Zasekaný notebook.

[mamStavy]

Logfile of random's system information tool 1.10 (written by random/random)
Run by ASUS at 2014-10-09 23:23:50
Microsoft Windows 8.1
System drive C: has 170 GB (60%) free of 286 GB
Total RAM: 3982 MB (8% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:23:58, on 9. 10. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17278)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\ASUS.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - Startup: CurseClientStartup.ccip
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG Technologies - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8630 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe"
dashost.exe {3ae30f7e-2850-4984-af2422239265bde4}
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
taskhostex.exe
KBFiltr.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe" /TUStart /pid:2660
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
ctfmon.exe
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="472.0.377674928\1597601150" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.1.1528315686\1448172796" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.2.1431045553\1301845170" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.3.69691270\860286923" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.4.2114555443\1980734885" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.5.1934247716\1195408158" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.6.334298855\7215022" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.7.2135291563\540544823" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.9.609468546\1199712383" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/PasswordManagerUI/Infobar/Prerender/Prerender15minTTL/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.11.1385194521\524591745" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="472.12.1993297179\341079468" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/PasswordManagerUI/Infobar/Prerender/Prerender15minTTL/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.22.1457575917\67850902" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/PasswordManagerUI/Infobar/Prerender/Prerender15minTTL/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.25.1609486681\1205869689" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/ML Kodachrome dev/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/PasswordGeneration/Disabled/PasswordManagerUI/Infobar/Prerender/Prerender15minTTL/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3b:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:SkipPrerenderLocalCandidates=Enabled:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2/RapporRollout/Enabled/SafeBrowsingIncidentReportingService/Enabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/V8ScriptStreaming/Default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="472.26.685933281\446411219" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584

"C:\Users\ASUS\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-231088401-1811887964-3817021566-1001Core.job - C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-231088401-1811887964-3817021566-1001UA.job - C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-03-27 66688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-15 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-15 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-30 13550152]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-05-20 1308232]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll,LogiFetch []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\ASUS\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-21 138096]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-10-09 3600216]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-08 95192]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2014-09-05 3593744]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-03-27 132736]

C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CurseClientStartup.ccip

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\PROGRA~2\GS_BOO~1\ASSIST~2.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\acvt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\asusvibelauncher.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\azteca-wt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bejeweled3-wt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cuttheropeapp-wt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\insoncfg.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pdvdlaunchpolicy.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\peggle-wt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\penguins-wt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\provider.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tales of lagoona-wt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"midi4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-10-09 23:23:51 ----D---- C:\Program Files\trend micro
2014-10-09 23:23:50 ----D---- C:\rsit
2014-10-09 23:08:59 ----D---- C:\FRST
2014-10-09 16:17:12 ----D---- C:\Program Files (x86)\Origin Games
2014-10-09 16:11:54 ----D---- C:\Users\ASUS\AppData\Roaming\Origin
2014-10-09 16:09:55 ----D---- C:\ProgramData\Origin
2014-10-09 16:09:53 ----D---- C:\ProgramData\Electronic Arts
2014-10-09 16:09:49 ----D---- C:\Program Files (x86)\Origin
2014-10-04 10:55:35 ----A---- C:\WINDOWS\SYSWOW64\fmcodec.DLL
2014-10-04 10:55:32 ----D---- C:\Program Files (x86)\DsNET Corp
2014-10-04 06:58:04 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2014-10-04 06:58:00 ----A---- C:\WINDOWS\SYSWOW64\authuitu.dll
2014-10-04 06:58:00 ----A---- C:\WINDOWS\system32\authuitu.dll
2014-10-04 06:56:34 ----D---- C:\Users\ASUS\AppData\Roaming\AVG
2014-10-04 06:50:18 ----D---- C:\ProgramData\AVG
2014-10-04 06:06:42 ----D---- C:\ProgramData\Avg_Update_0914av
2014-10-04 06:00:58 ----D---- C:\Users\ASUS\AppData\Roaming\AVG2015
2014-10-04 05:59:37 ----D---- C:\Users\ASUS\AppData\Roaming\TuneUp Software
2014-10-04 05:59:01 ----HD---- C:\$AVG
2014-10-04 05:59:01 ----D---- C:\ProgramData\AVG2015
2014-10-04 05:58:14 ----D---- C:\Program Files (x86)\AVG
2014-10-04 05:55:35 ----HD---- C:\ProgramData\Common Files
2014-10-04 05:55:35 ----D---- C:\ProgramData\MFAData
2014-09-28 18:33:33 ----RD---- C:\WINDOWS\BrowserChoice
2014-09-28 09:17:13 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-09-28 09:17:13 ----A---- C:\WINDOWS\system32\tcpmon.dll
2014-09-28 09:16:55 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-09-28 09:16:54 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-09-28 09:16:54 ----A---- C:\WINDOWS\system32\authui.dll
2014-09-28 09:16:53 ----A---- C:\WINDOWS\system32\shell32.dll
2014-09-28 09:16:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-09-28 09:16:51 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-09-28 09:16:49 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-09-28 09:16:49 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-09-28 09:16:48 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-09-28 09:16:47 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-09-28 09:16:46 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-09-28 09:16:46 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2014-09-28 09:16:42 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-09-28 09:16:41 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-09-28 09:16:41 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2014-09-28 09:16:41 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-09-28 09:16:40 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-09-28 09:16:40 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-09-28 09:16:39 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-09-28 09:16:38 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-09-28 09:16:38 ----A---- C:\WINDOWS\system32\localspl.dll
2014-09-28 09:16:38 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-09-28 09:16:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-09-28 09:16:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-09-28 09:16:37 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-09-28 09:16:37 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2014-09-28 09:16:36 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-09-28 09:16:36 ----A---- C:\WINDOWS\system32\SRH.dll
2014-09-28 09:16:36 ----A---- C:\WINDOWS\system32\printui.dll
2014-09-28 09:16:36 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-09-28 09:16:36 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-09-28 09:16:35 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-09-28 09:16:35 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-09-28 09:16:35 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-09-28 09:16:35 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-09-28 09:16:34 ----AC---- C:\WINDOWS\system32\drivers\bthport.sys
2014-09-28 09:16:34 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2014-09-28 09:16:34 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-09-28 09:16:34 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-09-28 09:16:33 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-09-28 09:16:33 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-09-28 09:16:33 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-09-28 09:16:32 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2014-09-28 09:16:32 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-09-28 09:16:32 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-09-28 09:16:32 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-09-28 09:16:32 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-09-28 09:16:32 ----A---- C:\WINDOWS\system32\spoolsv.exe
2014-09-28 09:16:31 ----AC---- C:\WINDOWS\system32\drivers\usbccgp.sys
2014-09-28 09:16:31 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-09-28 09:16:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-09-28 09:16:31 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2014-09-28 09:16:31 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-09-28 09:16:31 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-09-28 09:16:30 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-09-28 09:16:30 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-09-28 09:16:30 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-09-28 09:16:30 ----A---- C:\WINDOWS\system32\mftranscode.dll
2014-09-28 09:16:30 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-09-28 09:16:30 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-09-28 09:16:29 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-09-28 09:16:29 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-09-28 09:16:29 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-09-28 09:16:29 ----A---- C:\WINDOWS\system32\winload.exe
2014-09-28 09:16:29 ----A---- C:\WINDOWS\system32\usbmon.dll
2014-09-28 09:16:28 ----A---- C:\WINDOWS\system32\wisp.dll
2014-09-28 09:16:28 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-09-28 09:16:28 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-09-28 09:16:27 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-09-28 09:16:27 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-09-28 09:16:27 ----A---- C:\WINDOWS\system32\wsecedit.dll
2014-09-28 09:16:27 ----A---- C:\WINDOWS\system32\winresume.exe
2014-09-28 09:16:27 ----A---- C:\WINDOWS\system32\aclui.dll
2014-09-28 09:16:26 ----AC---- C:\WINDOWS\system32\drivers\usbhub.sys
2014-09-28 09:16:26 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\winmmbase.dll
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\user32.dll
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-09-28 09:16:26 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-09-28 09:16:25 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-09-28 09:16:25 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-09-28 09:16:25 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-09-28 09:16:25 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-09-28 09:16:25 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-09-28 09:16:25 ----A---- C:\WINDOWS\system32\conhost.exe
2014-09-28 09:16:24 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\system32\VAN.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\system32\Display.dll
2014-09-28 09:16:24 ----A---- C:\WINDOWS\system32\AppxSip.dll
2014-09-28 09:16:23 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2014-09-28 09:16:23 ----A---- C:\WINDOWS\SYSWOW64\winmmbase.dll
2014-09-28 09:16:23 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-09-28 09:16:23 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-09-28 09:16:23 ----A---- C:\WINDOWS\system32\osk.exe
2014-09-28 09:16:23 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-09-28 09:16:22 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-09-28 09:16:22 ----A---- C:\WINDOWS\system32\mfps.dll
2014-09-28 09:16:22 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-09-28 09:16:22 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-09-28 09:16:22 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2014-09-28 09:16:22 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-09-28 09:16:21 ----AC---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-09-28 09:16:21 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-09-28 09:16:21 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2014-09-28 09:16:20 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\winmm.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-09-28 09:16:20 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2014-09-28 09:16:19 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2014-09-28 09:16:19 ----A---- C:\WINDOWS\system32\prnntfy.dll
2014-09-28 09:16:19 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-09-28 09:16:18 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2014-09-28 09:16:18 ----A---- C:\WINDOWS\SYSWOW64\winmm.dll
2014-09-28 09:16:18 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2014-09-28 09:16:18 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-09-28 09:16:18 ----A---- C:\WINDOWS\system32\puiapi.dll
2014-09-28 09:16:18 ----A---- C:\WINDOWS\system32\gpedit.dll
2014-09-28 09:16:17 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-09-28 09:16:17 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2014-09-28 09:16:17 ----A---- C:\WINDOWS\system32\WebClnt.dll
2014-09-28 09:16:17 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-09-28 09:16:17 ----A---- C:\WINDOWS\system32\iasnap.dll
2014-09-28 09:16:16 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2014-09-28 09:16:16 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-09-28 09:16:16 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-09-28 09:16:16 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-09-28 09:16:15 ----AC---- C:\WINDOWS\system32\drivers\pci.sys
2014-09-28 09:16:15 ----A---- C:\WINDOWS\system32\wups.dll
2014-09-28 09:16:14 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-09-28 09:16:13 ----A---- C:\WINDOWS\system32\mispace.dll
2014-09-28 09:16:13 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-09-28 09:16:12 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-09-28 09:16:12 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-09-28 09:16:11 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-09-28 09:16:11 ----A---- C:\WINDOWS\system32\stobject.dll
2014-09-28 09:16:11 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-09-28 09:16:11 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-09-28 09:16:10 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-09-28 09:16:10 ----A---- C:\WINDOWS\system32\dab.dll
2014-09-28 09:16:09 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-09-28 09:16:08 ----A---- C:\WINDOWS\SYSWOW64\iasnap.dll
2014-09-28 09:16:07 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2014-09-28 09:16:07 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-09-28 09:16:06 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-09-28 09:16:05 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-09-28 09:16:05 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-09-28 09:16:05 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-09-28 09:16:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2014-09-28 09:16:03 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-09-28 09:16:03 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-09-28 09:16:03 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-09-28 09:16:03 ----A---- C:\WINDOWS\system32\wups2.dll
2014-09-28 09:16:03 ----A---- C:\WINDOWS\system32\wshbth.dll
2014-09-28 09:16:03 ----A---- C:\WINDOWS\system32\schannel.dll
2014-09-28 09:16:02 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-09-28 09:16:01 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2014-09-28 09:16:01 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-09-28 09:16:01 ----A---- C:\WINDOWS\system32\browser.dll
2014-09-28 09:16:00 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2014-09-28 09:16:00 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-09-28 09:15:59 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2014-09-28 09:15:59 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-09-28 09:15:58 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-09-28 09:15:57 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-09-28 09:15:57 ----A---- C:\WINDOWS\SYSWOW64\KBDRUM.DLL
2014-09-28 09:15:57 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-09-28 09:15:57 ----A---- C:\WINDOWS\system32\KBDRUM.DLL
2014-09-28 09:15:57 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-09-28 09:15:56 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-09-28 09:15:56 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-09-28 09:15:56 ----A---- C:\WINDOWS\system32\KBDYAK.DLL
2014-09-28 09:15:56 ----A---- C:\WINDOWS\system32\KBDRU1.DLL
2014-09-28 09:15:56 ----A---- C:\WINDOWS\system32\KBDRU.DLL
2014-09-28 09:15:56 ----A---- C:\WINDOWS\system32\KBDBASH.DLL
2014-09-28 09:15:55 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2014-09-28 09:15:54 ----A---- C:\WINDOWS\SYSWOW64\KBDYAK.DLL
2014-09-28 09:15:54 ----A---- C:\WINDOWS\SYSWOW64\KBDRU1.DLL
2014-09-28 09:15:54 ----A---- C:\WINDOWS\SYSWOW64\KBDRU.DLL
2014-09-28 09:15:54 ----A---- C:\WINDOWS\SYSWOW64\KBDBASH.DLL
2014-09-28 09:15:52 ----AC---- C:\WINDOWS\system32\drivers\bthpan.sys
2014-09-28 09:15:52 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-09-28 09:15:52 ----A---- C:\WINDOWS\system32\certcli.dll
2014-09-28 09:15:51 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-09-28 09:15:51 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-09-28 09:15:50 ----A---- C:\WINDOWS\SYSWOW64\KBDTAT.DLL
2014-09-28 09:15:50 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-09-28 09:15:50 ----A---- C:\WINDOWS\system32\KBDTAT.DLL
2014-09-28 09:15:50 ----A---- C:\WINDOWS\system32\compstui.dll
2014-09-28 09:15:49 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2014-09-28 09:15:48 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-09-28 09:15:48 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-09-28 09:15:47 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-09-28 09:15:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-28 09:15:46 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-28 09:15:45 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-09-28 09:15:45 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-09-28 09:15:44 ----A---- C:\WINDOWS\system32\KBDTT102.DLL
2014-09-28 09:15:43 ----A---- C:\WINDOWS\SYSWOW64\KBDTT102.DLL
2014-09-28 09:08:23 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-09-28 09:08:23 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-09-28 09:08:22 ----A---- C:\WINDOWS\explorer.exe
2014-09-28 09:08:21 ----A---- C:\WINDOWS\system32\twinui.dll
2014-09-28 09:08:19 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-09-28 09:08:19 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-09-28 09:08:19 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-09-28 09:08:17 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-09-28 09:08:17 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-09-28 09:07:57 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-09-28 09:07:28 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-09-28 09:07:27 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-09-28 09:07:27 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-09-28 09:07:10 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-09-28 09:07:10 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-09-28 09:07:07 ----A---- C:\WINDOWS\system32\vpnike.dll
2014-09-28 09:07:05 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-09-28 09:07:04 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-09-28 09:07:04 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2014-09-28 09:07:04 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-09-28 09:07:04 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-09-28 09:07:04 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2014-09-28 09:07:03 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-09-28 09:07:03 ----A---- C:\WINDOWS\SYSWOW64\framedynos.dll
2014-09-28 09:07:03 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2014-09-28 09:07:03 ----A---- C:\WINDOWS\system32\framedynos.dll
2014-09-28 09:07:03 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-09-28 09:07:03 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2014-09-28 09:07:03 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-09-28 09:07:02 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-09-28 09:07:01 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2014-09-28 09:07:00 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2014-09-28 09:06:59 ----A---- C:\WINDOWS\system32\winbici.dll
2014-09-28 09:06:59 ----A---- C:\WINDOWS\system32\framedyn.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-09-28 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\ncobjapi.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\framedyn.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\srms.dat
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\drivers\vwififlt.sys
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2014-09-28 09:06:58 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-09-28 09:06:36 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-09-28 09:06:36 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-09-28 09:06:36 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-09-26 13:18:33 ----SHD---- C:\Recovery
2014-09-26 13:18:20 ----DC---- C:\WINDOWS\Panther
2014-09-26 13:14:45 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-09-26 13:14:45 ----A---- C:\WINDOWS\system32\wusa.exe
2014-09-26 13:14:39 ----A---- C:\WINDOWS\system32\schedsvc.dll
2014-09-26 13:14:33 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-09-26 13:14:33 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-09-26 13:14:26 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-09-26 13:14:26 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-09-26 13:14:26 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-09-26 13:14:26 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-09-26 13:13:07 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-09-26 13:12:37 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-09-26 13:12:37 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-09-26 13:12:37 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-09-26 13:12:37 ----A---- C:\WINDOWS\system32\msi.dll
2014-09-26 13:12:37 ----A---- C:\WINDOWS\system32\consent.exe
2014-09-26 13:12:29 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-09-26 13:11:24 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2014-09-26 13:11:24 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-09-26 13:09:59 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-09-26 13:09:59 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\spp.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\pdh.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\ole32.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\cdd.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-09-26 13:08:06 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-09-26 13:08:05 ----AC---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-09-26 13:08:05 ----AC---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\WSDScDrv.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\userenv.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-09-26 13:08:05 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-09-26 13:05:33 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2014-09-26 13:05:33 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2014-09-26 13:05:33 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2014-09-26 13:05:33 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2014-09-26 13:05:33 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2014-09-26 13:05:33 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2014-09-26 13:05:33 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-09-26 13:05:32 ----AC---- C:\WINDOWS\system32\drivers\usbuhci.sys
2014-09-26 13:05:32 ----AC---- C:\WINDOWS\system32\drivers\usbport.sys
2014-09-26 13:05:32 ----AC---- C:\WINDOWS\system32\drivers\usbehci.sys
2014-09-26 13:05:32 ----AC---- C:\WINDOWS\system32\drivers\usbd.sys
2014-09-26 13:05:32 ----A---- C:\WINDOWS\system32\hal.dll
2014-09-26 13:04:55 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-09-26 13:04:55 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-09-26 13:04:55 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-09-26 13:04:35 ----A---- C:\WINDOWS\SYSWOW64\mrt100.dll
2014-09-26 13:04:35 ----A---- C:\WINDOWS\SYSWOW64\mrt_map.dll
2014-09-26 13:04:35 ----A---- C:\WINDOWS\system32\mrt100.dll
2014-09-26 13:04:35 ----A---- C:\WINDOWS\system32\mrt_map.dll
2014-09-26 13:04:31 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-09-26 13:03:26 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-09-26 13:03:26 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-09-26 13:03:26 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-09-26 13:03:02 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-09-26 13:02:48 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\wininet.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\msrating.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-09-26 13:02:12 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-09-26 13:01:06 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-09-26 13:01:06 ----A---- C:\WINDOWS\system32\qedit.dll
2014-09-26 13:01:02 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-09-26 13:01:02 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-09-26 13:00:45 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-09-26 13:00:45 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-09-26 13:00:45 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-09-26 12:56:01 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-09-26 12:56:01 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-09-26 12:56:01 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-09-26 12:56:01 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-09-26 12:56:01 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-09-26 12:56:01 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-09-26 12:56:01 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-09-26 12:56:01 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-09-26 12:55:28 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-09-26 12:55:28 ----A---- C:\WINDOWS\system32\win32k.sys
2014-09-26 12:55:28 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-09-26 12:55:11 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-09-26 12:55:11 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-09-26 12:55:11 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-09-26 12:55:11 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-09-26 12:55:11 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-09-26 12:54:27 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-09-26 12:54:27 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-09-26 12:54:27 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\winmde.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\swprv.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\srcore.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\srclient.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\resutils.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\propsys.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\mf.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-09-26 12:53:45 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-09-26 12:53:44 ----AC---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-09-26 12:53:44 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-09-26 12:53:44 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-09-26 12:53:44 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-09-26 12:53:44 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-09-26 12:53:44 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-09-26 12:53:44 ----A---- C:\WINDOWS\system32\services.exe
2014-09-26 12:53:44 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-09-26 12:53:44 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-09-26 12:53:44 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-09-26 12:53:44 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-09-26 12:51:50 ----D---- C:\Program Files\Common Files\Atheros
2014-09-26 12:48:40 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-09-26 12:48:40 ----D---- C:\Program Files (x86)\MSBuild
2014-09-26 12:48:39 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2014-09-26 12:48:39 ----D---- C:\Program Files\Reference Assemblies
2014-09-26 12:48:39 ----D---- C:\Program Files\MSBuild
2014-09-26 12:48:22 ----D---- C:\Users\ASUS\AppData\Roaming\Identities
2014-09-26 12:48:01 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2014-09-26 12:48:01 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-09-26 12:47:59 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-09-26 12:47:58 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-09-26 12:45:55 ----SHD---- C:\ProgramData\Šablony
2014-09-26 12:45:55 ----SHD---- C:\ProgramData\Plocha
2014-09-26 12:45:55 ----SHD---- C:\ProgramData\Nabídka Start
2014-09-26 12:45:55 ----SHD---- C:\ProgramData\Dokumenty
2014-09-26 12:45:55 ----SHD---- C:\ProgramData\Data aplikací
2014-09-26 12:44:41 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2014-09-26 12:31:05 ----SD---- C:\Users\ASUS\AppData\Roaming\Microsoft
2014-09-26 12:22:16 ----A---- C:\WINDOWS\system32\drivers\RTWAVES30.dat
2014-09-26 12:22:08 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2014-09-26 12:22:08 ----D---- C:\Program Files\Realtek
2014-09-26 12:21:57 ----D---- C:\Program Files (x86)\Intel
2014-09-26 12:21:54 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2014-09-26 12:21:54 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2014-09-26 12:19:42 ----D---- C:\WINDOWS\Prefetch
2014-09-21 20:48:34 ----A---- C:\Users\ASUS\AppData\Roaming\LiveSupport.exe_log.txt
2014-09-21 20:48:33 ----A---- C:\Users\ASUS\AppData\Roaming\regsvr32.exe_log.txt
2014-09-21 20:47:53 ----D---- C:\ProgramData\Trusted Publisher
2014-09-21 20:47:44 ----D---- C:\Program Files (x86)\GS_Booster
2014-09-21 20:46:54 ----D---- C:\ProgramData\YoutubeAdBlocuke
2014-09-21 20:46:53 ----D---- C:\Program Files (x86)\YoutubeAdBlocuke
2014-09-21 20:46:11 ----D---- C:\ProgramData\GooSAvee
2014-09-21 20:46:09 ----D---- C:\Program Files (x86)\GooSAvee
2014-09-21 20:45:28 ----D---- C:\ProgramData\4d79bb4d2a54238b
2014-09-21 20:22:25 ----D---- C:\output
2014-09-21 20:17:02 ----D---- C:\Users\ASUS\AppData\Roaming\PhotoScape
2014-09-21 20:04:55 ----A---- C:\Users\ASUS\AppData\Roaming\FotoSketcher.ini
2014-09-21 19:54:42 ----D---- C:\Program Files (x86)\FotoSketcher
2014-09-15 21:36:39 ----D---- C:\ProgramData\Oracle
2014-09-15 21:36:31 ----D---- C:\ProgramData\Sun
2014-09-15 21:36:28 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-09-15 21:35:44 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-09-15 21:35:44 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-09-15 21:35:44 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-09-15 21:35:29 ----D---- C:\Program Files (x86)\Java
2014-09-15 21:20:01 ----D---- C:\Program Files (x86)\ALP

======List of files/folders modified in the last 1 month======

2014-10-09 23:23:51 ----RD---- C:\Program Files
2014-10-09 23:16:05 ----D---- C:\Windows
2014-10-09 23:07:31 ----D---- C:\WINDOWS\Temp
2014-10-09 18:17:27 ----D---- C:\WINDOWS\Microsoft.NET
2014-10-09 16:17:12 ----RD---- C:\Program Files (x86)
2014-10-09 16:14:54 ----D---- C:\WINDOWS\system32\Tasks
2014-10-09 16:09:55 ----HD---- C:\ProgramData
2014-10-09 07:24:42 ----SHD---- C:\WINDOWS\Installer
2014-10-08 15:53:16 ----D---- C:\WINDOWS\system32\config
2014-10-07 19:35:31 ----D---- C:\WINDOWS\system32\DriverStore
2014-10-05 09:24:24 ----D---- C:\Program Files (x86)\Hearthstone
2014-10-05 09:23:00 ----D---- C:\Program Files (x86)\Battle.net
2014-10-04 10:55:40 ----D---- C:\WINDOWS\SysWOW64
2014-10-04 10:55:40 ----D---- C:\WINDOWS\Inf
2014-10-04 10:44:05 ----D---- C:\WINDOWS\SYSWOW64\config
2014-10-04 09:59:08 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-10-04 09:44:28 ----SD---- C:\ProgramData\Microsoft
2014-10-04 09:21:03 ----D---- C:\ProgramData\McAfee
2014-10-04 09:21:03 ----D---- C:\Program Files\Common Files
2014-10-04 09:20:49 ----D---- C:\Program Files (x86)\Common Files
2014-10-04 09:19:24 ----RD---- C:\WINDOWS\System32
2014-10-04 09:00:00 ----D---- C:\WINDOWS\system32\sru
2014-10-04 07:14:20 ----D---- C:\Program Files (x86)\Steam
2014-10-04 07:14:19 ----D---- C:\WINDOWS\system32\Sysprep
2014-10-04 07:14:11 ----D---- C:\WINDOWS\Tasks
2014-10-04 07:08:53 ----D---- C:\WINDOWS\system32\drivers
2014-10-04 06:30:27 ----D---- C:\WINDOWS\CbsTemp
2014-10-04 06:19:11 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-10-04 06:09:16 ----HD---- C:\WINDOWS\ELAMBKUP
2014-10-04 05:58:37 ----SHD---- C:\System Volume Information
2014-10-04 05:57:20 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-10-04 05:54:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-10-04 03:41:41 ----D---- C:\WINDOWS\system32\NDF
2014-10-03 00:16:01 ----D---- C:\WINDOWS\AppReadiness
2014-10-03 00:16:00 ----HD---- C:\Program Files\WindowsApps
2014-10-01 08:46:30 ----D---- C:\WINDOWS\system32\wdi
2014-09-29 06:18:21 ----D---- C:\WINDOWS\rescache
2014-09-29 06:16:09 ----D---- C:\WINDOWS\Logs
2014-09-29 06:07:36 ----D---- C:\WINDOWS\WinSxS
2014-09-28 23:18:14 ----RD---- C:\WINDOWS\assembly
2014-09-28 18:34:00 ----RD---- C:\WINDOWS\ToastData
2014-09-28 18:33:50 ----D---- C:\WINDOWS\WinStore
2014-09-28 18:33:50 ----D---- C:\Program Files\Windows Journal
2014-09-28 18:33:49 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-09-28 18:33:49 ----D---- C:\WINDOWS\SYSWOW64\setup
2014-09-28 18:33:49 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-09-28 18:33:47 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-09-28 18:33:47 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-09-28 18:33:46 ----D---- C:\WINDOWS\system32\wbem
2014-09-28 18:33:46 ----D---- C:\WINDOWS\system32\setup
2014-09-28 18:33:46 ----D---- C:\WINDOWS\system32\oobe
2014-09-28 18:33:46 ----D---- C:\WINDOWS\system32\cs-CZ
2014-09-28 18:33:46 ----D---- C:\WINDOWS\system32\Boot
2014-09-28 18:33:37 ----RSD---- C:\WINDOWS\Fonts
2014-09-28 18:33:36 ----D---- C:\WINDOWS\apppatch
2014-09-28 18:33:35 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-09-28 18:33:35 ----D---- C:\WINDOWS\system32\migration
2014-09-28 18:33:30 ----D---- C:\WINDOWS\MediaViewer
2014-09-28 18:33:29 ----D---- C:\WINDOWS\system32\en-US
2014-09-28 18:33:28 ----D---- C:\WINDOWS\FileManager
2014-09-28 18:33:28 ----D---- C:\WINDOWS\Camera
2014-09-28 11:02:48 ----D---- C:\WINDOWS\system32\restore
2014-09-28 09:04:27 ----D---- C:\WINDOWS\system32\catroot2
2014-09-27 21:00:49 ----D---- C:\WINDOWS\debug
2014-09-27 14:57:56 ----D---- C:\WINDOWS\system32\LogFiles
2014-09-26 19:46:41 ----D---- C:\Users\ASUS\AppData\Roaming\uTorrent
2014-09-26 13:02:46 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2014-09-26 13:02:27 ----D---- C:\Program Files\Internet Explorer
2014-09-26 13:02:27 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-26 12:54:29 ----D---- C:\Program Files\Windows Defender
2014-09-26 12:54:29 ----D---- C:\Program Files (x86)\Windows Defender
2014-09-26 12:51:51 ----D---- C:\Program Files (x86)\Bluetooth Suite
2014-09-26 12:51:34 ----SD---- C:\WINDOWS\system32\Microsoft
2014-09-26 12:49:37 ----SHD---- C:\$Recycle.Bin
2014-09-26 12:47:48 ----D---- C:\WINDOWS\SoftwareDistribution
2014-09-26 12:45:55 ----D---- C:\Program Files\Windows NT
2014-09-26 12:45:13 ----D---- C:\WINDOWS\Registration
2014-09-26 12:42:40 ----RSD---- C:\WINDOWS\Media
2014-09-26 12:38:12 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-09-26 12:38:11 ----D---- C:\WINDOWS\sk
2014-09-26 12:38:11 ----D---- C:\WINDOWS\pl
2014-09-26 12:38:11 ----D---- C:\WINDOWS\hu
2014-09-26 12:38:11 ----D---- C:\WINDOWS\en-GB
2014-09-26 12:38:11 ----D---- C:\WINDOWS\cs
2014-09-26 12:38:11 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-09-26 12:36:07 ----D---- C:\WINDOWS\SYSWOW64\winrm
2014-09-26 12:36:06 ----D---- C:\WINDOWS\SYSWOW64\WCN
2014-09-26 12:36:05 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2014-09-26 12:36:05 ----D---- C:\WINDOWS\SYSWOW64\SMI
2014-09-26 12:36:05 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2014-09-26 12:36:05 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2014-09-26 12:36:04 ----D---- C:\WINDOWS\SYSWOW64\sda
2014-09-26 12:36:04 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2014-09-26 12:36:04 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-09-26 12:36:04 ----D---- C:\WINDOWS\SYSWOW64\MUI
2014-09-26 12:36:04 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2014-09-26 12:36:04 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2014-09-26 12:36:03 ----D---- C:\WINDOWS\SYSWOW64\IME
2014-09-26 12:36:03 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2014-09-26 12:36:03 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2014-09-26 12:36:02 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2014-09-26 12:36:02 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2014-09-26 12:36:02 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-09-26 12:36:02 ----D---- C:\WINDOWS\SYSWOW64\catroot
2014-09-26 12:36:00 ----D---- C:\WINDOWS\system32\winrm
2014-09-26 12:35:59 ----D---- C:\WINDOWS\system32\WCN
2014-09-26 12:35:59 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-09-26 12:35:59 ----D---- C:\WINDOWS\system32\spool
2014-09-26 12:35:50 ----D---- C:\WINDOWS\system32\slmgr
2014-09-26 12:35:50 ----D---- C:\WINDOWS\system32\sk-SK
2014-09-26 12:35:50 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2014-09-26 12:35:49 ----D---- C:\WINDOWS\system32\MUI
2014-09-26 12:35:49 ----D---- C:\WINDOWS\system32\IME
2014-09-26 12:35:49 ----D---- C:\WINDOWS\system32\hu-HU
2014-09-26 12:35:49 ----D---- C:\WINDOWS\system32\en-GB
2014-09-26 12:35:48 ----D---- C:\WINDOWS\system32\Dism
2014-09-26 12:35:47 ----SD---- C:\WINDOWS\system32\CompatTel
2014-09-26 12:34:36 ----D---- C:\WINDOWS\PolicyDefinitions
2014-09-26 12:34:31 ----D---- C:\WINDOWS\IME
2014-09-26 12:34:30 ----D---- C:\WINDOWS\Help
2014-09-26 12:34:30 ----D---- C:\WINDOWS\DigitalLocker
2014-09-26 12:34:28 ----RD---- C:\Users
2014-09-26 12:34:27 ----D---- C:\ProgramData\PRICache
2014-09-26 12:34:21 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-09-26 12:34:21 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-09-26 12:34:21 ----D---- C:\Program Files (x86)\Windows Media Player
2014-09-26 12:34:21 ----D---- C:\Program Files (x86)\Windows Mail
2014-09-26 12:34:13 ----SHD---- C:\Program Files\Windows Sidebar
2014-09-26 12:34:13 ----D---- C:\Program Files\Windows Photo Viewer
2014-09-26 12:34:13 ----D---- C:\Program Files\Windows Media Player
2014-09-26 12:34:12 ----D---- C:\Program Files\Windows Mail
2014-09-26 12:34:11 ----D---- C:\Program Files\Common Files\System
2014-09-26 12:34:11 ----D---- C:\Program Files\Common Files\microsoft shared
2014-09-26 12:32:27 ----D---- C:\WINDOWS\system32\Recovery
2014-09-26 12:32:25 ----HD---- C:\WINDOWS\system32\GroupPolicy
2014-09-26 12:22:00 ----D---- C:\WINDOWS\system32\catroot
2014-09-26 10:13:31 ----D---- C:\WINDOWS\AUInstallAgent
2014-09-24 10:29:01 ----D---- C:\Users\ASUS\AppData\Roaming\Adobe
2014-09-24 09:02:53 ----D---- C:\ProgramData\GFACE
2014-09-10 22:22:00 ----D---- C:\WINDOWS\system32\MRT
2014-09-10 22:14:09 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2014-06-18 190744]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2014-07-18 313624]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2014-08-06 123672]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2013-07-02 19768]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2014-06-18 153368]
R1 Avgfwfd;@oem99.inf,%AvgfwfdService_Desc%;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwd6a.sys [2013-09-26 57144]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2014-07-24 247576]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2014-08-20 243480]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2014-07-18 273176]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 ATP;@oem79.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-12-12 70928]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-01-28 593000]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 HIDSwitch;@oem9.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-10-08 20280]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-06-04 3441992]
R3 IntcDAud;@oem57.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-09 342528]
R3 iwdbus;@oem91.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-23 26008]
R3 kbfiltr;@oem11.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem13.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 RSBASTOR;@oem88.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-10-08 298640]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2014-08-28 14112]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2013-09-04 20496]
S3 AthBTPort;@oem8.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-03-27 89168]
S3 BTATH_A2DP;@oem7.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-03-27 346192]
S3 btath_avdt;@oem7.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-03-27 115280]
S3 BTATH_HCRP;@oem10.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-03-27 179432]
S3 BTATH_LWFLT;@oem19.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-03-27 77464]
S3 BTATH_RCP;@oem15.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-03-27 136784]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 intaud_WaveExtensible;@oem90.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-23 39320]
S3 nmwcd;@oem93.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdc;@oem97.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2011-08-17 27136]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-03-18 167424]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-08-17 9216]

[mamStavy]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2013-09-09 111416]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2014-09-05 293448]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-09-13 2466448]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2014-09-04 2538808]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [2014-09-05 1459872]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2014-09-05 3364368]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-06 116648]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-06 116648]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-28 833728]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
S4 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
S4 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
S4 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-03-27 227968]
S4 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S4 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]

-----------------EOF-----------------












notebook je zasekaný snad mi poradíte. Předem se omlouvám pokud jsem to udělal nějak špatně, jsem na tohle levej

[Márty84]

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

[mamStavy]

Tak tady přikládám log

# AdwCleaner v3.311 - Report created 10/10/2014 at 15:46:20
# Updated 30/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : ASUS - X550CA
# Running from : C:\Users\ASUS\Desktop\adwcleaner_3.311.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Trusted Publisher
Folder Deleted : C:\ProgramData\GooSAvee
Folder Deleted : C:\Program Files (x86)\GooSAvee
Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\ASUS\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\ASUS\AppData\Local\torch
Folder Deleted : C:\Users\ASUS\Documents\Optimizer Pro
Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
Folder Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
[!] Folder Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
[!] Folder Deleted : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hecjjikigmeiejlfipopijccbokobeme
File Deleted : C:\Users\ASUS\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\ASUS\AppData\Roaming\regsvr32.exe_log.txt

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\GS_BOO~1\ASSIST~2.DLL

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17278

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v37.0.2062.120

[ File : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Startup_urls] : hxxp://websearch.searchandfly.info/?pid=377&r=2014/09/21&hid=17934832339991121807&lg=EN&cc=CZ&unqvl=62
Deleted [Startup_urls] : hxxp://search.gboxapp.com/
Deleted [Extension] : hecjjikigmeiejlfipopijccbokobeme
Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof

*************************

AdwCleaner[R0].txt - [4769 octets] - [10/10/2014 15:43:14]
AdwCleaner[S0].txt - [4435 octets] - [10/10/2014 15:46:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4495 octets] ##########

[Márty84]

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[mamStavy]

Dobrý den, omlouvám se, že jsem se teď neozval, snad mi ještě pomůžete.. Zde je log.

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 24. 10. 2014
Čas skenování: 20:44:40
Protokol: log1.txt
Správce: Ano

Verze: 2.00.3.1025
Databáze malwaru: v2014.10.24.07
Databáze rootkitů: v2014.10.22.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Sebeobrany: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: ASUS

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 515663
Uplynulý čas: 2 hod, 23 min, 17 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Žádné zákerné zjištěny položek)

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 0
(Žádné zákerné zjištěny položek)

Hodnoty registru: 0
(Žádné zákerné zjištěny položek)

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 1
PUP.Optional.Booster.A, C:\Program Files (x86)\GS_Booster, , [513639df8af2bb7b1a630e0bca39c040],

Soubory: 2
PUP.Optional.OpenCandy, C:\$Recycle.Bin\S-1-5-21-231088401-1811887964-3817021566-1001\$RXLYR2E.exe, , [6b1c73a57c006bcb533a064b94712ad6],
PUP.Optional.GboxApp.A, C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Preferences, Dobré: (), Špatné: ( "startup_urls": [ "http://mysearch.avg.com?cid={D22AD0B5-4 ... 2014-03-18 20:39:25&v=17.3.1.91&pid=safeguard&sg=&sap=hp", "http://mysearch.avg.com?cid={D22AD0B5-4 ... 2014-03-18 20:39:25&v=18.0.5.292&pid=safeguard&sg=&sap=hp", "http://mysearch.avg.com?cid={D22AD0B5-4 ... 2014-03-18 20:39:25&v=18.1.0.443&pid=safeguard&sg=&sap=hp", "http://mysearch.avg.com?cid={D22AD0B5-4 ... 2014-03-18 20:39:25&v=18.1.5.512&pid=safeguard&sg=&sap=hp", "http://websearch.searchandfly.info/?pid ... Z&unqvl=62", "http://search.gboxapp.com/" ],), ,[048316021369310599765c03689d1de3]

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end)

[Márty84]

Vsechny nalezy hodte do karanteny, pak MBAM odinstalujte.


Byla to dlouha doba, tekze dejte novy log z RSIT, at vim, co se tam za tu dobu udalo.




15.11. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975