VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosim o kontrolu

https://forum.viry.cz:443/viewtopic.php?t=138445

Stránka 1 z 2

Prosim o kontrolu

Napsal: 06 čer 2014 17:17
od Jack O Neill
Zdravim, prosim o kontrolu logu. PC se nechoval nijak podezrele krome obcasneho otevreni stranky se sazkama. Tento problem jsem mel jen na jedny strance. Tam me to pravidelne otviralo v novem okne. Kazdopadne uz je to nejaka doba, kdy jsem si pustil nejaky sken, tak jsem to provedl a byl jsem prekvapen. Malwarebytes neco nasel a naslesne jsem to smazal a to same roguekiller. Programy nadale nic uz nenajdou a ani eset v nouzovem rezimu nic nenasel.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mira at 2014-06-06 18:06:23
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 122 GB (40%) free of 305 GB
Total RAM: 4094 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:06:26, on 6.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\Mira.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKCU\..\Run: [Google Update] "C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Advanced SystemCare Ultimate] "C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe" /Auto
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2057412538-1399773424-4111632120-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2057412538-1399773424-4111632120-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AdvancedSystemCareAntivirus (ASCAntivirusSrv) - IOBit - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP DS Service - Hewlett-Packard Company - C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8513 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe"
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\Explorer.EXE
taskeng.exe {8DD14A9D-A72B-4B77-B208-3AE537976DA2}
"C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe" /Auto
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\wbem\wmiprvse.exe
taskhost.exe $(Arg0)
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Mira\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2057412538-1399773424-4111632120-1001Core.job - C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2057412538-1399773424-4111632120-1001UA.job - C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-06-05 2486592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-01 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-01 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-03-07 4081008]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-06 13667032]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-07-27 1028896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]
"Advanced SystemCare Ultimate"=C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe [2014-04-09 2529088]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"Bonus.SSR.FR11"=C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-08-19 925960]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2014-04-17 1596224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-06 18:00:27 ----D---- C:\rsit
2014-06-06 15:08:24 ----A---- C:\Windows\ntbtlog.txt
2014-06-06 11:43:33 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-06-06 11:43:33 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2014-06-06 11:35:02 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-06-06 11:35:02 ----A---- C:\Windows\system32\nvopencl.dll
2014-06-06 11:35:01 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-06-06 11:34:58 ----A---- C:\Windows\system32\nvoglv64.dll
2014-06-06 11:34:55 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-06-06 11:34:54 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-06-06 11:34:54 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\NvIFR64.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\NvFBC64.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvdispgenco6433523.dll
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvdispco6433523.dll
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-06-06 11:34:52 ----A---- C:\Windows\system32\nvcuvid.dll
2014-06-06 11:34:52 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-06-06 11:34:51 ----A---- C:\Windows\system32\nvcuda.dll
2014-06-06 11:34:50 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-06-06 11:34:43 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-06-06 11:34:41 ----A---- C:\Windows\system32\nvcompiler.dll
2014-06-06 11:32:27 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-06-06 11:32:19 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-06-06 11:32:15 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-06-06 11:32:14 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-06-06 11:32:13 ----A---- C:\Windows\system32\RtkApi64.dll
2014-06-06 11:32:13 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-06-06 11:32:04 ----A---- C:\Windows\system32\RTCOM64.dll
2014-06-06 11:32:04 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2014-06-06 11:32:01 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-06-06 11:31:53 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2014-06-06 11:31:53 ----A---- C:\Windows\system32\MBWrp64.dll
2014-06-06 11:31:53 ----A---- C:\Windows\system32\MBAPO64.dll
2014-06-06 11:31:32 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-06-06 11:31:31 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-06-06 11:31:20 ----A---- C:\Windows\system32\FMAPO64.dll
2014-06-06 11:31:14 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-06-06 11:31:13 ----A---- C:\Windows\system32\AERTAC64.dll
2014-06-06 11:30:28 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-06-06 11:30:28 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-06-06 11:28:25 ----A---- C:\log.txt
2014-06-06 11:27:00 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-06-06 11:23:17 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-06-06 11:23:15 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2014-06-06 01:43:32 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-06-06 01:42:25 ----D---- C:\ProgramData\Malwarebytes
2014-06-06 01:42:25 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-06 01:42:25 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-06-06 01:42:25 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-06-06 01:42:25 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-06-06 01:39:57 ----D---- C:\ProgramData\RogueKiller
2014-06-05 18:55:14 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpudd.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpcorets.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\wksprtPS.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\wksprt.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\tsgqec.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\mstscax.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\mstsc.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-06-05 18:55:08 ----A---- C:\Windows\system32\aaclient.dll
2014-06-05 18:52:30 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-06-05 18:52:30 ----A---- C:\Windows\system32\qdvd.dll
2014-06-05 18:51:41 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2014-06-05 18:39:29 ----D---- C:\Users\Mira\AppData\Roaming\ProductData
2014-06-05 18:38:27 ----D---- C:\Users\Mira\AppData\Roaming\Apple Computer
2014-06-05 18:38:25 ----D---- C:\ProgramData\ProductData
2014-06-05 18:38:03 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-06-05 18:37:59 ----D---- C:\ProgramData\IObit
2014-06-05 18:37:59 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-06-05 18:37:56 ----D---- C:\Users\Mira\AppData\Roaming\IObit
2014-06-05 18:37:38 ----D---- C:\Program Files (x86)\IObit
2014-05-15 01:07:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-15 01:07:37 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-15 01:07:37 ----A---- C:\Windows\system32\mshtml.dll
2014-05-15 01:07:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 19:19:36 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2014-05-14 18:28:21 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 18:28:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 18:28:07 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 18:28:06 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 18:26:04 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 18:26:02 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 18:26:02 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 18:26:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 18:26:01 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 18:26:01 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 18:26:01 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 18:26:00 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 18:26:00 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 18:25:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 18:25:56 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 18:25:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 18:25:55 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 18:25:54 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 18:25:54 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 18:25:54 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 18:25:54 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 18:25:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 18:25:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 18:25:53 ----A---- C:\Windows\system32\secur32.dll
2014-05-07 00:46:23 ----SD---- C:\Windows\system32\CompatTel

======List of files/folders modified in the last 1 month======

2014-06-06 18:06:24 ----D---- C:\Windows\Temp
2014-06-06 18:06:24 ----D---- C:\Program Files\trend micro
2014-06-06 18:00:08 ----D---- C:\Windows\system32\config
2014-06-06 17:52:44 ----D---- C:\Windows\System32
2014-06-06 17:52:44 ----D---- C:\Windows\inf
2014-06-06 17:52:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-06 15:08:24 ----D---- C:\Windows
2014-06-06 14:54:55 ----D---- C:\Users\Mira\AppData\Roaming\vlc
2014-06-06 13:59:10 ----D---- C:\Windows\Prefetch
2014-06-06 13:57:37 ----D---- C:\Windows\SysWOW64
2014-06-06 13:56:52 ----D---- C:\Windows\system32\catroot
2014-06-06 11:44:24 ----D---- C:\Windows\system32\drivers
2014-06-06 11:44:19 ----D---- C:\Windows\system32\catroot2
2014-06-06 11:44:18 ----D---- C:\Windows\system32\DriverStore
2014-06-06 11:43:33 ----A---- C:\Windows\system32\RTNUninst64.dll
2014-06-06 11:42:50 ----D---- C:\ProgramData\NVIDIA
2014-06-06 11:40:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-06-06 11:35:04 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-06-06 11:34:41 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-06-06 11:34:41 ----A---- C:\Windows\system32\nvapi64.dll
2014-06-06 11:33:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-06-06 11:30:28 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-06-06 11:27:42 ----SHD---- C:\System Volume Information
2014-06-06 11:27:01 ----D---- C:\Windows\system32\Tasks
2014-06-06 03:41:28 ----D---- C:\Windows\rescache
2014-06-06 01:42:25 ----RD---- C:\Program Files (x86)
2014-06-06 01:42:25 ----HD---- C:\ProgramData
2014-06-06 01:38:45 ----D---- C:\Users\Mira\AppData\Roaming\uTorrent
2014-06-06 01:37:41 ----D---- C:\Windows\winsxs
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\wbem
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-06-06 01:34:33 ----D---- C:\Windows\system32\wbem
2014-06-06 01:34:33 ----D---- C:\Windows\system32\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\system32\drivers\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\system32\cs-CZ
2014-06-06 01:34:33 ----D---- C:\Windows\PolicyDefinitions
2014-06-05 23:04:32 ----D---- C:\Users\Mira\AppData\Roaming\TS3Client
2014-06-05 18:54:31 ----D---- C:\Program Files\ImageJ
2014-06-05 18:52:02 ----SHD---- C:\Windows\Installer
2014-06-05 18:52:01 ----D---- C:\Program Files (x86)\HP
2014-06-05 18:51:19 ----D---- C:\Windows\Panther
2014-06-05 18:51:18 ----D---- C:\Windows\Minidump
2014-06-05 18:51:18 ----D---- C:\Windows\Logs
2014-06-05 18:51:18 ----D---- C:\Windows\debug
2014-06-05 18:49:50 ----D---- C:\Users\Mira\AppData\Roaming\Media Player Classic
2014-06-05 18:49:50 ----D---- C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-06-04 23:41:51 ----D---- C:\ProgramData\PMB Files
2014-06-02 14:55:16 ----D---- C:\Program Files (x86)\ABBYY FineReader 11
2014-05-26 13:30:42 ----D---- C:\Program Files (x86)\SpeedFan
2014-05-20 15:44:14 ----D---- C:\Windows\Microsoft.NET
2014-05-20 15:43:28 ----RSD---- C:\Windows\assembly
2014-05-15 01:06:59 ----D---- C:\Windows\system32\MRT
2014-05-15 01:05:33 ----A---- C:\Windows\system32\MRT.exe
2014-05-14 19:19:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2013-12-24 21184]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-08 283200]
R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2013-03-23 23048]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-06 3872984]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-06-06 122584]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 63704]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-06-06 39200]
R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2013-11-19 34848]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-06-06 901848]
R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2013-11-19 23016]
R3 vvftav;vvftav; C:\Windows\system32\drivers\vvftav.sys [2007-06-23 300800]
R3 ZSMC0305;A4 TECH PC Camera V; C:\Windows\System32\Drivers\usbVM305.sys [2007-03-08 1541120]
S3 HPFXBULKLEDM;HPFXBULKLEDM; C:\Windows\system32\drivers\hppdbulkio.sys [2011-05-10 22040]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-06-05 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2014-06-05 57856]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe [2013-12-16 886592]
R2 ASCAntivirusSrv;AdvancedSystemCareAntivirus; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe [2014-03-31 649024]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
R2 HP DS Service;HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [2010-10-27 13824]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2010-10-27 145920]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2014-01-24 342336]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-07-27 1889568]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-04-08 2152768]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-07-27 14984480]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-06 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Re: Prosim o kontrolu

Napsal: 06 čer 2014 18:30
od Rudy
Zdravím!
Roguekiller je čisticí utilta pro PC. Patrně již byl PC odvirováván. Utilita rozhodně není škodlivá. Doporučím odistalovat IOBit. Důvod: http://forum.viry.cz/viewtopic.php?f=14 ... ilit=iobit . Zkusíme dočistit. Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Prosim o kontrolu

Napsal: 06 čer 2014 19:04
od Jack O Neill
Roguekiller je skvely program, mnohokrat se uz osvedcil. Sice jednou nebo dvakrat jsem musel pouzit po nem bod obnovy, protoze nechtel system nabootovat, ale pohoda :)

SAC pouzivam vzdy jednorazove, nainstaluji a pak odinstaluji. Nez jsi odepsal, tak uz byl na pul cesty pryc :) Snad nevadi, ze jsem pustil prvni adwc a pak dokoncil uninstal iobit aplikaci. Nizze prikladam log.

Odkaz jsem procetl cely a mam smisene pocity, protoze mi program opravdu nekolikrat dost pomohl, je ale pravda, ze vzdy jsem dany program odinstaloval a nenechaval ho v pc. Navic jsem vzdy pouzil jen cast na procisteni pc. Kazdopadne je pryc. :)


# AdwCleaner v3.212 - Report created 06/06/2014 at 19:48:41
# Updated 05/06/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Mira - MIRA-PC
# Running from : C:\Users\Mira\Desktop\adwcleaner_3.212.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Mira\AppData\Local\genienext
Folder Deleted : C:\Users\Mira\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Mira\Documents\Mobogenie

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v

-\\ Google Chrome v

[ File : C:\Users\Mira\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.natur.cuni.cz/fakulta/search?Search ... earchTerms}

*************************

AdwCleaner[R0].txt - [1318 octets] - [06/06/2014 19:46:41]
AdwCleaner[R1].txt - [1378 octets] - [06/06/2014 19:48:19]
AdwCleaner[S0].txt - [1315 octets] - [06/06/2014 19:48:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1375 octets] ##########

Re: Prosim o kontrolu

Napsal: 06 čer 2014 19:05
od Rudy
Dejte nový log RSIT.

Re: Prosim o kontrolu

Napsal: 06 čer 2014 19:13
od Jack O Neill
Logfile of random's system information tool 1.10 (written by random/random)
Run by Mira at 2014-06-06 20:13:00
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 125 GB (41%) free of 305 GB
Total RAM: 4094 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:13:02, on 6.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\Mira.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2057412538-1399773424-4111632120-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2057412538-1399773424-4111632120-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP DS Service - Hewlett-Packard Company - C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7255 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe"
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "136199528815955786431508070696-651866995-1612855585-795395973-1941733001709440322
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Mira\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2057412538-1399773424-4111632120-1001Core.job - C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2057412538-1399773424-4111632120-1001UA.job - C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-01 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-01 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-03-07 4081008]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-06 13667032]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-07-27 1028896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"Bonus.SSR.FR11"=C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-08-19 925960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-06 19:46:56 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-06-06 19:46:37 ----D---- C:\AdwCleaner
2014-06-06 18:00:27 ----D---- C:\rsit
2014-06-06 11:43:33 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-06-06 11:43:33 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2014-06-06 11:35:02 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-06-06 11:35:02 ----A---- C:\Windows\system32\nvopencl.dll
2014-06-06 11:35:01 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-06-06 11:34:58 ----A---- C:\Windows\system32\nvoglv64.dll
2014-06-06 11:34:55 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-06-06 11:34:54 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-06-06 11:34:54 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\NvIFR64.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\NvFBC64.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvdispgenco6433523.dll
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvdispco6433523.dll
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-06-06 11:34:52 ----A---- C:\Windows\system32\nvcuvid.dll
2014-06-06 11:34:52 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-06-06 11:34:51 ----A---- C:\Windows\system32\nvcuda.dll
2014-06-06 11:34:50 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-06-06 11:34:43 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-06-06 11:34:41 ----A---- C:\Windows\system32\nvcompiler.dll
2014-06-06 11:32:27 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-06-06 11:32:19 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-06-06 11:32:15 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-06-06 11:32:14 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-06-06 11:32:13 ----A---- C:\Windows\system32\RtkApi64.dll
2014-06-06 11:32:13 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-06-06 11:32:04 ----A---- C:\Windows\system32\RTCOM64.dll
2014-06-06 11:32:04 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2014-06-06 11:32:01 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-06-06 11:31:53 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2014-06-06 11:31:53 ----A---- C:\Windows\system32\MBWrp64.dll
2014-06-06 11:31:53 ----A---- C:\Windows\system32\MBAPO64.dll
2014-06-06 11:31:32 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-06-06 11:31:31 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-06-06 11:31:20 ----A---- C:\Windows\system32\FMAPO64.dll
2014-06-06 11:31:14 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-06-06 11:31:13 ----A---- C:\Windows\system32\AERTAC64.dll
2014-06-06 11:30:28 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-06-06 11:30:28 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-06-06 11:28:25 ----A---- C:\log.txt
2014-06-06 11:27:00 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-06-06 11:23:17 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-06-06 01:42:25 ----D---- C:\ProgramData\Malwarebytes
2014-06-06 01:39:57 ----D---- C:\ProgramData\RogueKiller
2014-06-05 18:55:14 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpudd.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpcorets.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\wksprtPS.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\wksprt.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\tsgqec.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\mstscax.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\mstsc.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-06-05 18:55:08 ----A---- C:\Windows\system32\aaclient.dll
2014-06-05 18:52:30 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-06-05 18:52:30 ----A---- C:\Windows\system32\qdvd.dll
2014-06-05 18:51:41 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2014-06-05 18:39:29 ----D---- C:\Users\Mira\AppData\Roaming\ProductData
2014-06-05 18:38:27 ----D---- C:\Users\Mira\AppData\Roaming\Apple Computer
2014-06-05 18:38:25 ----D---- C:\ProgramData\ProductData
2014-06-05 18:38:03 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-06-05 18:37:59 ----D---- C:\ProgramData\IObit
2014-06-05 18:37:59 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-06-05 18:37:56 ----D---- C:\Users\Mira\AppData\Roaming\IObit
2014-06-05 18:37:38 ----D---- C:\Program Files (x86)\IObit
2014-05-15 01:07:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-15 01:07:37 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-15 01:07:37 ----A---- C:\Windows\system32\mshtml.dll
2014-05-15 01:07:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 19:19:36 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2014-05-14 18:28:21 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 18:28:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 18:28:07 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 18:28:06 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 18:26:04 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 18:26:02 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 18:26:02 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 18:26:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 18:26:01 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 18:26:01 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 18:26:01 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 18:26:00 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 18:26:00 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 18:25:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 18:25:56 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 18:25:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 18:25:55 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 18:25:54 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 18:25:54 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 18:25:54 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 18:25:54 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 18:25:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 18:25:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 18:25:53 ----A---- C:\Windows\system32\secur32.dll
2014-05-07 00:46:23 ----SD---- C:\Windows\system32\CompatTel

======List of files/folders modified in the last 1 month======

2014-06-06 20:13:01 ----D---- C:\Windows\Temp
2014-06-06 20:13:01 ----D---- C:\Program Files\trend micro
2014-06-06 19:54:41 ----D---- C:\Windows\System32
2014-06-06 19:54:41 ----D---- C:\Windows\inf
2014-06-06 19:54:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-06 19:54:13 ----D---- C:\Windows\system32\drivers
2014-06-06 19:54:09 ----D---- C:\Windows\system32\Tasks
2014-06-06 19:50:45 ----D---- C:\Windows\system32\catroot2
2014-06-06 19:50:36 ----D---- C:\Windows\SoftwareDistribution
2014-06-06 19:49:57 ----D---- C:\Windows
2014-06-06 19:49:55 ----D---- C:\Windows\debug
2014-06-06 19:46:56 ----D---- C:\Windows\SysWOW64
2014-06-06 19:25:45 ----D---- C:\Windows\Minidump
2014-06-06 19:25:44 ----D---- C:\Users\Mira\AppData\Roaming\uTorrent
2014-06-06 19:11:30 ----D---- C:\Windows\Tasks
2014-06-06 19:08:42 ----RD---- C:\Program Files (x86)
2014-06-06 18:51:14 ----SD---- C:\ProgramData\Microsoft
2014-06-06 18:51:08 ----D---- C:\Windows\system32\config
2014-06-06 18:38:27 ----D---- C:\ProgramData\PMB Files
2014-06-06 18:17:00 ----SHD---- C:\System Volume Information
2014-06-06 14:54:55 ----D---- C:\Users\Mira\AppData\Roaming\vlc
2014-06-06 13:59:10 ----D---- C:\Windows\Prefetch
2014-06-06 13:56:52 ----D---- C:\Windows\system32\catroot
2014-06-06 11:44:18 ----D---- C:\Windows\system32\DriverStore
2014-06-06 11:43:33 ----A---- C:\Windows\system32\RTNUninst64.dll
2014-06-06 11:42:50 ----D---- C:\ProgramData\NVIDIA
2014-06-06 11:40:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-06-06 11:35:04 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-06-06 11:34:41 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-06-06 11:34:41 ----A---- C:\Windows\system32\nvapi64.dll
2014-06-06 11:33:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-06-06 11:30:28 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-06-06 03:41:28 ----D---- C:\Windows\rescache
2014-06-06 01:42:25 ----HD---- C:\ProgramData
2014-06-06 01:37:41 ----D---- C:\Windows\winsxs
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\wbem
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-06-06 01:34:33 ----D---- C:\Windows\system32\wbem
2014-06-06 01:34:33 ----D---- C:\Windows\system32\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\system32\drivers\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\system32\cs-CZ
2014-06-06 01:34:33 ----D---- C:\Windows\PolicyDefinitions
2014-06-05 23:04:32 ----D---- C:\Users\Mira\AppData\Roaming\TS3Client
2014-06-05 18:54:31 ----D---- C:\Program Files\ImageJ
2014-06-05 18:52:02 ----SHD---- C:\Windows\Installer
2014-06-05 18:52:01 ----D---- C:\Program Files (x86)\HP
2014-06-05 18:51:19 ----D---- C:\Windows\Panther
2014-06-05 18:51:18 ----D---- C:\Windows\Logs
2014-06-05 18:49:50 ----D---- C:\Users\Mira\AppData\Roaming\Media Player Classic
2014-06-05 18:49:50 ----D---- C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-06-02 14:55:16 ----D---- C:\Program Files (x86)\ABBYY FineReader 11
2014-05-26 13:30:42 ----D---- C:\Program Files (x86)\SpeedFan
2014-05-20 15:44:14 ----D---- C:\Windows\Microsoft.NET
2014-05-20 15:43:28 ----RSD---- C:\Windows\assembly
2014-05-15 01:06:59 ----D---- C:\Windows\system32\MRT
2014-05-15 01:05:33 ----A---- C:\Windows\system32\MRT.exe
2014-05-14 19:19:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-08 283200]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-06 3872984]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-06-06 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-06-06 901848]
R3 vvftav;vvftav; C:\Windows\system32\drivers\vvftav.sys [2007-06-23 300800]
R3 ZSMC0305;A4 TECH PC Camera V; C:\Windows\System32\Drivers\usbVM305.sys [2007-03-08 1541120]
S3 HPFXBULKLEDM;HPFXBULKLEDM; C:\Windows\system32\drivers\hppdbulkio.sys [2011-05-10 22040]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-06-05 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2014-06-05 57856]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
R2 HP DS Service;HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [2010-10-27 13824]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2010-10-27 145920]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-07-27 14984480]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-07-27 1889568]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-04-08 2152768]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-06 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Re: Prosim o kontrolu

Napsal: 06 čer 2014 20:17
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2057412538-1399773424-4111632120-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2057412538-1399773424-4111632120-1001UA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Re: Prosim o kontrolu

Napsal: 06 čer 2014 20:34
od Jack O Neill
Logfile of random's system information tool 1.10 (written by random/random)
Run by Mira at 2014-06-06 21:33:00
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 124 GB (41%) free of 305 GB
Total RAM: 4094 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:33:03, on 6.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\Mira.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2057412538-1399773424-4111632120-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2057412538-1399773424-4111632120-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP DS Service - Hewlett-Packard Company - C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7315 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe"
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\06062014_212919.log
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-712221335866819578-811436236-1775744967-542042616-29529672620041273061751779512
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Mira\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-01 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-01 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2012-03-07 4081008]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-06 13667032]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-07-27 1028896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Mira\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"Bonus.SSR.FR11"=C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-08-19 925960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-06 21:29:19 ----D---- C:\_OTM
2014-06-06 19:46:56 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-06-06 19:46:37 ----D---- C:\AdwCleaner
2014-06-06 18:00:27 ----D---- C:\rsit
2014-06-06 11:43:33 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-06-06 11:43:33 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2014-06-06 11:35:02 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-06-06 11:35:02 ----A---- C:\Windows\system32\nvopencl.dll
2014-06-06 11:35:01 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-06-06 11:34:58 ----A---- C:\Windows\system32\nvoglv64.dll
2014-06-06 11:34:55 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-06-06 11:34:54 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-06-06 11:34:54 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\NvIFR64.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\NvFBC64.dll
2014-06-06 11:34:54 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvdispgenco6433523.dll
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvdispco6433523.dll
2014-06-06 11:34:53 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-06-06 11:34:52 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-06-06 11:34:52 ----A---- C:\Windows\system32\nvcuvid.dll
2014-06-06 11:34:52 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-06-06 11:34:51 ----A---- C:\Windows\system32\nvcuda.dll
2014-06-06 11:34:50 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-06-06 11:34:43 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-06-06 11:34:41 ----A---- C:\Windows\system32\nvcompiler.dll
2014-06-06 11:32:27 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-06-06 11:32:19 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-06-06 11:32:15 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-06-06 11:32:14 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-06-06 11:32:13 ----A---- C:\Windows\system32\RtkApi64.dll
2014-06-06 11:32:13 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-06-06 11:32:04 ----A---- C:\Windows\system32\RTCOM64.dll
2014-06-06 11:32:04 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2014-06-06 11:32:01 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-06-06 11:31:53 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2014-06-06 11:31:53 ----A---- C:\Windows\system32\MBWrp64.dll
2014-06-06 11:31:53 ----A---- C:\Windows\system32\MBAPO64.dll
2014-06-06 11:31:32 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-06-06 11:31:31 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-06-06 11:31:20 ----A---- C:\Windows\system32\FMAPO64.dll
2014-06-06 11:31:14 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-06-06 11:31:13 ----A---- C:\Windows\system32\AERTAC64.dll
2014-06-06 11:30:28 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-06-06 11:30:28 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-06-06 11:28:25 ----A---- C:\log.txt
2014-06-06 11:27:00 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-06-06 11:23:17 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-06-06 01:42:25 ----D---- C:\ProgramData\Malwarebytes
2014-06-06 01:39:57 ----D---- C:\ProgramData\RogueKiller
2014-06-05 18:55:14 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpudd.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\rdpcorets.dll
2014-06-05 18:55:14 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-06-05 18:55:08 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\wksprtPS.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\wksprt.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\tsgqec.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\mstscax.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\mstsc.exe
2014-06-05 18:55:08 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-06-05 18:55:08 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-06-05 18:55:08 ----A---- C:\Windows\system32\aaclient.dll
2014-06-05 18:52:30 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-06-05 18:52:30 ----A---- C:\Windows\system32\qdvd.dll
2014-06-05 18:51:41 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2014-06-05 18:39:29 ----D---- C:\Users\Mira\AppData\Roaming\ProductData
2014-06-05 18:38:27 ----D---- C:\Users\Mira\AppData\Roaming\Apple Computer
2014-06-05 18:38:25 ----D---- C:\ProgramData\ProductData
2014-06-05 18:38:03 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-06-05 18:37:59 ----D---- C:\ProgramData\IObit
2014-06-05 18:37:59 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-06-05 18:37:56 ----D---- C:\Users\Mira\AppData\Roaming\IObit
2014-06-05 18:37:38 ----D---- C:\Program Files (x86)\IObit
2014-05-15 01:07:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-15 01:07:37 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-15 01:07:37 ----A---- C:\Windows\system32\mshtml.dll
2014-05-15 01:07:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 19:19:36 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2014-05-14 18:28:21 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 18:28:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 18:28:07 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 18:28:06 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 18:26:04 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 18:26:02 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 18:26:02 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 18:26:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 18:26:01 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 18:26:01 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 18:26:01 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 18:26:00 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 18:26:00 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 18:25:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 18:25:57 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 18:25:57 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 18:25:56 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 18:25:56 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 18:25:55 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 18:25:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 18:25:55 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 18:25:54 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 18:25:54 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 18:25:54 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 18:25:54 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 18:25:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 18:25:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 18:25:53 ----A---- C:\Windows\system32\secur32.dll
2014-05-07 00:46:23 ----SD---- C:\Windows\system32\CompatTel

======List of files/folders modified in the last 1 month======

2014-06-06 21:33:01 ----D---- C:\Program Files\trend micro
2014-06-06 21:32:19 ----D---- C:\Windows\Temp
2014-06-06 21:29:19 ----D---- C:\Windows\Tasks
2014-06-06 21:29:04 ----D---- C:\Users\Mira\AppData\Roaming\vlc
2014-06-06 20:01:34 ----D---- C:\Windows\system32\config
2014-06-06 19:54:41 ----D---- C:\Windows\System32
2014-06-06 19:54:41 ----D---- C:\Windows\inf
2014-06-06 19:54:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-06 19:54:13 ----D---- C:\Windows\system32\drivers
2014-06-06 19:54:09 ----D---- C:\Windows\system32\Tasks
2014-06-06 19:50:45 ----D---- C:\Windows\system32\catroot2
2014-06-06 19:50:36 ----D---- C:\Windows\SoftwareDistribution
2014-06-06 19:49:57 ----D---- C:\Windows
2014-06-06 19:49:55 ----D---- C:\Windows\debug
2014-06-06 19:46:56 ----D---- C:\Windows\SysWOW64
2014-06-06 19:25:45 ----D---- C:\Windows\Minidump
2014-06-06 19:25:44 ----D---- C:\Users\Mira\AppData\Roaming\uTorrent
2014-06-06 19:08:42 ----RD---- C:\Program Files (x86)
2014-06-06 18:51:14 ----SD---- C:\ProgramData\Microsoft
2014-06-06 18:38:27 ----D---- C:\ProgramData\PMB Files
2014-06-06 18:17:00 ----SHD---- C:\System Volume Information
2014-06-06 13:59:10 ----D---- C:\Windows\Prefetch
2014-06-06 13:56:52 ----D---- C:\Windows\system32\catroot
2014-06-06 11:44:18 ----D---- C:\Windows\system32\DriverStore
2014-06-06 11:43:33 ----A---- C:\Windows\system32\RTNUninst64.dll
2014-06-06 11:42:50 ----D---- C:\ProgramData\NVIDIA
2014-06-06 11:40:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-06-06 11:35:04 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-06-06 11:34:41 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-06-06 11:34:41 ----A---- C:\Windows\system32\nvapi64.dll
2014-06-06 11:33:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-06-06 11:30:28 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-06-06 03:41:28 ----D---- C:\Windows\rescache
2014-06-06 01:42:25 ----HD---- C:\ProgramData
2014-06-06 01:37:41 ----D---- C:\Windows\winsxs
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\wbem
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-06-06 01:34:33 ----D---- C:\Windows\system32\wbem
2014-06-06 01:34:33 ----D---- C:\Windows\system32\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\system32\drivers\en-US
2014-06-06 01:34:33 ----D---- C:\Windows\system32\cs-CZ
2014-06-06 01:34:33 ----D---- C:\Windows\PolicyDefinitions
2014-06-05 23:04:32 ----D---- C:\Users\Mira\AppData\Roaming\TS3Client
2014-06-05 18:54:31 ----D---- C:\Program Files\ImageJ
2014-06-05 18:52:02 ----SHD---- C:\Windows\Installer
2014-06-05 18:52:01 ----D---- C:\Program Files (x86)\HP
2014-06-05 18:51:19 ----D---- C:\Windows\Panther
2014-06-05 18:51:18 ----D---- C:\Windows\Logs
2014-06-05 18:49:50 ----D---- C:\Users\Mira\AppData\Roaming\Media Player Classic
2014-06-05 18:49:50 ----D---- C:\Users\Mira\AppData\Roaming\DAEMON Tools Lite
2014-06-02 14:55:16 ----D---- C:\Program Files (x86)\ABBYY FineReader 11
2014-05-26 13:30:42 ----D---- C:\Program Files (x86)\SpeedFan
2014-05-20 15:44:14 ----D---- C:\Windows\Microsoft.NET
2014-05-20 15:43:28 ----RSD---- C:\Windows\assembly
2014-05-15 01:06:59 ----D---- C:\Windows\system32\MRT
2014-05-15 01:05:33 ----A---- C:\Windows\system32\MRT.exe
2014-05-14 19:19:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-08 283200]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-06-06 3872984]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-06-06 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-06-06 901848]
R3 vvftav;vvftav; C:\Windows\system32\drivers\vvftav.sys [2007-06-23 300800]
R3 ZSMC0305;A4 TECH PC Camera V; C:\Windows\System32\Drivers\usbVM305.sys [2007-03-08 1541120]
S3 HPFXBULKLEDM;HPFXBULKLEDM; C:\Windows\system32\drivers\hppdbulkio.sys [2011-05-10 22040]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-06-05 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2014-06-05 57856]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]
R2 HP DS Service;HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [2010-10-27 13824]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2010-10-27 145920]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-07-27 14984480]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-07-27 1889568]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-04-08 2152768]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-06 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Re: Prosim o kontrolu

Napsal: 06 čer 2014 21:24
od Rudy
Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Re: Prosim o kontrolu

Napsal: 06 čer 2014 21:46
od Jack O Neill
Hotovo.
Prijde mi pc pri restartu a startu rychlejsi.
Ohledne webu s online sazkama, tak ten vyskakuje porad, ale to si myslim, ze je vlastnost dane stranky. Mam nastaveno blokovat nevyzadane okna.

http://www.mangareader.net/

Kdyz chci vyhledat nejakou mangu, tak me to vzdy poprve otevre jiny web. Pak uz muzu normalne hledat. Myslim si, ze je tam proste skryta reklama na to.

Pak mam jeste jeden problem, kdyz uz jsem skenoval me PC, tak jsem pustil sken i na NTB. Malwarebytes nasel asi 13 nejakych potvor, ale sken se zasekl. Roguekiller detekoval nejake problemy v registrech a ty jsem dal smazat. Nasledne MB najde mene hrozeb, sken se dostane dal, ale stejne se zasekne. Mohu log vlozit sem nebo mam zalozit novy topic? Kazdopadne se tim budu zaobirat az zitra.

Re: Prosim o kontrolu

Napsal: 07 čer 2014 10:11
od Rudy
Log sem klidně dejte. Co se týká toho vyskakování oken, spusťte ještě JunkwareRemovalTool:
Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem

Re: Prosim o kontrolu

Napsal: 07 čer 2014 10:21
od Jack O Neill
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Mira on so 07.06.2014 at 11:13:09.82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 07.06.2014 at 11:18:36.89
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Prosim o kontrolu

Napsal: 07 čer 2014 10:26
od Jack O Neill
Zde je log NTB.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kristýna at 2014-06-07 11:25:45
Microsoft Windows 8.1
System drive C: has 262 GB (58%) free of 450 GB
Total RAM: 5846 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:25:51, on 7. 6. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17037)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
C:\Program Files (x86)\Samsung\Settings\sSettings.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kristýna.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: outobox - {30f06672-0e95-41a9-80cb-dee386af99ad} - (no file)
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-21-1727302572-2570711206-977822975-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O4 - S-1-5-21-1727302572-2570711206-977822975-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (User '?')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - (no CLSID) - (no file)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Easy Launcher - Samsung Electronics CO., LTD. - C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: ExpressCache - Condusiv Technologies - C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update outobox - Unknown owner - C:\Program Files (x86)\outobox\updateoutobox.exe (file missing)
O23 - Service: Util outobox - Unknown owner - C:\Program Files (x86)\outobox\bin\utiloutobox.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 14082 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 58341362912
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe"
"C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe"
taskhostex.exe
"C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Samsung\Settings\sSettings.exe" /s
"C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe"
C:\windows\SysWOW64\irstrtsv.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\WINDOWS\system32\igfxext.exe" -Embedding
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files\Samsung\S Agent\CommonAgent.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Classic Shell\ClassicStartMenu.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3780.0.482303883\620016334" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,5,15 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3412 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.1.1441607007\376762889" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.2.835691213\701010105" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.3.660465195\1071902810" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.4.1798535255\832860493" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.5.831807415\370760191" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.6.1604741533\102998381" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.7.1915444730\2019157438" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.8.1587213359\1491625810" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.9.951986556\733724839" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.10.1993541396\1577610540" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.12.584043009\1021893335" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.14.443743795\970063194" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.15.411049480\459688495" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.16.791172635\1878912507" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.18.9093734\1500792742" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.19.1889686499\1534296972" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod\1.0.0_0\dll/NPAdbExternal.dll" --lang=cs --channel="3780.22.472766294\1792009251" /prefetch:-390060480
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.23.2059297492\220823995" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.25.1466087444\744297587" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.27.1976399595\646011769" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3780.30.740168715\1292545581" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe" --domain-id 4e00205a-2ab1-4423-8f77-cc25b82cde1d
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.36.54796175\1256420711" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.42.1502834159\1505182988" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.46.1754399950\1892228217" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.47.428945640\732658729" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.54.1001556856\864624867" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.56.1019732438\1981702829" /prefetch:673131151
explorer.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.87.533346118\1225543674" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.88.795216264\1105987810" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.89.505329681\1190727400" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.93.585768350\1025500871" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.95.1177588752\766783257" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.97.510759592\1179688355" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="3780.99.1495915261\2114952552" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe19_ Global\UsGthrCtrlFltPipeMssGthrPipe19 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
"C:\Users\Kristýna\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1ce7f4a4dfcd6b.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA1cf6aae587f85f2.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20 483520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30f06672-0e95-41a9-80cb-dee386af99ad}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20 440512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2012-10-08 2872176]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-03-04 6330568]
"RtsCM"=C:\WINDOWS\RTSCM64.EXE [2014-01-10 147160]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2014-01-25 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2014-01-25 771544]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2014-01-25 770520]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2013-09-19 7818040]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2014-04-20 161984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-08-15 97392]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-13 155488]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

C:\Users\Kristýna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\Amazon\Amazon1ButtonApp\AmazonExtIE64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2014-01-25 624640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-06 20:19:08 ----D---- C:\ProgramData\ClassicShell
2014-06-06 20:19:07 ----D---- C:\Users\Kristýna\AppData\Roaming\ClassicShell
2014-06-06 20:18:36 ----D---- C:\Program Files\Classic Shell
2014-06-06 20:10:46 ----D---- C:\Users\Kristýna\AppData\Roaming\StartMenu
2014-06-06 18:06:04 ----D---- C:\ProgramData\RogueKiller
2014-06-06 13:58:46 ----A---- C:\WINDOWS\system32\SmartDefragBootTime.exe
2014-06-06 13:58:40 ----A---- C:\WINDOWS\system32\IObitSmartDefragExtension.dll
2014-06-06 13:34:50 ----A---- C:\WINDOWS\system32\RtNicProp64.dll
2014-06-06 13:34:50 ----A---- C:\WINDOWS\system32\drivers\Rt630x64.sys
2014-06-06 13:34:33 ----A---- C:\WINDOWS\system32\WdfCoInstaller01011.dll
2014-06-06 13:34:33 ----A---- C:\WINDOWS\system32\drivers\TeeDriverx64.sys
2014-06-06 13:32:58 ----A---- C:\WINDOWS\system32\drivers\Netwfw00.dat
2014-06-06 13:32:58 ----A---- C:\WINDOWS\system32\drivers\NETwew00.sys
2014-06-06 13:28:40 ----A---- C:\WINDOWS\system32\WavesGUILib64.dll
2014-06-06 13:28:36 ----A---- C:\WINDOWS\system32\drivers\rtvienna.dat
2014-06-06 13:28:35 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2014-06-06 13:28:34 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2014-06-06 13:28:32 ----A---- C:\WINDOWS\system32\SET203E.tmp
2014-06-06 13:28:32 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2014-06-06 13:28:32 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2014-06-06 13:28:31 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2014-06-06 13:28:31 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2014-06-06 13:28:25 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2014-06-06 13:28:25 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2014-06-06 13:28:12 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-06-06 13:28:10 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-06-06 13:28:09 ----A---- C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-06-06 13:28:04 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2014-06-06 12:54:58 ----A---- C:\WINDOWS\system32\IObitSmartDefragExtension.dll20140606135840.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\system32\winmde.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\system32\srcore.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\system32\srclient.dll
2014-06-06 12:10:27 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-06-06 12:10:27 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-06-06 12:10:26 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-06-06 12:10:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-06-06 12:10:26 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-06 12:10:26 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-06-06 12:10:26 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-06-06 12:10:25 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-06-06 12:10:25 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-06-06 12:10:25 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-06-06 12:10:25 ----A---- C:\WINDOWS\system32\mfps.dll
2014-06-06 12:10:25 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-06-06 12:10:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-06-06 12:10:25 ----A---- C:\WINDOWS\system32\mf.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-06 12:10:24 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-06 12:10:23 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-06-06 12:10:23 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-06-06 12:10:23 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-06-06 12:10:23 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-06-06 12:10:22 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-06-06 12:10:22 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-06-06 12:10:22 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-06-06 12:10:22 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-06-06 12:10:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-06-06 12:10:20 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-06-06 12:10:20 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-06-06 12:10:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-06-06 12:10:19 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-06-06 12:10:17 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-06-06 12:10:17 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-06-06 12:10:16 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-06-06 12:10:14 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-06 12:10:14 ----A---- C:\WINDOWS\system32\win32k.sys
2014-06-06 12:10:14 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-06-06 12:10:14 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-06-06 12:10:13 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-06-06 12:10:13 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-06-06 12:10:12 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-06-06 12:10:12 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-06-06 12:10:12 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-06-06 12:10:12 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-06-06 12:10:11 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-06-06 12:10:09 ----A---- C:\WINDOWS\system32\twinui.dll
2014-06-06 12:10:09 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-06-06 12:10:09 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-06-06 12:10:09 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-06-06 12:10:09 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-06-06 12:10:08 ----A---- C:\WINDOWS\system32\propsys.dll
2014-06-06 12:10:05 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-06-06 12:10:05 ----A---- C:\WINDOWS\system32\shell32.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-06-06 12:10:04 ----A---- C:\WINDOWS\system32\localspl.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-06-06 12:10:03 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-06-06 12:10:02 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\swprv.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\resutils.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\mispace.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-06-06 12:10:02 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-06 12:10:01 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-06-06 12:09:59 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-06-06 12:09:59 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-06-06 12:09:58 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-06-06 12:09:58 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-06-06 12:09:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-06-06 12:09:57 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-06-06 12:09:56 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-06-06 12:09:56 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-06-06 12:09:55 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-06-06 12:09:55 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-06-06 12:09:55 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-06-06 12:09:55 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-06-06 12:09:55 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-06-06 12:09:55 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-06-06 12:09:55 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-06-06 12:09:55 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-06-06 12:09:54 ----A---- C:\WINDOWS\system32\services.exe
2014-06-06 12:09:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-06-06 12:09:54 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-06-06 12:09:54 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-06-06 12:09:54 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2014-06-06 12:09:53 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-06-06 12:07:14 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-06-06 11:47:52 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2014-06-06 11:47:48 ----D---- C:\Users\Kristýna\AppData\Roaming\ProductData
2014-06-06 11:47:21 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2014-06-06 11:47:20 ----D---- C:\ProgramData\Malwarebytes
2014-06-06 11:47:20 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-06 11:47:20 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2014-06-06 11:47:20 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-06-06 11:46:26 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-06-06 11:46:25 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-05-30 23:18:21 ----D---- C:\Users\Kristýna\AppData\Roaming\dvdcss
2014-05-30 23:13:52 ----D---- C:\Users\Kristýna\AppData\Roaming\WebApp
2014-05-30 23:12:49 ----D---- C:\Users\Kristýna\AppData\Roaming\CyberLink
2014-05-30 23:06:21 ----A---- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2014-05-30 23:06:13 ----D---- C:\Users\Kristýna\AppData\Roaming\DAEMON Tools Lite
2014-05-30 23:06:07 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-05-30 23:05:23 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-05-17 06:43:14 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-05-14 21:26:29 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-05-14 21:26:29 ----A---- C:\WINDOWS\system32\wusa.exe
2014-05-14 21:26:25 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-05-14 21:26:24 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-05-14 21:26:23 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-05-14 21:25:10 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-05-14 21:25:10 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-05-14 21:25:08 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-05-14 21:25:06 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-05-14 21:25:04 ----A---- C:\WINDOWS\SYSWOW64\mrt100.dll
2014-05-14 21:25:04 ----A---- C:\WINDOWS\SYSWOW64\mrt_map.dll
2014-05-14 21:25:04 ----A---- C:\WINDOWS\system32\mrt100.dll
2014-05-14 21:25:04 ----A---- C:\WINDOWS\system32\mrt_map.dll
2014-05-14 21:25:00 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-05-14 21:24:59 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-05-14 21:24:56 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-05-14 21:24:55 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-05-14 21:24:55 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-05-14 21:24:54 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-05-14 21:24:54 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-05-14 21:24:54 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-05-14 21:24:53 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-05-14 21:24:53 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-05-14 21:24:53 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-05-14 21:24:53 ----A---- C:\WINDOWS\system32\wups.dll
2014-05-14 21:24:53 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-05-14 21:24:53 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-05-14 21:24:53 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-05-14 21:24:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-05-14 21:24:52 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-05-14 21:24:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-14 21:24:51 ----A---- C:\WINDOWS\system32\WSReset.exe

======List of files/folders modified in the last 1 month======

2014-06-07 11:25:48 ----D---- C:\Program Files\trend micro
2014-06-07 11:24:35 ----D---- C:\WINDOWS\Temp
2014-06-07 11:00:00 ----D---- C:\WINDOWS\system32\sru
2014-06-07 00:06:58 ----RD---- C:\WINDOWS\System32
2014-06-07 00:06:58 ----D---- C:\WINDOWS\Inf
2014-06-07 00:06:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-07 00:04:46 ----D---- C:\WINDOWS\Prefetch
2014-06-06 20:37:40 ----D---- C:\Users\Kristýna\AppData\Roaming\vlc
2014-06-06 20:19:08 ----HD---- C:\ProgramData
2014-06-06 20:18:41 ----SHD---- C:\WINDOWS\Installer
2014-06-06 20:18:37 ----D---- C:\WINDOWS\SysWOW64
2014-06-06 20:18:36 ----RD---- C:\Program Files
2014-06-06 20:16:04 ----D---- C:\ProgramData\WinClon
2014-06-06 20:16:01 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-06-06 20:10:49 ----D---- C:\WINDOWS\system32\Tasks
2014-06-06 20:05:46 ----D---- C:\Program Files (x86)\IObit
2014-06-06 19:52:20 ----D---- C:\WINDOWS\Tasks
2014-06-06 18:43:01 ----HD---- C:\Program Files\WindowsApps
2014-06-06 18:42:59 ----D---- C:\WINDOWS\AppReadiness
2014-06-06 18:38:57 ----D---- C:\WINDOWS\system32\config
2014-06-06 18:35:21 ----D---- C:\Users\Kristýna\AppData\Roaming\uTorrent
2014-06-06 18:32:50 ----D---- C:\WINDOWS\Microsoft.NET
2014-06-06 18:32:50 ----D---- C:\Windows
2014-06-06 18:32:46 ----D---- C:\WINDOWS\WinSxS
2014-06-06 18:29:50 ----RD---- C:\WINDOWS\ToastData
2014-06-06 18:29:47 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-06-06 18:29:47 ----D---- C:\WINDOWS\system32\oobe
2014-06-06 18:29:47 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-06-06 18:29:47 ----D---- C:\WINDOWS\system32\drivers
2014-06-06 18:29:43 ----D---- C:\WINDOWS\system32\DriverStore
2014-06-06 15:47:04 ----D---- C:\Users\Kristýna\AppData\Roaming\newnext.me
2014-06-06 13:36:57 ----D---- C:\WINDOWS\system32\catroot
2014-06-06 13:30:08 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2014-06-06 13:29:55 ----D---- C:\WINDOWS\system32\catroot2
2014-06-06 13:11:24 ----SHD---- C:\System Volume Information
2014-06-06 12:54:32 ----D---- C:\Users\Kristýna\AppData\Roaming\IObit
2014-06-06 12:17:23 ----D---- C:\WINDOWS\CbsTemp
2014-06-06 11:58:48 ----D---- C:\WINDOWS\debug
2014-06-06 11:56:04 ----D---- C:\Users\Kristýna\AppData\Roaming\Media Player Classic
2014-06-06 11:47:20 ----RD---- C:\Program Files (x86)
2014-06-06 11:47:00 ----D---- C:\ProgramData\ProductData
2014-05-30 23:13:15 ----D---- C:\ProgramData\CyberLink
2014-05-17 18:31:50 ----D---- C:\WINDOWS\rescache
2014-05-17 11:54:12 ----RSD---- C:\WINDOWS\assembly
2014-05-17 06:41:47 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2014-05-17 06:41:46 ----D---- C:\Program Files\Windows Defender
2014-05-17 06:41:45 ----D---- C:\WINDOWS\WinStore
2014-05-17 06:41:45 ----D---- C:\Program Files (x86)\Windows Defender
2014-05-17 06:41:44 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-05-17 06:41:44 ----D---- C:\WINDOWS\system32\cs-CZ
2014-05-17 06:41:43 ----D---- C:\WINDOWS\apppatch
2014-05-14 23:53:54 ----D---- C:\ProgramData\Microsoft Help
2014-05-14 23:48:00 ----D---- C:\Program Files (x86)\Common Files
2014-05-14 23:46:49 ----D---- C:\WINDOWS\system32\MRT
2014-05-14 23:43:58 ----A---- C:\WINDOWS\system32\MRT.exe
2014-05-08 12:50:24 ----D---- C:\Program Files (x86)\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 excsd;ExpressCache Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\excsd.sys [2012-08-17 103248]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-31 645952]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2013-02-14 213416]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 excfs;ExpressCache File System Filter Driver; C:\WINDOWS\system32\DRIVERS\excfs.sys [2012-08-17 23376]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 epfwwfpr;epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R3 AMPPAL;@oem10.inf,%AMPPAL.SVCDESC%;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® + High Speed; C:\WINDOWS\System32\drivers\AMPPAL.sys [2012-09-12 162344]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 btmaux;@oem6.inf,%BTMAUX.ServiceDesc%;Intel Bluetooth Auxiliary Service; C:\WINDOWS\system32\DRIVERS\btmaux.sys [2013-07-22 140600]
R3 btmhsf;btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [2013-09-05 1390904]
R3 dtsoftbus01;@oem27.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-05-30 283064]
R3 ETD;@oem8.inf,%SamsungDeviceDesc%;Samsung PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2012-10-08 325488]
R3 iBtFltCoex;iBtFltCoex; C:\WINDOWS\system32\DRIVERS\iBtFltCoex.sys [2013-04-23 69088]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-01-25 4221440]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-06-06 3872984]
R3 IntcDAud;@oem17.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 irstrtdv;@oem7.inf,%Irstrt.DispName%;Intel(R) Rapid Start Technology Driver; C:\WINDOWS\System32\drivers\irstrtdv.sys [2012-07-20 43800]
R3 iwdbus;@oem20.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-27 27032]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2014-05-12 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2014-06-06 122584]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2014-05-12 64216]
R3 MEIx64;@oem30.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2014-06-06 100312]
R3 NETwNe64;@oem29.inf,___ %NIC_Service_DispName_WIN8_64%;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 8 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [2014-06-06 3349984]
R3 RadioHIDMini;@oem4.inf,%RadioHIDMini%;Radio HID Mini-driver; C:\WINDOWS\System32\drivers\RadioHIDMini.sys [2012-07-27 23408]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 RTL8168;@oem31.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-06-06 839896]
R3 rtsuvc;@oem25.inf,%rtsuvc.DeviceDesc%;Realtek USB2.0 PC Camera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2014-01-10 8873688]
R3 tap0901;@oem9.inf,%DeviceDescription%;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2010-04-01 31232]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-06-06 1200128]
S3 intaud_WaveExtensible;@oem19.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-12-27 38296]
S3 rtport;rtport; \??\C:\windows\SysWOW64\drivers\rtport.sys [2013-01-21 15144]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-09-12 731688]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2013-08-26 1137016]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2013-08-26 1157496]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-08-15 135984]
R2 Easy Launcher;Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [2012-10-19 1593976]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-03-04 1341664]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-09-24 617776]
R2 ExpressCache;ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [2012-08-17 102224]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-18 128896]
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [2013-09-18 157128]
R2 irstrtsv;Intel(R) Rapid Start Technology Service; C:\windows\SysWOW64\irstrtsv.exe [2012-07-19 193576]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-09-24 149296]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-02 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-04-08 2152768]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 Update outobox;Update outobox; C:\Program Files (x86)\outobox\updateoutobox.exe []
S2 Util outobox;Util outobox; C:\Program Files (x86)\outobox\bin\utiloutobox.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-13 257712]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-01-25 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-02 116648]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-09-24 272176]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

Re: Prosim o kontrolu

Napsal: 07 čer 2014 10:32
od Rudy
Junkware je OK. Budete muset asi nainstalovat AdBlock, pokud vám ta stránka vadí.
K druhému logu:

Spusťte tuto utilitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Prosim o kontrolu

Napsal: 07 čer 2014 10:47
od Jack O Neill
# AdwCleaner v3.212 - Report created 07/06/2014 at 11:42:23
# Updated 05/06/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Kristýna - PC-KRISTYNA
# Running from : C:\Users\Kristýna\Desktop\adwcleaner_3.212.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : Update outobox
[#] Service Deleted : Util outobox

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Users\Kristýna\AppData\Local\genienext
Folder Deleted : C:\Users\Kristýna\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Kristýna\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Kristýna\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Kristýna\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Kristýna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Folder Deleted : C:\Users\Kristýna\Documents\Mobogenie
Folder Deleted : C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod
File Deleted : C:\WINDOWS\System32\roboot64.exe
File Deleted : C:\Users\Kristýna\daemonprocess.txt

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fjpdnoojnohifgekbkmnfbiobhcbedka
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F06672-0E95-41A9-80CB-DEE386AF99AD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\outobox
Key Deleted : HKCU\Software\systweak
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\systweak

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Google Chrome v35.0.1916.114

[ File : C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : gkcefkcdkepgkpbgncjchhbjgoanleod

*************************

AdwCleaner[R0].txt - [2659 octets] - [07/06/2014 11:41:53]
AdwCleaner[S0].txt - [2465 octets] - [07/06/2014 11:42:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2525 octets] ##########

Re: Prosim o kontrolu

Napsal: 07 čer 2014 10:50
od Rudy
Dejte nový log RSIT.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz