Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Častá ztráta připojení k serverům

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Častá ztráta připojení k serverům

#1 Příspěvek od marekjancar »

Dobrý den,

již několik dní se mi poměrně často stává, že když chci najet na nějakou webovou stránku, vyprší mi čas pro připojení a stránka se nenačte, po minutě se třeba všechno spraví, ale opakuje se to tak často, že už nevím, co s tím. Zkusil jsem kontaktovat poskytovatele připojení, ale zatím se neozval, tak bych rád požádal o pomoc někoho tady na fóru, zda to nemůže být nějakým virem.

Děkuji předem

přikládám RSIT log.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Avelyn at 2015-09-26 12:32:56
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 152 GB (32%) free of 477 GB
Total RAM: 8130 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:33:00, on 26.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Genius\Manticore\MTHid.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
F:\Origin\Origin.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Avelyn.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Manticore] C:\Program Files (x86)\Genius\Manticore\MThid.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files (x86)\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Linkey] "C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl.exe"
O4 - HKCU\..\Run: [Linkeyx64] "C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl64.exe"
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'Default user')
O4 - Global Startup: SetPointII.lnk = ?
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files (x86)\QIP Infium\infium.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{43BA5257-1722-48B6-B354-1C8685988E20}: NameServer = 10.157.0.1,10.157.0.128
O17 - HKLM\System\CCS\Services\Tcpip\..\{628962F8-CA53-44DA-B8A6-AEBA58A8ACBD}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\Windows\System32\appdrvrem01.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DTSAudioSvc - DTS, Inc - C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyClientService - GOG.com - C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - F:\Hry\Smite\HiPatchService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - F:\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11635 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe"
F:\Hry\Smite\HiPatchService.exe
"C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /DTSU2P
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sBWDATOOLSET
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"C:\Program Files\Logitech\SetPoint II\SetPointII.exe"
KHALMNPR.EXE /API
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Genius\Manticore\MTHid.exe"
"C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2592
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\alg.exe
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fc97d190-465f-4a04-a825-6464e2ce6af5 -SystemEventPortName:HostProcess-f6a86b3d-a03b-4d35-8e16-1fddfd3621bd -IoCancelEventPortName:HostProcess-c0dbb8f9-c6cc-401a-b614-31d594627867 -NonStateChangingEventPortName:HostProcess-fb8345c1-661a-4e05-9fcc-f394c547fe76 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6c5ca853-ff77-4638-a016-bb06307bd814 -DeviceGroupId:
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4820.0.1947132192\1263969460" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x13c2 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5582 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.2.1573303072\1880957467" --font-cache-shared-handle=1972 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.3.801791752\216975749" --font-cache-shared-handle=2116 /prefetch:673131151

"C:\Program Files (x86)\Steam\steam.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Avelyn\AppData\Local\Steam\htmlcache" -steampid=3120 -buildid=1443135972 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-direct-write
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="5140.0.217451457\2018155219" --font-cache-shared-handle=1172 /prefetch:673131151
"F:\Origin\Origin.exe"
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.63.2001495289\2032354725" --font-cache-shared-handle=5996 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.79.139856523\985757238" --font-cache-shared-handle=4408 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.89.194297316\229842941" --font-cache-shared-handle=6808 /prefetch:673131151
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="5140.1.1726046123\2047855916" --font-cache-shared-handle=1724 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.99.1263221197\344619911" --font-cache-shared-handle=6404 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.100.1826855949\518045406" --font-cache-shared-handle=1792 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="4820.101.1182965516\230584161" --font-cache-shared-handle=2544 /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe17_ Global\UsGthrCtrlFltPipeMssGthrPipe17 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\Avelyn\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070159930-2613383080-387905723-1000Core.job - C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070159930-2613383080-387905723-1000UA.job - C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2009-06-17 130576]
"Launch LCDMon"=C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [2007-04-26 790552]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-05-14 7575768]
"RtHDVBg_DTS"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-08-13 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Google Update"=C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27 144200]
"Linkey"=C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl.exe []
"Linkeyx64"=C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl64.exe []
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-04-26 43816]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2015-04-26 43816]
"iCloudDrive"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2015-04-26 43816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files (x86)\Seagate\DiscWizard\TimounterMonitor.exe [2009-11-02 906288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07 998104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiscWizardMonitor.exe]
C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe [2009-11-02 1346000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-05-13 3814736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seagate Scheduler2 Service]
C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [2009-11-02 136544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2012-07-02 296096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XboxStat]
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Avelyn^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Guild Wars 2.lnk]
F:\Hry\GUILDW~1\Gw2.exe [2015-07-11 22875128]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Manticore"=C:\Program Files (x86)\Genius\Manticore\MThid.exe [2013-10-29 293376]
"TkBellExe"=C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2012-07-02 296096]
"Launch LCDMon"=C:\Program Files (x86)\Common Files\Logitech\LCD Manager\lcdmon.exe [2007-04-26 774168]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2015-08-06 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SetPointII.lnk - C:\Program Files\Logitech\SetPoint II\SetPointII.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.ACDV"=ACDV.dll
"VIDC.XFR1"=xfcodec64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"aux2"=wdmaud.drv
"aux3"=wdmaud.drv
"aux5"=wdmaud.drv
"aux6"=wdmaud.drv
"aux7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-09-26 12:32:56 ----D---- C:\rsit
2015-09-18 14:59:36 ----RD---- C:\Program Files (x86)\Skype
2015-09-12 10:49:01 ----D---- C:\Users\Avelyn\AppData\Roaming\The First Templar
2015-09-09 18:27:35 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-09 18:27:35 ----A---- C:\Windows\system32\InkEd.dll
2015-09-09 18:27:34 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-09 18:27:34 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-09 18:27:30 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-09 18:27:30 ----A---- C:\Windows\system32\tzres.dll
2015-09-09 18:27:27 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-09 18:27:27 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-09 18:27:27 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-09 18:27:27 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-09 18:27:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-09 18:27:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-09 18:27:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\iernonce.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-09 18:27:23 ----A---- C:\Windows\system32\urlmon.dll
2015-09-09 18:27:23 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-09 18:27:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 18:27:22 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\iesetup.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-09 18:27:20 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-09 18:27:20 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\vbscript.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\iertutil.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-09 18:27:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-09 18:27:19 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-09 18:27:19 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-09 18:27:19 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-09 18:27:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\jscript.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\ieui.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\ieframe.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\wininet.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\msrating.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\jscript9.dll
2015-09-09 18:27:16 ----A---- C:\Windows\system32\mshtml.dll
2015-09-09 18:27:01 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-09 18:27:01 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-09 18:27:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-09 18:26:59 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-09 18:26:59 ----A---- C:\Windows\system32\tdh.dll
2015-09-09 18:26:59 ----A---- C:\Windows\system32\ntdll.dll
2015-09-09 18:26:59 ----A---- C:\Windows\system32\kernel32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\advapi32.dll
2015-09-09 18:26:57 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\wow64.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\winsrv.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\srcore.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\rstrui.exe
2015-09-09 18:26:57 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\kerberos.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\conhost.exe
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\wdigest.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\sspicli.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\srclient.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\smss.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\schannel.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\lsass.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-09 18:26:56 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-09 18:26:56 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\auditpol.exe
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\wow64win.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\secur32.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-09 18:26:55 ----A---- C:\Windows\system32\credssp.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 18:26:54 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-09 18:26:54 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-09 18:26:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-09 18:26:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\msobjs.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\msaudite.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\adtschema.dll
2015-09-09 18:26:47 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-09 18:26:47 ----A---- C:\Windows\system32\consent.exe
2015-09-09 18:26:47 ----A---- C:\Windows\system32\authui.dll
2015-09-09 18:26:47 ----A---- C:\Windows\system32\appinfo.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml6.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml3.dll
2015-09-09 18:26:29 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidapi.dll
2015-09-09 18:26:28 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-09 18:26:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-09 18:26:28 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\win32k.sys
2015-09-09 18:26:15 ----A---- C:\Windows\system32\lpk.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\fontsub.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\dciman32.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\atmlib.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\atmfd.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wups2.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wups.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wudriver.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wucltux.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuapp.exe
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuapi.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-09 18:26:11 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-05 12:01:47 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-09-05 11:59:24 ----A---- C:\Windows\system32\nvhdap64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvopencl.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvoglv64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvinitx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvIFR64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvFBC64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvdispgenco6435582.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvdispco6435582.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcuvid.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcuda.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcompiler.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvapi64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-05 11:59:23 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-08-30 13:24:13 ----A---- C:\Windows\Wininit.ini
2015-08-30 13:20:57 ----D---- C:\Program Files (x86)\ConMet
2015-08-30 13:20:56 ----D---- C:\ProgramData\ConMet

======List of files/folders modified in the last 1 month======

2015-09-26 12:33:00 ----D---- C:\Windows\Prefetch
2015-09-26 12:32:57 ----D---- C:\Program Files\trend micro
2015-09-26 12:32:29 ----D---- C:\Windows\temp
2015-09-26 11:36:57 ----D---- C:\Users\Avelyn\AppData\Roaming\uTorrent
2015-09-26 11:34:39 ----D---- C:\Users\Avelyn\AppData\Roaming\vlc
2015-09-26 10:37:36 ----D---- C:\Program Files (x86)\Battle.net
2015-09-26 10:22:36 ----D---- C:\ProgramData\Origin
2015-09-26 10:21:36 ----D---- C:\Program Files (x86)\Steam
2015-09-26 09:48:11 ----D---- C:\Users\Avelyn\AppData\Roaming\Skype
2015-09-26 09:38:16 ----D---- C:\Windows\system32\Tasks
2015-09-26 09:27:45 ----D---- C:\ProgramData\NVIDIA
2015-09-25 21:35:56 ----D---- C:\Windows\system32\config
2015-09-25 16:10:01 ----SHD---- C:\System Volume Information
2015-09-22 17:42:34 ----D---- C:\Windows\SysWOW64
2015-09-22 17:42:32 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-09-21 21:11:49 ----D---- C:\Windows
2015-09-21 21:11:03 ----RSD---- C:\Windows\assembly
2015-09-21 21:09:50 ----SHD---- C:\Windows\Installer
2015-09-18 14:59:41 ----D---- C:\ProgramData\Skype
2015-09-18 14:59:37 ----D---- C:\Program Files (x86)\Common Files
2015-09-18 14:59:36 ----RD---- C:\Program Files (x86)
2015-09-17 17:21:14 ----D---- C:\Program Files (x86)\Opera
2015-09-16 22:10:59 ----D---- C:\Windows\Tasks
2015-09-16 18:26:27 ----D---- C:\Windows\rescache
2015-09-13 19:35:47 ----D---- C:\Windows\System32
2015-09-13 19:35:47 ----D---- C:\Windows\inf
2015-09-13 19:35:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-12 16:29:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-12 09:59:36 ----D---- C:\Windows\system32\catroot2
2015-09-10 17:50:25 ----D---- C:\Windows\Microsoft.NET
2015-09-10 16:28:25 ----D---- C:\Windows\winsxs
2015-09-10 16:24:35 ----D---- C:\Program Files\Windows Journal
2015-09-10 16:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-10 16:24:34 ----D---- C:\Windows\system32\cs-CZ
2015-09-10 16:24:34 ----D---- C:\Windows\ehome
2015-09-10 16:24:33 ----D---- C:\Program Files\Internet Explorer
2015-09-10 16:24:32 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-10 16:24:31 ----D---- C:\Windows\system32\en-US
2015-09-10 16:24:31 ----D---- C:\Windows\PolicyDefinitions
2015-09-10 16:24:28 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-10 16:24:23 ----D---- C:\Windows\AppPatch
2015-09-10 16:24:22 ----D---- C:\Windows\system32\drivers
2015-09-10 16:24:18 ----D---- C:\Windows\system32\Boot
2015-09-09 22:41:52 ----D---- C:\ProgramData\Microsoft Help
2015-09-09 22:41:30 ----D---- C:\Windows\system32\MRT
2015-09-05 12:01:52 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-09-05 12:01:44 ----D---- C:\Windows\system32\DriverStore
2015-08-30 13:20:56 ----AD---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-07-15 235040]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-05 834544]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2011-07-15 593952]
R0 timounter;Seagate DiscWizard Image Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2011-07-15 711712]
R1 appdrv01;Application Driver (01); C:\Windows\System32\Drivers\appdrv01.sys [2012-05-07 3852976]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-04-10 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-04-10 43680]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R2 tifsfilter;Seagate DiscWizard FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2011-07-15 81952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-05-14 3962840]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 55312]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 57872]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-08-25 204648]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-26 805088]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
S2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys []
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
S3 athrusb;TP-LINK Wireless LAN USB device driver; C:\Windows\system32\DRIVERS\athrxusb.sys [2007-08-17 1061888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver; C:\Windows\system32\DRIVERS\evolve.sys [2014-11-04 21656]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x64.sys [2008-02-03 57344]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\Windows\system32\DRIVERS\s115bus.sys [2007-04-23 108296]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 19720]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s115mdm.sys [2007-04-23 144648]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 126216]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s115obex.sys [2007-04-23 123656]
S3 ScreamBAudioSvc;ScreamBee Audio; C:\Windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2012-05-22 117080]
S3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
S3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 77128]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DTSAudioSvc;DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [2013-10-07 240576]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; F:\Hry\Smite\HiPatchService.exe [2014-02-28 9216]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 MSSQL$BWDATOOLSET;SQL Server (BWDATOOLSET); C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-25 937776]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 153440]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-25 410744]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-08-13 644880]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\Windows\System32\appdrvrem01.exe [2012-05-07 551896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 GalaxyClientService;GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [2015-08-20 1720888]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-08-28 6920248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; F:\Origin\OriginClientService.exe [2015-09-02 2057736]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-09-15 838848]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-09 1255736]
S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-05-13 2228048]
S4 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-04-15 377616]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SgtSch2Svc;Seagate Scheduler2 Service; C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe [2009-11-02 606048]
S4 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-03-20 746392]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#2 Příspěvek od Rudy »

Zdravím!
Zkusíme vyčistit. Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Re: Častá ztráta připojení k serverům

#3 Příspěvek od marekjancar »

Zde je log:

# AdwCleaner v5.008 - Logfile created 26/09/2015 at 13:18:48
# Updated 18/09/2015 by Xplode
# Database : 2015-09-23.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Avelyn - SUN
# Running from : C:\Users\Avelyn\Desktop\adwcleaner_5.008.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3}
[-] Folder Deleted : C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[-] Folder Deleted : C:\Users\Avelyn\AppData\Roaming\Mozilla\Firefox\Profiles\10l4v148.default\ICQToolbarData

***** [ Files ] *****

[-] File Deleted : C:\Users\Avelyn\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage
[-] File Deleted : C:\Users\Avelyn\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage-journal
[-] File Deleted : C:\Users\Avelyn\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\Avelyn\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\conduitEngine
[-] Key Deleted : HKCU\Software\APN PIP
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[!] Key Not Deleted : [x64] HKCU\Software\APN PIP
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\conduitEngine
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\conduitEngine

***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2105 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Re: Častá ztráta připojení k serverům

#5 Příspěvek od marekjancar »

Tady je:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Avelyn at 2015-09-26 17:57:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 152 GB (32%) free of 477 GB
Total RAM: 8130 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:57:43, on 26.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Genius\Manticore\MTHid.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\QIP Infium\infium.exe
C:\Program Files\trend micro\Avelyn.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Manticore] C:\Program Files (x86)\Genius\Manticore\MThid.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files (x86)\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Linkey] "C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl.exe"
O4 - HKCU\..\Run: [Linkeyx64] "C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl64.exe"
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'Default user')
O4 - Global Startup: SetPointII.lnk = ?
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files (x86)\QIP Infium\infium.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{43BA5257-1722-48B6-B354-1C8685988E20}: NameServer = 10.157.0.1,10.157.0.128
O17 - HKLM\System\CCS\Services\Tcpip\..\{628962F8-CA53-44DA-B8A6-AEBA58A8ACBD}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\Windows\System32\appdrvrem01.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DTSAudioSvc - DTS, Inc - C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyClientService - GOG.com - C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - F:\Hry\Smite\HiPatchService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - F:\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11334 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe"
F:\Hry\Smite\HiPatchService.exe
"C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sBWDATOOLSET
"C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /DTSU2P
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"C:\Program Files\Logitech\SetPoint II\SetPointII.exe"
KHALMNPR.EXE /API
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"C:\Program Files (x86)\Genius\Manticore\MTHid.exe"
"C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3812
C:\Windows\System32\alg.exe
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-90d0b0b3-2e02-45ed-bb3c-6e4e952e0863 -SystemEventPortName:HostProcess-7e8c9e20-2c3f-4ea7-a005-d309e3c30091 -IoCancelEventPortName:HostProcess-8646448c-44ac-4718-ada1-10ce643b7de8 -NonStateChangingEventPortName:HostProcess-ad410f7f-11bf-4263-8cdc-d79fbc4c3218 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4ece92b7-f9b9-473c-8832-cf1d9744c1bd -DeviceGroupId:
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --flag-switches-begin --flag-switches-end
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2704.0.756426700\1886052157" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x13c2 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5582 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="2704.2.1970718712\1337994798" --font-cache-shared-handle=2140 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="2704.3.260701080\243579636" --font-cache-shared-handle=2152 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="2704.10.128214508\2025626330" --font-cache-shared-handle=3580 /prefetch:673131151
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Steam\steam.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Avelyn\AppData\Local\Steam\htmlcache" -steampid=6064 -buildid=1443135972 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-direct-write
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --enable-pinch --lang=en-US --lang=en-US --product-version="Valve Steam Client" --disable-spell-checking --enable-system-flash --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="1412.0.481663862\346143402" --font-cache-shared-handle=1140 /prefetch:673131151
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="2704.48.1508442266\711378377" --font-cache-shared-handle=5912 /prefetch:673131151
"C:\Program Files (x86)\QIP Infium\infium.exe"

"C:\Users\Avelyn\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe63_ Global\UsGthrCtrlFltPipeMssGthrPipe63 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070159930-2613383080-387905723-1000Core.job - C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070159930-2613383080-387905723-1000UA.job - C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2009-06-17 130576]
"Launch LCDMon"=C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [2007-04-26 790552]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-05-14 7575768]
"RtHDVBg_DTS"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-08-13 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Google Update"=C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27 144200]
"Linkey"=C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl.exe []
"Linkeyx64"=C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl64.exe []
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-04-26 43816]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2015-04-26 43816]
"iCloudDrive"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2015-04-26 43816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files (x86)\Seagate\DiscWizard\TimounterMonitor.exe [2009-11-02 906288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07 998104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiscWizardMonitor.exe]
C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe [2009-11-02 1346000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-05-13 3814736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seagate Scheduler2 Service]
C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [2009-11-02 136544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2012-07-02 296096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XboxStat]
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Avelyn^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Guild Wars 2.lnk]
F:\Hry\GUILDW~1\Gw2.exe [2015-07-11 22875128]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Manticore"=C:\Program Files (x86)\Genius\Manticore\MThid.exe [2013-10-29 293376]
"TkBellExe"=C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2012-07-02 296096]
"Launch LCDMon"=C:\Program Files (x86)\Common Files\Logitech\LCD Manager\lcdmon.exe [2007-04-26 774168]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2015-08-06 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SetPointII.lnk - C:\Program Files\Logitech\SetPoint II\SetPointII.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.ACDV"=ACDV.dll
"VIDC.XFR1"=xfcodec64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"aux2"=wdmaud.drv
"aux3"=wdmaud.drv
"aux5"=wdmaud.drv
"aux6"=wdmaud.drv
"aux7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-09-26 12:32:56 ----D---- C:\rsit
2015-09-18 14:59:36 ----RD---- C:\Program Files (x86)\Skype
2015-09-12 10:49:01 ----D---- C:\Users\Avelyn\AppData\Roaming\The First Templar
2015-09-09 18:27:35 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-09 18:27:35 ----A---- C:\Windows\system32\InkEd.dll
2015-09-09 18:27:34 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-09 18:27:34 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-09 18:27:30 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-09 18:27:30 ----A---- C:\Windows\system32\tzres.dll
2015-09-09 18:27:27 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-09 18:27:27 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-09 18:27:27 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-09 18:27:27 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-09 18:27:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-09 18:27:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-09 18:27:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\iernonce.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-09 18:27:23 ----A---- C:\Windows\system32\urlmon.dll
2015-09-09 18:27:23 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-09 18:27:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 18:27:22 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\iesetup.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-09 18:27:20 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-09 18:27:20 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\vbscript.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\iertutil.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-09 18:27:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-09 18:27:19 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-09 18:27:19 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-09 18:27:19 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-09 18:27:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\jscript.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\ieui.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\ieframe.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\wininet.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\msrating.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\jscript9.dll
2015-09-09 18:27:16 ----A---- C:\Windows\system32\mshtml.dll
2015-09-09 18:27:01 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-09 18:27:01 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-09 18:27:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-09 18:26:59 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-09 18:26:59 ----A---- C:\Windows\system32\tdh.dll
2015-09-09 18:26:59 ----A---- C:\Windows\system32\ntdll.dll
2015-09-09 18:26:59 ----A---- C:\Windows\system32\kernel32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\advapi32.dll
2015-09-09 18:26:57 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\wow64.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\winsrv.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\srcore.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\rstrui.exe
2015-09-09 18:26:57 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\kerberos.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\conhost.exe
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\wdigest.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\sspicli.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\srclient.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\smss.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\schannel.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\lsass.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-09 18:26:56 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-09 18:26:56 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\auditpol.exe
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\wow64win.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\secur32.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-09 18:26:55 ----A---- C:\Windows\system32\credssp.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 18:26:54 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-09 18:26:54 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-09 18:26:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-09 18:26:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\msobjs.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\msaudite.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\adtschema.dll
2015-09-09 18:26:47 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-09 18:26:47 ----A---- C:\Windows\system32\consent.exe
2015-09-09 18:26:47 ----A---- C:\Windows\system32\authui.dll
2015-09-09 18:26:47 ----A---- C:\Windows\system32\appinfo.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml6.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml3.dll
2015-09-09 18:26:29 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidapi.dll
2015-09-09 18:26:28 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-09 18:26:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-09 18:26:28 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\win32k.sys
2015-09-09 18:26:15 ----A---- C:\Windows\system32\lpk.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\fontsub.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\dciman32.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\atmlib.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\atmfd.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wups2.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wups.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wudriver.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wucltux.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuapp.exe
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuapi.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-09 18:26:11 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-05 12:01:47 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-09-05 11:59:24 ----A---- C:\Windows\system32\nvhdap64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvopencl.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvoglv64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvinitx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvIFR64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvFBC64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvdispgenco6435582.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvdispco6435582.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcuvid.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcuda.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcompiler.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvapi64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-05 11:59:23 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-08-30 13:24:13 ----A---- C:\Windows\Wininit.ini
2015-08-30 13:20:57 ----D---- C:\Program Files (x86)\ConMet
2015-08-30 13:20:56 ----D---- C:\ProgramData\ConMet

======List of files/folders modified in the last 1 month======

2015-09-26 17:57:40 ----D---- C:\Program Files\trend micro
2015-09-26 17:24:35 ----D---- C:\Windows\temp
2015-09-26 16:35:46 ----D---- C:\Program Files (x86)\Steam
2015-09-26 16:30:18 ----D---- C:\Windows\Prefetch
2015-09-26 16:18:14 ----D---- C:\Windows\system32\Tasks
2015-09-26 13:50:03 ----D---- C:\Windows\system32\config
2015-09-26 13:20:00 ----D---- C:\ProgramData\NVIDIA
2015-09-26 13:18:48 ----D---- C:\AdwCleaner
2015-09-26 13:18:48 ----AD---- C:\ProgramData
2015-09-26 13:17:14 ----D---- C:\ProgramData\Origin
2015-09-26 11:36:57 ----D---- C:\Users\Avelyn\AppData\Roaming\uTorrent
2015-09-26 11:34:39 ----D---- C:\Users\Avelyn\AppData\Roaming\vlc
2015-09-26 10:37:36 ----D---- C:\Program Files (x86)\Battle.net
2015-09-26 09:48:11 ----D---- C:\Users\Avelyn\AppData\Roaming\Skype
2015-09-25 16:10:01 ----SHD---- C:\System Volume Information
2015-09-22 17:42:34 ----D---- C:\Windows\SysWOW64
2015-09-22 17:42:32 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-09-21 21:11:49 ----D---- C:\Windows
2015-09-21 21:11:03 ----RSD---- C:\Windows\assembly
2015-09-21 21:09:50 ----SHD---- C:\Windows\Installer
2015-09-18 14:59:41 ----D---- C:\ProgramData\Skype
2015-09-18 14:59:37 ----D---- C:\Program Files (x86)\Common Files
2015-09-18 14:59:36 ----RD---- C:\Program Files (x86)
2015-09-17 17:21:14 ----D---- C:\Program Files (x86)\Opera
2015-09-16 22:10:59 ----D---- C:\Windows\Tasks
2015-09-16 18:26:27 ----D---- C:\Windows\rescache
2015-09-13 19:35:47 ----D---- C:\Windows\System32
2015-09-13 19:35:47 ----D---- C:\Windows\inf
2015-09-13 19:35:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-12 16:29:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-12 09:59:36 ----D---- C:\Windows\system32\catroot2
2015-09-10 17:50:25 ----D---- C:\Windows\Microsoft.NET
2015-09-10 16:28:25 ----D---- C:\Windows\winsxs
2015-09-10 16:24:35 ----D---- C:\Program Files\Windows Journal
2015-09-10 16:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-10 16:24:34 ----D---- C:\Windows\system32\cs-CZ
2015-09-10 16:24:34 ----D---- C:\Windows\ehome
2015-09-10 16:24:33 ----D---- C:\Program Files\Internet Explorer
2015-09-10 16:24:32 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-10 16:24:31 ----D---- C:\Windows\system32\en-US
2015-09-10 16:24:31 ----D---- C:\Windows\PolicyDefinitions
2015-09-10 16:24:28 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-10 16:24:23 ----D---- C:\Windows\AppPatch
2015-09-10 16:24:22 ----D---- C:\Windows\system32\drivers
2015-09-10 16:24:18 ----D---- C:\Windows\system32\Boot
2015-09-09 22:41:52 ----D---- C:\ProgramData\Microsoft Help
2015-09-09 22:41:30 ----D---- C:\Windows\system32\MRT
2015-09-05 12:01:52 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-09-05 12:01:44 ----D---- C:\Windows\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-07-15 235040]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-05 834544]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2011-07-15 593952]
R0 timounter;Seagate DiscWizard Image Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2011-07-15 711712]
R1 appdrv01;Application Driver (01); C:\Windows\System32\Drivers\appdrv01.sys [2012-05-07 3852976]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-04-10 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-04-10 43680]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R2 tifsfilter;Seagate DiscWizard FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2011-07-15 81952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-05-14 3962840]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 55312]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 57872]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-08-25 204648]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-26 805088]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
S2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys []
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
S3 athrusb;TP-LINK Wireless LAN USB device driver; C:\Windows\system32\DRIVERS\athrxusb.sys [2007-08-17 1061888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver; C:\Windows\system32\DRIVERS\evolve.sys [2014-11-04 21656]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x64.sys [2008-02-03 57344]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\Windows\system32\DRIVERS\s115bus.sys [2007-04-23 108296]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 19720]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s115mdm.sys [2007-04-23 144648]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 126216]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s115obex.sys [2007-04-23 123656]
S3 ScreamBAudioSvc;ScreamBee Audio; C:\Windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2012-05-22 117080]
S3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
S3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 77128]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DTSAudioSvc;DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [2013-10-07 240576]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; F:\Hry\Smite\HiPatchService.exe [2014-02-28 9216]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 MSSQL$BWDATOOLSET;SQL Server (BWDATOOLSET); C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-25 937776]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 153440]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-25 410744]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-08-13 644880]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\Windows\System32\appdrvrem01.exe [2012-05-07 551896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 GalaxyClientService;GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [2015-08-20 1720888]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-08-28 6920248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; F:\Origin\OriginClientService.exe [2015-09-02 2057736]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-09-15 838848]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-09 1255736]
S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-05-13 2228048]
S4 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-04-15 377616]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SgtSch2Svc;Seagate Scheduler2 Service; C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe [2009-11-02 606048]
S4 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-03-20 746392]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070159930-2613383080-387905723-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070159930-2613383080-387905723-1000UA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Re: Častá ztráta připojení k serverům

#7 Příspěvek od marekjancar »

Zde je nový RSIT log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Avelyn at 2015-09-26 18:44:32
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 153 GB (32%) free of 477 GB
Total RAM: 8130 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:44:38, on 26.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Genius\Manticore\MTHid.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Avelyn.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Manticore] C:\Program Files (x86)\Genius\Manticore\MThid.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files (x86)\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Linkey] "C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl.exe"
O4 - HKCU\..\Run: [Linkeyx64] "C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl64.exe"
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'Default user')
O4 - Global Startup: SetPointII.lnk = ?
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files (x86)\QIP Infium\infium.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{43BA5257-1722-48B6-B354-1C8685988E20}: NameServer = 10.157.0.1,10.157.0.128
O17 - HKLM\System\CCS\Services\Tcpip\..\{628962F8-CA53-44DA-B8A6-AEBA58A8ACBD}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\Windows\System32\appdrvrem01.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DTSAudioSvc - DTS, Inc - C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GalaxyClientService - GOG.com - C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - F:\Hry\Smite\HiPatchService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - F:\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11272 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {6B15F8A6-8DB8-4AE9-AC21-B763AFDF05BF}
taskeng.exe {309A0F66-B50A-4AA2-8A7F-4978D8210C04}
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe"
F:\Hry\Smite\HiPatchService.exe
"C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sBWDATOOLSET
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2328
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\System32\alg.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2c184afd-533a-48d3-8621-7e8e588235fb -SystemEventPortName:HostProcess-8b73c103-4ca0-43bd-a42a-05c0c9a75f60 -IoCancelEventPortName:HostProcess-8bd87462-23c9-425b-a39f-480cb106d432 -NonStateChangingEventPortName:HostProcess-3179afd3-16fb-42b1-97bc-8a4b493197b6 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3d5684dc-4d8e-4b68-ab39-08b190aa0144 -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /DTSU2P
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe"
"C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"C:\Program Files\Logitech\SetPoint II\SetPointII.exe"
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
KHALMNPR.EXE /API
"C:\Program Files (x86)\Genius\Manticore\MTHid.exe"
"C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6100.0.1440018859\1017970335" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x13c2 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5582 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6100.1.743051711\1425236007" --font-cache-shared-handle=1800 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6100.2.2024888783\1087231255" --font-cache-shared-handle=2016 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6100.3.276404902\282066552" --font-cache-shared-handle=2024 /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6100.4.1785134794\283807228" --font-cache-shared-handle=4120 /prefetch:673131151
"C:\Users\Avelyn\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StableHQPFrequencyBugFix_PrePeriod_3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="6100.5.307079499\1861436496" --font-cache-shared-handle=4608 /prefetch:673131151
"C:\Users\Avelyn\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2009-06-17 130576]
"Launch LCDMon"=C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [2007-04-26 790552]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-05-14 7575768]
"RtHDVBg_DTS"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-08-13 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Google Update"=C:\Users\Avelyn\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27 144200]
"Linkey"=C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl.exe []
"Linkeyx64"=C:\Users\Avelyn\AppData\Local\Linkey\IEExtension\ietlbl64.exe []
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-04-26 43816]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2015-04-26 43816]
"iCloudDrive"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2015-04-26 43816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files (x86)\Seagate\DiscWizard\TimounterMonitor.exe [2009-11-02 906288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07 998104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiscWizardMonitor.exe]
C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe [2009-11-02 1346000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-05-13 3814736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seagate Scheduler2 Service]
C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [2009-11-02 136544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2012-07-02 296096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XboxStat]
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Avelyn^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Guild Wars 2.lnk]
F:\Hry\GUILDW~1\Gw2.exe [2015-07-11 22875128]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"Manticore"=C:\Program Files (x86)\Genius\Manticore\MThid.exe [2013-10-29 293376]
"TkBellExe"=C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2012-07-02 296096]
"Launch LCDMon"=C:\Program Files (x86)\Common Files\Logitech\LCD Manager\lcdmon.exe [2007-04-26 774168]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2015-08-06 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SetPointII.lnk - C:\Program Files\Logitech\SetPoint II\SetPointII.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.ACDV"=ACDV.dll
"VIDC.XFR1"=xfcodec64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"aux2"=wdmaud.drv
"aux3"=wdmaud.drv
"aux5"=wdmaud.drv
"aux6"=wdmaud.drv
"aux7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-09-26 18:39:43 ----D---- C:\_OTM
2015-09-26 12:32:56 ----D---- C:\rsit
2015-09-18 14:59:36 ----RD---- C:\Program Files (x86)\Skype
2015-09-12 10:49:01 ----D---- C:\Users\Avelyn\AppData\Roaming\The First Templar
2015-09-09 18:27:35 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-09 18:27:35 ----A---- C:\Windows\system32\InkEd.dll
2015-09-09 18:27:34 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-09 18:27:34 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-09 18:27:30 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-09 18:27:30 ----A---- C:\Windows\system32\tzres.dll
2015-09-09 18:27:27 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-09 18:27:27 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-09 18:27:27 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-09 18:27:27 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-09 18:27:26 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-09 18:27:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-09 18:27:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-09 18:27:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-09 18:27:24 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\iernonce.dll
2015-09-09 18:27:24 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-09 18:27:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-09 18:27:23 ----A---- C:\Windows\system32\urlmon.dll
2015-09-09 18:27:23 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-09 18:27:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-09 18:27:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 18:27:22 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-09 18:27:21 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\iesetup.dll
2015-09-09 18:27:21 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-09 18:27:20 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-09 18:27:20 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\vbscript.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\iertutil.dll
2015-09-09 18:27:20 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-09 18:27:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-09 18:27:19 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-09 18:27:19 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-09 18:27:19 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-09 18:27:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\jscript.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\ieui.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\ieframe.dll
2015-09-09 18:27:18 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\wininet.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\msrating.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-09 18:27:17 ----A---- C:\Windows\system32\jscript9.dll
2015-09-09 18:27:16 ----A---- C:\Windows\system32\mshtml.dll
2015-09-09 18:27:01 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-09 18:27:01 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-09 18:27:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-09 18:26:59 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-09 18:26:59 ----A---- C:\Windows\system32\tdh.dll
2015-09-09 18:26:59 ----A---- C:\Windows\system32\ntdll.dll
2015-09-09 18:26:59 ----A---- C:\Windows\system32\kernel32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-09 18:26:58 ----A---- C:\Windows\system32\advapi32.dll
2015-09-09 18:26:57 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\wow64.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\winsrv.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\srcore.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\rstrui.exe
2015-09-09 18:26:57 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\kerberos.dll
2015-09-09 18:26:57 ----A---- C:\Windows\system32\conhost.exe
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-09 18:26:56 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\wdigest.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\sspicli.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\srclient.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\smss.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\schannel.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\lsass.exe
2015-09-09 18:26:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-09 18:26:56 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-09 18:26:56 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-09 18:26:56 ----A---- C:\Windows\system32\auditpol.exe
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-09 18:26:55 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\wow64win.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\secur32.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-09 18:26:55 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-09 18:26:55 ----A---- C:\Windows\system32\credssp.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 18:26:54 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 18:26:54 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-09 18:26:54 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-09 18:26:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-09 18:26:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 18:26:53 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 18:26:52 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\msobjs.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\msaudite.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-09 18:26:52 ----A---- C:\Windows\system32\adtschema.dll
2015-09-09 18:26:47 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-09 18:26:47 ----A---- C:\Windows\system32\consent.exe
2015-09-09 18:26:47 ----A---- C:\Windows\system32\authui.dll
2015-09-09 18:26:47 ----A---- C:\Windows\system32\appinfo.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml6.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-09 18:26:44 ----A---- C:\Windows\system32\msxml3.dll
2015-09-09 18:26:29 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 18:26:29 ----A---- C:\Windows\system32\appidapi.dll
2015-09-09 18:26:28 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-09 18:26:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-09 18:26:28 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-09 18:26:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\win32k.sys
2015-09-09 18:26:15 ----A---- C:\Windows\system32\lpk.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\fontsub.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\dciman32.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\atmlib.dll
2015-09-09 18:26:15 ----A---- C:\Windows\system32\atmfd.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-09 18:26:12 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wups2.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wups.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wudriver.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wucltux.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuapp.exe
2015-09-09 18:26:12 ----A---- C:\Windows\system32\wuapi.dll
2015-09-09 18:26:12 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-09 18:26:11 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-05 12:01:47 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-09-05 11:59:24 ----A---- C:\Windows\system32\nvhdap64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-09-05 11:59:23 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvopencl.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvoglv64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvinitx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvIFR64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\NvFBC64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvdispgenco6435582.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvdispco6435582.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcuvid.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcuda.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvcompiler.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\nvapi64.dll
2015-09-05 11:59:23 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-09-05 11:59:23 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-08-30 13:24:13 ----A---- C:\Windows\Wininit.ini
2015-08-30 13:20:57 ----D---- C:\Program Files (x86)\ConMet
2015-08-30 13:20:56 ----D---- C:\ProgramData\ConMet

======List of files/folders modified in the last 1 month======

2015-09-26 18:44:35 ----D---- C:\Program Files\trend micro
2015-09-26 18:44:18 ----D---- C:\Windows\temp
2015-09-26 18:43:11 ----D---- C:\Windows\Prefetch
2015-09-26 18:41:47 ----D---- C:\ProgramData\NVIDIA
2015-09-26 18:40:47 ----D---- C:\Windows\system32\config
2015-09-26 18:40:32 ----D---- C:\Windows
2015-09-26 18:39:43 ----D---- C:\Windows\Tasks
2015-09-26 16:35:46 ----D---- C:\Program Files (x86)\Steam
2015-09-26 16:18:14 ----D---- C:\Windows\system32\Tasks
2015-09-26 13:18:48 ----D---- C:\AdwCleaner
2015-09-26 13:18:48 ----AD---- C:\ProgramData
2015-09-26 13:17:14 ----D---- C:\ProgramData\Origin
2015-09-26 11:36:57 ----D---- C:\Users\Avelyn\AppData\Roaming\uTorrent
2015-09-26 11:34:39 ----D---- C:\Users\Avelyn\AppData\Roaming\vlc
2015-09-26 10:37:36 ----D---- C:\Program Files (x86)\Battle.net
2015-09-26 09:48:11 ----D---- C:\Users\Avelyn\AppData\Roaming\Skype
2015-09-25 16:10:01 ----SHD---- C:\System Volume Information
2015-09-22 17:42:34 ----D---- C:\Windows\SysWOW64
2015-09-22 17:42:32 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-09-21 21:11:03 ----RSD---- C:\Windows\assembly
2015-09-21 21:09:50 ----SHD---- C:\Windows\Installer
2015-09-18 14:59:41 ----D---- C:\ProgramData\Skype
2015-09-18 14:59:37 ----D---- C:\Program Files (x86)\Common Files
2015-09-18 14:59:36 ----RD---- C:\Program Files (x86)
2015-09-17 17:21:14 ----D---- C:\Program Files (x86)\Opera
2015-09-16 18:26:27 ----D---- C:\Windows\rescache
2015-09-13 19:35:47 ----D---- C:\Windows\System32
2015-09-13 19:35:47 ----D---- C:\Windows\inf
2015-09-13 19:35:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-12 16:29:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-12 09:59:36 ----D---- C:\Windows\system32\catroot2
2015-09-10 17:50:25 ----D---- C:\Windows\Microsoft.NET
2015-09-10 16:28:25 ----D---- C:\Windows\winsxs
2015-09-10 16:24:35 ----D---- C:\Program Files\Windows Journal
2015-09-10 16:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-09-10 16:24:34 ----D---- C:\Windows\system32\cs-CZ
2015-09-10 16:24:34 ----D---- C:\Windows\ehome
2015-09-10 16:24:33 ----D---- C:\Program Files\Internet Explorer
2015-09-10 16:24:32 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-10 16:24:31 ----D---- C:\Windows\system32\en-US
2015-09-10 16:24:31 ----D---- C:\Windows\PolicyDefinitions
2015-09-10 16:24:28 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-10 16:24:23 ----D---- C:\Windows\AppPatch
2015-09-10 16:24:22 ----D---- C:\Windows\system32\drivers
2015-09-10 16:24:18 ----D---- C:\Windows\system32\Boot
2015-09-09 22:41:52 ----D---- C:\ProgramData\Microsoft Help
2015-09-09 22:41:30 ----D---- C:\Windows\system32\MRT
2015-09-05 12:01:52 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-09-05 12:01:44 ----D---- C:\Windows\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-07-15 235040]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-05 834544]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2011-07-15 593952]
R0 timounter;Seagate DiscWizard Image Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2011-07-15 711712]
R1 appdrv01;Application Driver (01); C:\Windows\System32\Drivers\appdrv01.sys [2012-05-07 3852976]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-04-10 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-04-10 43680]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R2 tifsfilter;Seagate DiscWizard FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2011-07-15 81952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-05-14 3962840]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 55312]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 57872]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-08-25 204648]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-26 805088]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
S2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys []
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
S3 athrusb;TP-LINK Wireless LAN USB device driver; C:\Windows\system32\DRIVERS\athrxusb.sys [2007-08-17 1061888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver; C:\Windows\system32\DRIVERS\evolve.sys [2014-11-04 21656]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x64.sys [2008-02-03 57344]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\Windows\system32\DRIVERS\s115bus.sys [2007-04-23 108296]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 19720]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s115mdm.sys [2007-04-23 144648]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 126216]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s115obex.sys [2007-04-23 123656]
S3 ScreamBAudioSvc;ScreamBee Audio; C:\Windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2012-05-22 117080]
S3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
S3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 77128]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DTSAudioSvc;DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [2013-10-07 240576]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; F:\Hry\Smite\HiPatchService.exe [2014-02-28 9216]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 MSSQL$BWDATOOLSET;SQL Server (BWDATOOLSET); C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-25 937776]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 153440]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-25 410744]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-08-13 644880]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\Windows\System32\appdrvrem01.exe [2012-05-07 551896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 GalaxyClientService;GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [2015-08-20 1720888]
S3 GalaxyCommunication;GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2015-08-28 6920248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; F:\Origin\OriginClientService.exe [2015-09-02 2057736]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-09-15 838848]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-09 1255736]
S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-05-13 2228048]
S4 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-04-15 377616]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SgtSch2Svc;Seagate Scheduler2 Service; C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe [2009-11-02 606048]
S4 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-03-20 746392]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Re: Častá ztráta připojení k serverům

#9 Příspěvek od marekjancar »

Bohužel je to pořád stejné :(

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#10 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte. Problém ale také může být v samotném připojení.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Re: Častá ztráta připojení k serverům

#11 Příspěvek od marekjancar »

Provedeno, zdá se, že to nic nenašlo :(

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 26.9.2015
Čas skenování: 20:02
Protokol: log.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.26.04
Databáze rootkitů: v2015.09.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Avelyn

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 424015
Uplynulý čas: 31 min, 34 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#12 Příspěvek od Rudy »

Po virové stránce je PC OK. Zkuste restartovat modem, příp. další síť. prvek v datové cestě.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

marekjancar
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 11 srp 2013 09:56

Re: Častá ztráta připojení k serverům

#13 Příspěvek od marekjancar »

Zkusím ještě kontaktovat toho poskytovatele, je to wi-fi připojení a te'd když už jsem si jistý, že viry to není, tak mu to napíšu. Děkuji za pomoc

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Častá ztráta připojení k serverům

#14 Příspěvek od Rudy »

Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno