;@oem370.inf,%sshid.SvcDesc%;SteelSeries HID Service; C:\WINDOWS\System32\drivers\sshid.sys [2016-01-28 51400]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-08-31 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-04-23 63488]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2016-05-28 258912]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2016-04-23 131424]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DTSAudioService;DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [2015-08-09 218768]
R2 EslWireHelper;ESL Wire Helper Service; C:\Program Files\EslWire\service\WireHelperSvc.exe [2016-04-12 663056]
R2 ProductAgentService;ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [2016-05-24 950200]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-09 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 pSP2clnt;pSP2clnt; C:\Program Files\pSP2Clnt\service\pSP2Clnt.exe [2016-06-28 1133056]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-12-23 246272]
S3 BlackBerry Device Manager;BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2014-10-31 588024]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2015-03-20 344288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-09 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2de99;MessagingService_2de99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_30f6b;MessagingService_30f6b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-29 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-07-31 242864]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_2de99;Kontaktné údaje_2de99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_30f6b;Kontaktné údaje_30f6b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 RIM MDNS;RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [2015-03-19 396024]
S3 RIM Tunnel Service;BlackBerry Link Communication Manager; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [2015-03-19 1354488]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-07-09 1450064]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S4 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 OneSyncSvc_2de99;Sync Host_2de99; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 OneSyncSvc_30f6b;Sync Host_30f6b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[666_peter_666]

Vykonal som všetko podla vašej rady a posielam log:

# AdwCleaner v5.201 - Log vytvorený 27/07/2016 v 17:27:44
# Aktualizované 30/06/2016 by ToolsLib
# Databáza : 2016-07-27.1 [Server]
# Operačný systém : Windows 10 Pro (X64)
# Užívateľské meno : BOSS - BOSS-PC
# Spustené z : C:\Users\BOSS\Desktop\adwcleaner_5.201.exe
# Nastavenie : Čistenie
# Podpora : https://toolslib.net/forum

***** [ Služby ] *****


***** [ Priečinky ] *****

[-] Priečinok Zmazané : C:\Program Files (x86)\ytd
[-] Priečinok Zmazané : C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil

***** [ Súbory ] *****

[-] Súbor Zmazané : C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\elicpjhcidhpjomhibiffojpinpmmpil

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupcovia ] *****


***** [ Naplánované úlohy ] *****


***** [ Registre ] *****

[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
[-] Kľúč registra Zmazané : HKCU\Software\Conduit

***** [ Webové prehliadače ] *****

[-] [C:\Users\BOSS\AppData\Roaming\Mozilla\Firefox\Profiles\upqp8kcc.default\prefs.js] Zmazané : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\BOSS\AppData\Roaming\Mozilla\Firefox\Profiles\upqp8kcc.default\prefs.js] Zmazané : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\BOSS\AppData\Roaming\Mozilla\Firefox\Profiles\upqp8kcc.default\prefs.js] Zmazané : user_pref("extensions.50b9dce245934.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.location.hostname)>-1) return;}c[...]
[-] [C:\Users\BOSS\AppData\Roaming\Mozilla\Firefox\Profiles\upqp8kcc.default\prefs.js] Zmazané : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Zmazané : websearch.ask.com
[-] [C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Zmazané : pdf-xchange-viewer.en.softonic.com
[-] [C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Zmazané : elicpjhcidhpjomhibiffojpinpmmpil

*************************

:: "Tracing" kľúče zmazané
:: Nastavenia Winsock resetované.

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2973 bajtov] - [27/07/2016 17:27:44]
C:\AdwCleaner\AdwCleaner[S1].txt - [3071 bajtov] - [27/07/2016 17:26:29]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3121 bajtov] ##########

[Rudy]

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

[666_peter_666]

V prílohe mám FRST.txt:

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2278359358-1542340132-2198614645-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Igor\AppData\Local\4C09.tmp
C:\Users\Igor\AppData\Local\7688.tmp
C:\Users\Igor\AppData\Local\BE8.tmp
C:\Users\Igor\AppData\Local\79C2.tmp
C:\Users\Igor\AppData\Local\598C.tmp
C:\Users\Igor\AppData\Local\8E5.tmp
C:\Users\Igor\AppData\Local\7E16.tmp
C:\Users\Igor\AppData\Local\666E.tmp
C:\Users\Igor\AppData\Local\7B62.tmp
C:\Users\Igor\AppData\Local\2800.tmp
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\Users\BOSS\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [306]
AlternateDataStreams: C:\Users\BOSS\Desktop\adwcleaner_5.201.exe:BDU [0]
AlternateDataStreams: C:\Users\BOSS\Desktop\FRSTLauncher.exe:BDU [0]
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[666_peter_666]

Dobrý deň, kopírujem Fixlog.txt:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2278359358-1542340132-2198614645-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Igor\AppData\Local\4C09.tmp
C:\Users\Igor\AppData\Local\7688.tmp
C:\Users\Igor\AppData\Local\BE8.tmp
C:\Users\Igor\AppData\Local\79C2.tmp
C:\Users\Igor\AppData\Local\598C.tmp
C:\Users\Igor\AppData\Local\8E5.tmp
C:\Users\Igor\AppData\Local\7E16.tmp
C:\Users\Igor\AppData\Local\666E.tmp
C:\Users\Igor\AppData\Local\7B62.tmp
C:\Users\Igor\AppData\Local\2800.tmp
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\Users\BOSS\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [306]
AlternateDataStreams: C:\Users\BOSS\Desktop\adwcleaner_5.201.exe:BDU [0]
AlternateDataStreams: C:\Users\BOSS\Desktop\FRSTLauncher.exe:BDU [0]
End

[Rudy]

Tohle už tu máme. Zajímá mne log po mazání.

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Toto jste provedl?

[666_peter_666]

Prepáčte, asi som sem zo schránky vložil pôvodný text.
Takto by to malo byť správne:

Fix result of Farbar Recovery Scan Tool (x64) Version: 27-07-2016
Ran by BOSS (2016-07-28 17:20:49) Run:1
Running from C:\Users\BOSS\Desktop
Loaded Profiles: BOSS (Available Profiles: BOSS & Igor)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2278359358-1542340132-2198614645-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Igor\AppData\Local\4C09.tmp
C:\Users\Igor\AppData\Local\7688.tmp
C:\Users\Igor\AppData\Local\BE8.tmp
C:\Users\Igor\AppData\Local\79C2.tmp
C:\Users\Igor\AppData\Local\598C.tmp
C:\Users\Igor\AppData\Local\8E5.tmp
C:\Users\Igor\AppData\Local\7E16.tmp
C:\Users\Igor\AppData\Local\666E.tmp
C:\Users\Igor\AppData\Local\7B62.tmp
C:\Users\Igor\AppData\Local\2800.tmp
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\Users\BOSS\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [306]
AlternateDataStreams: C:\Users\BOSS\Desktop\adwcleaner_5.201.exe:BDU [0]
AlternateDataStreams: C:\Users\BOSS\Desktop\FRSTLauncher.exe:BDU [0]
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\S-1-5-21-2278359358-1542340132-2198614645-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
C:\Users\Igor\AppData\Local\4C09.tmp => moved successfully
C:\Users\Igor\AppData\Local\7688.tmp => moved successfully
C:\Users\Igor\AppData\Local\BE8.tmp => moved successfully
C:\Users\Igor\AppData\Local\79C2.tmp => moved successfully
C:\Users\Igor\AppData\Local\598C.tmp => moved successfully
C:\Users\Igor\AppData\Local\8E5.tmp => moved successfully
C:\Users\Igor\AppData\Local\7E16.tmp => moved successfully
C:\Users\Igor\AppData\Local\666E.tmp => moved successfully
C:\Users\Igor\AppData\Local\7B62.tmp => moved successfully
C:\Users\Igor\AppData\Local\2800.tmp => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\Users\BOSS\AppData\Local\Temp => moved successfully
C:\ProgramData\TEMP => ":1CE11B51" ADS removed successfully.
C:\Users\BOSS\Desktop\adwcleaner_5.201.exe => ":BDU" ADS removed successfully.
C:\Users\BOSS\Desktop\FRSTLauncher.exe => ":BDU" ADS removed successfully.

==== End of Fixlog 17:20:50 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[666_peter_666]

Nastavenie Proxy zatial drží, priradenia typov viacerých multimediálnych súborov k programom, ktoré sa mi predtým pomenili, som nastavil späť; preskenoval som PC s Malwarebytes - žiadne infekcie nenašiel.
Párkrát som PC reštartoval, vyzerá to byť OK. Ak by sa to v budúcnosti vrátilo, tak sa určite ozvem.
Velmi pekne vám ďakujem za pomoc, pekný večer,
Peter

P.S. Aj za vašu dlhoročnú ochotu pomôcť by som sa vám a vašim kolegom rád aspoň menšou finančnou čiastkou poďakoval.

[Rudy]

Nemáte zač a za příspěvek děkujeme!