Prosba kontrola logu

[martion]

Ahoj som tu zas manzelka my dala firemny notebook ze ho ma strasne pomaly tak som odinstaloval co sa dalo spustil ccleaner este aj defragmentujem ale stale to nie je ono.Mohli by ste my prosim skontrolovat log ci je vsetko v poriadku.Win su legalne:)

Logfile of random's system information tool 1.14 (written by random/random)
Run by Duko at 2016-12-15 21:35:08
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 68 GB (44%) free of 153 GB
Total RAM: 3957 MB (58% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:35:13, on 15.12.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Users\Duko\AppData\Local\Temp\{EFBF5FAD-08B1-4E8D-BD44-010C61D43A0B}\{75E38F04-1BAF-4054-A059-57F831688943}\BrLogRx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Duko_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8268 bytes

======Enumerating Processes======

C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 28592784
\??\C:\Windows\system32\conhost.exe "-134202162917040107131148951774186840954813333051031827886774-2089113984-710135915
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe" -boot
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files\PowerISO\PWRISOVM.EXE" -startup
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Program Files\CCleaner\CCleaner64.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss a0fa316f-fcf7-44cd-8e69-1b0972d44419 1
\??\C:\Windows\system32\conhost.exe "30990045118335988016167835161919187233-92480529121342423381683919871292630651
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-15041947-152042837912314310749881142441605559592-1588065319916266507-828592545
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Users\Duko\AppData\Local\Temp\{EFBF5FAD-08B1-4E8D-BD44-010C61D43A0B}\{75E38F04-1BAF-4054-A059-57F831688943}\BrLogRx.exe /function=INST
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Duko\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0xa4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4076 --on-initialized-event-handle=340 --parent-handle=344 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,*AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Default/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,16,17,18,21,37,65 --gpu-vendor-id=0x10de --gpu-device-id=0x0a70 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4195 --gpu-driver-date=1-29-2016 --service-request-channel-token=29A28A861F6B2A37F0B54D38936ECD2A --mojo-platform-channel-handle=1060 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files\Defraggler\Defraggler64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,*AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Default/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Control/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C3621B72D496183113D3F7C66078AACE --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C3621B72D496183113D3F7C66078AACE --mojo-platform-channel-handle=3792 /prefetch:1
C:\Windows\system32\taskeng.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,*AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Default/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/*PasswordBranding/Control/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=0D99BD316A384A1FDC6145DEEB861A62 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=0D99BD316A384A1FDC6145DEEB861A62 --mojo-platform-channel-handle=3916 /prefetch:1
"C:\Users\Duko\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\SlimDrivers Startup.job - C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe -boot
C:\Windows\tasks\TrackerAutoUpdate.job - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\SlimDrivers Startup - C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe -boot
C:\Windows\system32\tasks\TrackerAutoUpdate - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate
C:\Windows\system32\tasks\{690CA193-6798-49C9-BED6-9933DF697AA1} - C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{75E38F04-1BAF-4054-A059-57F831688943}\Setup.exe" -c -runfromtemp -l0x0005 UNINSTALL Reg=DSLe2-FB -removeonly
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-3821376757-2625975455-1948322372-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Google Chrome=========

C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension dbhjdbfgekjfcfkkfjjmlmojhbllhbho 2 Ochrana Kaspersky 4.0.9.130
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5516.1005.0.3
Homepage:
default_search_provider.search_url:
C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-29 2585744]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-01-29 1514528]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01 13874392]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2016-05-25 454792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-12-15 21:35:08 ----D---- C:\rsit
2016-12-15 21:35:08 ----D---- C:\Program Files\trend micro
2016-12-15 21:31:07 ----D---- C:\Program Files\Defraggler
2016-12-15 21:24:47 ----D---- C:\Program Files (x86)\ControlCenter4
2016-12-15 21:15:37 ----SHD---- C:\Config.Msi
2016-12-15 07:33:44 ----A---- C:\Windows\system32\mshtml.dll
2016-12-15 07:33:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-15 07:33:40 ----A---- C:\Windows\system32\ieframe.dll
2016-12-15 07:33:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-15 07:33:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-15 07:33:38 ----A---- C:\Windows\system32\jscript9.dll
2016-12-15 07:33:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-15 07:33:37 ----A---- C:\Windows\system32\wininet.dll
2016-12-15 07:33:37 ----A---- C:\Windows\system32\win32k.sys
2016-12-15 07:33:37 ----A---- C:\Windows\system32\crypt32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\wintrust.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\winload.exe
2016-12-15 07:33:36 ----A---- C:\Windows\system32\usp10.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\user32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\msi.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-15 07:33:36 ----A---- C:\Windows\system32\clfs.sys
2016-12-15 07:33:36 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-15 07:33:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-15 07:33:35 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-15 07:33:35 ----A---- C:\Windows\system32\gdi32.dll
2016-12-15 07:33:35 ----A---- C:\Windows\system32\consent.exe
2016-12-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-15 07:33:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-15 07:33:33 ----A---- C:\Windows\system32\ntdll.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\vbscript.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\urlmon.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\jscript.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\iertutil.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\hlink.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-15 07:33:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-15 07:33:32 ----A---- C:\Windows\system32\certcli.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-15 07:33:31 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\msihnd.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\msiexec.exe
2016-12-15 07:33:30 ----A---- C:\Windows\system32\ieui.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\authui.dll
2016-12-15 07:33:29 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\webcheck.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\smss.exe
2016-12-15 07:33:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\advapi32.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\msrating.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\kernel32.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\kerberos.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-15 07:33:27 ----A---- C:\Windows\system32\occache.dll
2016-12-15 07:33:27 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-15 07:33:27 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-15 07:33:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-15 07:33:25 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\schannel.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\inseng.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-15 07:33:23 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\appinfo.dll
2016-12-15 07:33:22 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-15 07:33:22 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wow64win.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wow64.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\winsrv.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wdigest.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\sspicli.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\srcore.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\iesetup.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-15 07:33:21 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-15 07:33:21 ----A---- C:\Windows\system32\conhost.exe
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\srclient.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\secur32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\rstrui.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\lsass.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\iernonce.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-15 07:33:20 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-15 07:33:20 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\credssp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\auditpol.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidapi.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-15 07:33:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-15 07:33:18 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-15 07:33:17 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-15 07:33:17 ----A---- C:\Windows\system32\msimsg.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\tzres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\msobjs.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\msaudite.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\adtschema.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcr110_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcr100_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcp110_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcr110_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcr100_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcp110_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\aspnet_counters.dll

======List of files/folders modified in the last 1 month======

2016-12-15 21:35:10 ----D---- C:\Windows\Temp
2016-12-15 21:35:08 ----RD---- C:\Program Files
2016-12-15 21:27:32 ----HD---- C:\ProgramData
2016-12-15 21:27:21 ----RD---- C:\Program Files (x86)
2016-12-15 21:27:21 ----D---- C:\Program Files (x86)\Brother
2016-12-15 21:27:18 ----D---- C:\Windows\SysWOW64
2016-12-15 21:27:15 ----D---- C:\Windows\system32\DriverStore
2016-12-15 21:27:12 ----D---- C:\Windows\inf
2016-12-15 21:27:11 ----D---- C:\Windows\system32\catroot
2016-12-15 21:26:13 ----D---- C:\Windows\System32
2016-12-15 21:26:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-12-15 21:23:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-12-15 21:23:45 ----SHD---- C:\System Volume Information
2016-12-15 21:22:35 ----D---- C:\Windows\system32\config
2016-12-15 21:20:10 ----D---- C:\Windows
2016-12-15 21:18:56 ----D---- C:\Windows\system32\drivers
2016-12-15 21:17:20 ----D---- C:\Windows\system32\catroot2
2016-12-15 21:17:13 ----SHD---- C:\Windows\Installer
2016-12-15 21:16:49 ----D---- C:\ProgramData\Kaspersky Lab
2016-12-15 21:05:53 ----D---- C:\Windows\system32\Tasks
2016-12-15 21:05:21 ----D---- C:\Program Files (x86)\Black_Box
2016-12-15 21:02:42 ----D---- C:\Program Files\Common Files\Apple
2016-12-15 20:50:44 ----D---- C:\Program Files (x86)\TeamViewer
2016-12-15 20:50:14 ----D---- C:\Windows\Logs
2016-12-15 20:50:14 ----D---- C:\Windows\debug
2016-12-15 20:48:41 ----D---- C:\Windows\Microsoft.NET
2016-12-15 20:48:40 ----RSD---- C:\Windows\assembly
2016-12-15 20:48:34 ----D---- C:\Windows\Prefetch
2016-12-15 20:43:38 ----D---- C:\Windows\winsxs
2016-12-15 20:40:13 ----D---- C:\Program Files\Internet Explorer
2016-12-15 20:40:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-15 20:40:12 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-15 20:40:11 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-15 20:40:07 ----D---- C:\Windows\system32\cs-CZ
2016-12-15 20:40:06 ----D---- C:\Windows\system32\en-US
2016-12-15 20:39:59 ----D---- C:\Windows\AppPatch
2016-12-15 20:39:57 ----D---- C:\Windows\system32\Boot
2016-12-15 20:34:53 ----D---- C:\Windows\system32\MRT
2016-12-15 20:34:39 ----AC---- C:\Windows\system32\MRT.exe
2016-12-15 20:34:04 ----D---- C:\ProgramData\Microsoft Help
2016-12-15 20:31:04 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-12-09 10:02:01 ----D---- C:\ProgramData\ProductData
2016-11-26 16:16:28 ----D---- C:\Windows\rescache
2016-11-26 13:49:48 ----D---- C:\KMPlayer

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-11-21 632168]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-11-21 28008]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2016-05-25 137280]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-05 4745280]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2016-03-29 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-07-03 598328]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-01 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-17 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-03-06 21544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4430808]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-01-29 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-29 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-01-29 38032]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2016-03-29 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2016-12-15 16056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-29 23200]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-10-17 1005944]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-11-29 105144]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-11-29 125112]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-29 1148560]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-21 15720]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-29 1706128]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2016-01-29 21833360]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-01-29 932728]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2016-05-12 7032080]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-29 154440]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2016-01-14 2945312]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-29 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-11-12 114688]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-03-28 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-11-29 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

[martion]

# AdwCleaner v6.041 - Log vytvořen 15/12/2016 v 22:34:56
# Aktualizováno dne 16/12/2016 z Malwarebytes
# Databáze : 2016-12-15.1 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X64)
# Uživatelské jméno : Duko - DUKO-PC
# Spuštěno z : C:\Users\Duko\Downloads\adwcleaner_6.041.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

[-] Služba smazána: swdumon


***** [ Složky ] *****

[-] Složka smazána: C:\Users\Duko\AppData\Local\slimware utilities inc
[#] Složka smazána po restartu: C:\Users\Duko\AppData\Local\SlimWare Utilities Inc
[-] Složka smazána: C:\ProgramData\SlimWare Utilities, Inc
[#] Složka smazána po restartu: C:\ProgramData\Application Data\SlimWare Utilities, Inc
[-] Složka smazána: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
[-] Složka smazána: C:\Users\Public\Documents\Downloaded Installers
[-] Složka smazána: C:\Program Files (x86)\SlimDrivers


***** [ Soubory ] *****

[-] Soubor smazán: C:\Windows\SysNative\drivers\swdumon.sys


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****

[-] Úloha smazána: SlimDrivers Startup


***** [ Registry ] *****

[-] Klíč smazán: HKU\S-1-5-21-3821376757-2625975455-1948322372-1000\Software\SlimWare Utilities Inc
[#] Klíč smazán po restartu: HKCU\Software\SlimWare Utilities Inc
[-] Klíč smazán: HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
[-] Klíč smazán: HKLM\SOFTWARE\SlimWare Utilities Inc
[#] Klíč smazán po restartu: [x64] HKCU\Software\SlimWare Utilities Inc
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\952BA647474611149866C1269F6A0E36
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\952BA647474611149866C1269F6A0E36


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2133 Bajty] - [15/12/2016 22:34:56]
C:\AdwCleaner\AdwCleaner[S0].txt - [2366 Bajty] - [15/12/2016 22:33:19]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2279 Bajty] ##########

[Rudy]

Dejte nový log RSIT.

[martion]

Logfile of random's system information tool 1.14 (written by random/random)
Run by Duko at 2016-12-17 14:14:45
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 90 GB (59%) free of 153 GB
Total RAM: 3957 MB (59% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:14:49, on 17.12.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Duko_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8202 bytes

======Enumerating Processes======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 36928128
\??\C:\Windows\system32\conhost.exe "1179229770-72578499051116012-174998123221359944801150453346976987950-1270669171
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\taskeng.exe
"C:\Program Files\PowerISO\PWRISOVM.EXE" -startup
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "2659004393770252281644742842450109123-2699323823458112581102876219-879926447
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Duko\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0xa4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4156 --on-initialized-event-handle=340 --parent-handle=344 /prefetch:6
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,*AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Default/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/Control/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,16,17,18,21,37,65 --gpu-vendor-id=0x10de --gpu-device-id=0x0a70 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.4201 --gpu-driver-date=11-14-2016 --service-request-channel-token=6DCBE5D90323C5FFBDA8BACDD1C33314 --mojo-platform-channel-handle=1064 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,*AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Default/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/Control/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=103CB522FCDDFE4DACF4EAD16B931775 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=103CB522FCDDFE4DACF4EAD16B931775 --mojo-platform-channel-handle=2184 /prefetch:1
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Duko\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\TrackerAutoUpdate.job - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\TrackerAutoUpdate - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate
C:\Windows\system32\tasks\{690CA193-6798-49C9-BED6-9933DF697AA1} - C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{75E38F04-1BAF-4054-A059-57F831688943}\Setup.exe" -c -runfromtemp -l0x0005 UNINSTALL Reg=DSLe2-FB -removeonly
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-3821376757-2625975455-1948322372-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Google Chrome=========

C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension dbhjdbfgekjfcfkkfjjmlmojhbllhbho 2 Ochrana Kaspersky 4.0.9.130
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5516.1005.0.3
Homepage:
default_search_provider.search_url:
C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-11-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-14 1767712]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01 13874392]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2016-05-25 454792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-12-16 00:23:36 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2016-12-16 00:07:00 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-12-16 00:05:38 ----D---- C:\ProgramData\NVIDIA
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvvsvc.exe
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvsvcr.dll
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvsvc64.dll
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvshext.dll
2016-12-16 00:05:18 ----A---- C:\Windows\system32\nvmctray.dll
2016-12-16 00:05:18 ----A---- C:\Windows\system32\nvcpl.dll
2016-12-16 00:04:59 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2016-12-16 00:04:59 ----A---- C:\Windows\system32\OpenCL.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvopencl.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvoglv64.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\NvIFR64.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\NvFBC64.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvdispgenco6434201.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvdispco6434201.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvcuvid.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvcuda.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-12-16 00:01:22 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-12-16 00:01:21 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-12-16 00:01:21 ----A---- C:\Windows\system32\nvcompiler.dll
2016-12-16 00:01:21 ----A---- C:\Windows\system32\nvapi64.dll
2016-12-15 22:32:17 ----D---- C:\AdwCleaner
2016-12-15 22:06:42 ----D---- C:\Program Files (x86)\Diablo III
2016-12-15 22:05:41 ----D---- C:\ProgramData\Blizzard Entertainment
2016-12-15 22:02:09 ----D---- C:\Program Files (x86)\Battle.net
2016-12-15 22:01:45 ----D---- C:\Users\Duko\AppData\Roaming\Battle.net
2016-12-15 22:00:35 ----D---- C:\ProgramData\Battle.net
2016-12-15 21:35:08 ----D---- C:\rsit
2016-12-15 21:35:08 ----D---- C:\Program Files\trend micro
2016-12-15 21:31:07 ----D---- C:\Program Files\Defraggler
2016-12-15 21:24:47 ----D---- C:\Program Files (x86)\ControlCenter4
2016-12-15 07:33:44 ----A---- C:\Windows\system32\mshtml.dll
2016-12-15 07:33:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-15 07:33:40 ----A---- C:\Windows\system32\ieframe.dll
2016-12-15 07:33:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-15 07:33:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-15 07:33:38 ----A---- C:\Windows\system32\jscript9.dll
2016-12-15 07:33:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-15 07:33:37 ----A---- C:\Windows\system32\wininet.dll
2016-12-15 07:33:37 ----A---- C:\Windows\system32\win32k.sys
2016-12-15 07:33:37 ----A---- C:\Windows\system32\crypt32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\wintrust.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\winload.exe
2016-12-15 07:33:36 ----A---- C:\Windows\system32\usp10.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\user32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\msi.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-15 07:33:36 ----A---- C:\Windows\system32\clfs.sys
2016-12-15 07:33:36 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-15 07:33:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-15 07:33:35 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-15 07:33:35 ----A---- C:\Windows\system32\gdi32.dll
2016-12-15 07:33:35 ----A---- C:\Windows\system32\consent.exe
2016-12-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-15 07:33:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-15 07:33:33 ----A---- C:\Windows\system32\ntdll.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\vbscript.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\urlmon.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\jscript.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\iertutil.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\hlink.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-15 07:33:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-15 07:33:32 ----A---- C:\Windows\system32\certcli.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-15 07:33:31 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\msihnd.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\msiexec.exe
2016-12-15 07:33:30 ----A---- C:\Windows\system32\ieui.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\authui.dll
2016-12-15 07:33:29 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\webcheck.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\smss.exe
2016-12-15 07:33:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\advapi32.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\msrating.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\kernel32.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\kerberos.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-15 07:33:27 ----A---- C:\Windows\system32\occache.dll
2016-12-15 07:33:27 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-15 07:33:27 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-15 07:33:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-15 07:33:25 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\schannel.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\inseng.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-15 07:33:23 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\appinfo.dll
2016-12-15 07:33:22 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-15 07:33:22 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wow64win.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wow64.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\winsrv.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wdigest.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\sspicli.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\srcore.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\iesetup.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-15 07:33:21 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-15 07:33:21 ----A---- C:\Windows\system32\conhost.exe
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\srclient.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\secur32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\rstrui.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\lsass.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\iernonce.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-15 07:33:20 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-15 07:33:20 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\credssp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\auditpol.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidapi.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-15 07:33:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-15 07:33:18 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-15 07:33:17 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-15 07:33:17 ----A---- C:\Windows\system32\msimsg.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\tzres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\msobjs.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\msaudite.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\adtschema.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcr110_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcr100_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcp110_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcr110_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcr100_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcp110_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\aspnet_counters.dll

======List of files/folders modified in the last 1 month======

2016-12-17 14:12:39 ----D---- C:\Windows\Temp
2016-12-16 13:57:22 ----D---- C:\Windows\system32\config
2016-12-16 11:01:15 ----D---- C:\ProgramData\ProductData
2016-12-16 10:56:52 ----D---- C:\Windows
2016-12-16 10:56:18 ----D---- C:\Windows\inf
2016-12-16 07:21:24 ----D---- C:\ProgramData\NVIDIA Corporation
2016-12-16 00:57:09 ----D---- C:\Windows\Microsoft.NET
2016-12-16 00:51:13 ----RSD---- C:\Windows\assembly
2016-12-16 00:23:49 ----SHD---- C:\Windows\Installer
2016-12-16 00:23:36 ----RD---- C:\Program Files (x86)
2016-12-16 00:23:03 ----SHD---- C:\System Volume Information
2016-12-16 00:09:52 ----D---- C:\Windows\System32
2016-12-16 00:06:24 ----D---- C:\Windows\system32\DriverStore
2016-12-16 00:06:05 ----D---- C:\Windows\SysWOW64
2016-12-16 00:06:05 ----D---- C:\Windows\system32\drivers
2016-12-16 00:05:38 ----HD---- C:\ProgramData
2016-12-16 00:05:17 ----D---- C:\Windows\Help
2016-12-16 00:05:17 ----D---- C:\Program Files\NVIDIA Corporation
2016-12-16 00:02:58 ----D---- C:\ProgramData\Package Cache
2016-12-15 23:54:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-12-15 22:35:08 ----D---- C:\Windows\system32\catroot
2016-12-15 22:34:49 ----D---- C:\Windows\Tasks
2016-12-15 22:34:49 ----D---- C:\Windows\system32\Tasks
2016-12-15 22:08:18 ----D---- C:\KMPlayer
2016-12-15 21:35:08 ----RD---- C:\Program Files
2016-12-15 21:27:21 ----D---- C:\Program Files (x86)\Brother
2016-12-15 21:27:19 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-12-15 21:17:20 ----D---- C:\Windows\system32\catroot2
2016-12-15 21:16:49 ----D---- C:\ProgramData\Kaspersky Lab
2016-12-15 21:05:21 ----D---- C:\Program Files (x86)\Black_Box
2016-12-15 21:02:42 ----D---- C:\Program Files\Common Files\Apple
2016-12-15 20:50:44 ----D---- C:\Program Files (x86)\TeamViewer
2016-12-15 20:50:14 ----D---- C:\Windows\Logs
2016-12-15 20:50:14 ----D---- C:\Windows\debug
2016-12-15 20:48:34 ----D---- C:\Windows\Prefetch
2016-12-15 20:43:38 ----D---- C:\Windows\winsxs
2016-12-15 20:40:13 ----D---- C:\Program Files\Internet Explorer
2016-12-15 20:40:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-15 20:40:12 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-15 20:40:11 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-15 20:40:07 ----D---- C:\Windows\system32\cs-CZ
2016-12-15 20:40:06 ----D---- C:\Windows\system32\en-US
2016-12-15 20:39:59 ----D---- C:\Windows\AppPatch
2016-12-15 20:39:57 ----D---- C:\Windows\system32\Boot
2016-12-15 20:38:33 ----D---- C:\Windows\system32\MRT
2016-12-15 20:34:39 ----AC---- C:\Windows\system32\MRT.exe
2016-12-15 20:34:04 ----D---- C:\ProgramData\Microsoft Help
2016-12-15 20:31:04 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-11-26 16:16:28 ----D---- C:\Windows\rescache

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-11-21 632168]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-11-21 28008]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2016-05-25 137280]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-05 4745280]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2016-03-29 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-07-03 598328]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-01 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-17 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-03-06 21544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4430808]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-01-29 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-14 27584]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-14 56384]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2016-03-29 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-29 23200]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-10-17 1005944]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-11-14 1163712]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-21 15720]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-11-14 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-11-14 2521024]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2016-05-12 7032080]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-11-14 3632576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-11-29 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-11-29 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-29 154440]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2016-01-14 2945312]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-29 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-11-12 114688]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-03-28 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-11-29 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]

-----------------EOF-----------------

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=-

:services
Bonjour Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

[martion]

Logfile of random's system information tool 1.14 (written by random/random)
Run by Duko at 2016-12-17 19:54:59
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 85 GB (56%) free of 153 GB
Total RAM: 3957 MB (61% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:55:05, on 17.12.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Duko_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8112 bytes

======Enumerating Processes======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 29204672
\??\C:\Windows\system32\conhost.exe "1655571554-1250623361810970558-657702840-20557070441691583968454119893-1676442122
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\taskeng.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "1709834478-17279156398585444355419978199982249-1378995062-20032842981392606117
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files\PowerISO\PWRISOVM.EXE" -startup
C:\Windows\system32\taskeng.exe
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Duko\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0xa4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=4268 --on-initialized-event-handle=340 --parent-handle=344 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,16,17,18,21,37,65 --gpu-vendor-id=0x10de --gpu-device-id=0x0a70 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.4201 --gpu-driver-date=11-14-2016 --service-request-channel-token=147F4B4C0AECD6120CC19FE53A6975D3 --mojo-platform-channel-handle=1068 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SubresourceFilter<SubresourceFilter,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/MergeByRedirects/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Disabled/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledAckDecimation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Enabled/SignInPasswordPromo/Default/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Enabled/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_36/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C4BC5057F5D483E832F850C7FA57EF08 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C4BC5057F5D483E832F850C7FA57EF08 --mojo-platform-channel-handle=3720 /prefetch:1
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\Duko\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\TrackerAutoUpdate.job - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\TrackerAutoUpdate - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate
C:\Windows\system32\tasks\{690CA193-6798-49C9-BED6-9933DF697AA1} - C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{75E38F04-1BAF-4054-A059-57F831688943}\Setup.exe" -c -runfromtemp -l0x0005 UNINSTALL Reg=DSLe2-FB -removeonly
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-3821376757-2625975455-1948322372-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\Windows\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Google Chrome=========

C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension dbhjdbfgekjfcfkkfjjmlmojhbllhbho 2 Ochrana Kaspersky 4.0.9.130
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5516.1005.0.3
Homepage:
default_search_provider.search_url:
C:\Users\Duko\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-11-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-14 1767712]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01 13874392]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2016-05-25 454792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-12-17 19:48:55 ----D---- C:\_OTM
2016-12-16 00:23:36 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2016-12-16 00:07:00 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-12-16 00:05:38 ----D---- C:\ProgramData\NVIDIA
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvvsvc.exe
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvsvcr.dll
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvsvc64.dll
2016-12-16 00:05:19 ----A---- C:\Windows\system32\nvshext.dll
2016-12-16 00:05:18 ----A---- C:\Windows\system32\nvmctray.dll
2016-12-16 00:05:18 ----A---- C:\Windows\system32\nvcpl.dll
2016-12-16 00:04:59 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2016-12-16 00:04:59 ----A---- C:\Windows\system32\OpenCL.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-12-16 00:01:22 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvopencl.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvoglv64.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\NvIFR64.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\NvFBC64.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvdispgenco6434201.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvdispco6434201.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvcuvid.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\nvcuda.dll
2016-12-16 00:01:22 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-12-16 00:01:22 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-12-16 00:01:21 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-12-16 00:01:21 ----A---- C:\Windows\system32\nvcompiler.dll
2016-12-16 00:01:21 ----A---- C:\Windows\system32\nvapi64.dll
2016-12-15 22:32:17 ----D---- C:\AdwCleaner
2016-12-15 22:06:42 ----D---- C:\Program Files (x86)\Diablo III
2016-12-15 22:05:41 ----D---- C:\ProgramData\Blizzard Entertainment
2016-12-15 22:02:09 ----D---- C:\Program Files (x86)\Battle.net
2016-12-15 22:01:45 ----D---- C:\Users\Duko\AppData\Roaming\Battle.net
2016-12-15 22:00:35 ----D---- C:\ProgramData\Battle.net
2016-12-15 21:35:08 ----D---- C:\rsit
2016-12-15 21:35:08 ----D---- C:\Program Files\trend micro
2016-12-15 21:31:07 ----D---- C:\Program Files\Defraggler
2016-12-15 21:24:47 ----D---- C:\Program Files (x86)\ControlCenter4
2016-12-15 07:33:44 ----A---- C:\Windows\system32\mshtml.dll
2016-12-15 07:33:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-15 07:33:40 ----A---- C:\Windows\system32\ieframe.dll
2016-12-15 07:33:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-15 07:33:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-15 07:33:38 ----A---- C:\Windows\system32\jscript9.dll
2016-12-15 07:33:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-15 07:33:37 ----A---- C:\Windows\system32\wininet.dll
2016-12-15 07:33:37 ----A---- C:\Windows\system32\win32k.sys
2016-12-15 07:33:37 ----A---- C:\Windows\system32\crypt32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\wintrust.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\winload.exe
2016-12-15 07:33:36 ----A---- C:\Windows\system32\usp10.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\user32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\msi.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-15 07:33:36 ----A---- C:\Windows\system32\clfs.sys
2016-12-15 07:33:36 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-15 07:33:36 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-15 07:33:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-15 07:33:35 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-15 07:33:35 ----A---- C:\Windows\system32\gdi32.dll
2016-12-15 07:33:35 ----A---- C:\Windows\system32\consent.exe
2016-12-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-15 07:33:34 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-15 07:33:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-15 07:33:33 ----A---- C:\Windows\system32\ntdll.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-15 07:33:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\vbscript.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\urlmon.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\jscript.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\iertutil.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\hlink.dll
2016-12-15 07:33:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-15 07:33:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-15 07:33:32 ----A---- C:\Windows\system32\certcli.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-15 07:33:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-15 07:33:31 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-15 07:33:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\msihnd.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\msiexec.exe
2016-12-15 07:33:30 ----A---- C:\Windows\system32\ieui.dll
2016-12-15 07:33:30 ----A---- C:\Windows\system32\authui.dll
2016-12-15 07:33:29 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\webcheck.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\smss.exe
2016-12-15 07:33:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-15 07:33:29 ----A---- C:\Windows\system32\advapi32.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\msrating.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\kernel32.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\kerberos.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-15 07:33:28 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-15 07:33:27 ----A---- C:\Windows\system32\occache.dll
2016-12-15 07:33:27 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-15 07:33:27 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-15 07:33:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-15 07:33:25 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-15 07:33:23 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\schannel.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\inseng.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-15 07:33:23 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-15 07:33:23 ----A---- C:\Windows\system32\appinfo.dll
2016-12-15 07:33:22 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-15 07:33:22 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-15 07:33:21 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wow64win.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wow64.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\winsrv.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\wdigest.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\sspicli.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\srcore.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\iesetup.dll
2016-12-15 07:33:21 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-15 07:33:21 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-15 07:33:21 ----A---- C:\Windows\system32\conhost.exe
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-15 07:33:20 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-15 07:33:20 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\srclient.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\secur32.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\rstrui.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\lsass.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\iernonce.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-15 07:33:20 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-15 07:33:20 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\credssp.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\auditpol.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-15 07:33:20 ----A---- C:\Windows\system32\appidapi.dll
2016-12-15 07:33:20 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-15 07:33:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-15 07:33:18 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-15 07:33:17 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-15 07:33:17 ----A---- C:\Windows\system32\msimsg.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-15 07:33:13 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\tzres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\msobjs.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\msaudite.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-15 07:33:13 ----A---- C:\Windows\system32\adtschema.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcr110_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcr100_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\msvcp110_clr0400.dll
2016-11-29 22:34:16 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcr110_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcr100_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\msvcp110_clr0400.dll
2016-11-29 22:27:48 ----A---- C:\Windows\system32\aspnet_counters.dll

======List of files/folders modified in the last 1 month======

2016-12-17 19:54:59 ----D---- C:\Windows\Temp
2016-12-17 19:53:52 ----D---- C:\Windows\system32\config
2016-12-17 19:49:25 ----D---- C:\Windows
2016-12-17 14:41:10 ----SHD---- C:\Windows\Installer
2016-12-17 14:35:44 ----RD---- C:\Program Files (x86)
2016-12-17 14:35:34 ----D---- C:\Windows\Tasks
2016-12-16 11:01:15 ----D---- C:\ProgramData\ProductData
2016-12-16 10:56:18 ----D---- C:\Windows\inf
2016-12-16 07:21:24 ----D---- C:\ProgramData\NVIDIA Corporation
2016-12-16 00:57:09 ----D---- C:\Windows\Microsoft.NET
2016-12-16 00:51:13 ----RSD---- C:\Windows\assembly
2016-12-16 00:23:03 ----SHD---- C:\System Volume Information
2016-12-16 00:09:52 ----D---- C:\Windows\System32
2016-12-16 00:06:24 ----D---- C:\Windows\system32\DriverStore
2016-12-16 00:06:05 ----D---- C:\Windows\SysWOW64
2016-12-16 00:06:05 ----D---- C:\Windows\system32\drivers
2016-12-16 00:05:38 ----HD---- C:\ProgramData
2016-12-16 00:05:17 ----D---- C:\Windows\Help
2016-12-16 00:05:17 ----D---- C:\Program Files\NVIDIA Corporation
2016-12-16 00:02:58 ----D---- C:\ProgramData\Package Cache
2016-12-15 23:54:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-12-15 22:35:08 ----D---- C:\Windows\system32\catroot
2016-12-15 22:34:49 ----D---- C:\Windows\system32\Tasks
2016-12-15 22:08:18 ----D---- C:\KMPlayer
2016-12-15 21:35:08 ----RD---- C:\Program Files
2016-12-15 21:27:21 ----D---- C:\Program Files (x86)\Brother
2016-12-15 21:27:19 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-12-15 21:17:20 ----D---- C:\Windows\system32\catroot2
2016-12-15 21:16:49 ----D---- C:\ProgramData\Kaspersky Lab
2016-12-15 21:05:21 ----D---- C:\Program Files (x86)\Black_Box
2016-12-15 21:02:42 ----D---- C:\Program Files\Common Files\Apple
2016-12-15 20:50:44 ----D---- C:\Program Files (x86)\TeamViewer
2016-12-15 20:50:14 ----D---- C:\Windows\Logs
2016-12-15 20:50:14 ----D---- C:\Windows\debug
2016-12-15 20:48:34 ----D---- C:\Windows\Prefetch
2016-12-15 20:43:38 ----D---- C:\Windows\winsxs
2016-12-15 20:40:13 ----D---- C:\Program Files\Internet Explorer
2016-12-15 20:40:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-15 20:40:12 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-15 20:40:11 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-15 20:40:07 ----D---- C:\Windows\system32\cs-CZ
2016-12-15 20:40:06 ----D---- C:\Windows\system32\en-US
2016-12-15 20:39:59 ----D---- C:\Windows\AppPatch
2016-12-15 20:39:57 ----D---- C:\Windows\system32\Boot
2016-12-15 20:38:33 ----D---- C:\Windows\system32\MRT
2016-12-15 20:34:39 ----AC---- C:\Windows\system32\MRT.exe
2016-12-15 20:34:04 ----D---- C:\ProgramData\Microsoft Help
2016-12-15 20:31:04 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-11-26 16:16:28 ----D---- C:\Windows\rescache

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-11-21 632168]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-11-21 28008]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2016-05-25 137280]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-05 4745280]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2016-03-29 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-07-03 598328]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-01 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-17 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-03-06 21544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4430808]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-01-29 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-14 27584]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-14 56384]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2016-03-29 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-11-05 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-29 23200]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-10-17 1005944]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-11-14 1163712]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-21 15720]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-11-14 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-11-14 2521024]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2016-05-12 7032080]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-11-14 3632576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-11-29 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-11-29 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-29 154440]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2016-01-14 2945312]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-29 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-11-12 114688]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-03-28 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-11-29 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]

-----------------EOF-----------------

[Rudy]

OK. Nastala nějaká změna?

[martion]

Myslim ze nacitani systemu se zrychlilo a programy kdyz neco zapnu tak taky ale jinak nevim co by mohlo nastat:)

[Rudy]

Tak to jsem rád!