VIRY.CZ

Dobrý den,
již 14 dní mi zamrzá počítač - zkusil jsem - výměna obou RAM, odpojení všech HDD krom systémového, kontrola ram pomocím MemTest, kontrola systémových souboru - sfc. Mohl by jste prosím někdou kouknout jestli mi to nedělá nějaký SW? Ještě než si koupím nový zdroj a zkusím vyměnit CPU.

Děkuji za pomoc

Logfile of random's system information tool 1.10 (written by random/random)
Run by kores at 2016-02-22 06:50:34
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 25 GB (7%) free of 354 GB
Total RAM: 8174 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:50:39, on 22.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\GD\CloneCD\CloneCDTray.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
C:\Program Files (x86)\SafeNet\BSecClient\AXMonitor.exe
C:\Program Files (x86)\SafeNet\BSecClient\dkAutoReg.exe
C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
C:\Users\kores\AppData\Roaming\Spotify\SpotifyCrashService.exe
C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Process Explorer\ProcessExplorer\procexp.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files\trend micro\kores.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://servertrest/mailessentials1/pages/Default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O2 - BHO: WinToFlash Suggestor - {FC36B0BD-27F0-4cdd-8AB1-50651EFC3EFD} - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Cobian Backup 11 interface] "C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe" -service
O4 - HKLM\..\Run: [CloneCDTray] "C:\GD\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [DkStartup] C:\Program Files (x86)\SafeNet\BSecClient\dkstartup.exe
O4 - HKLM\..\Run: [AxMonitor] C:\Program Files (x86)\SafeNet\BSecClient\axmonitor.exe
O4 - HKLM\..\Run: [DkAutoReg] C:\Program Files (x86)\SafeNet\BSecClient\DkAutoReg.exe
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DisplayFusion] "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_6228F8095EA9E7D325985EBEE7CDD8AE] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [SandboxieControl] "C:\GD\Sandboxie\SbieCtrl.exe"
O4 - HKCU\..\Run: [iFunBox Fast App Install Handler] C:\GD\i-Funbox DevTeam\iFunBox_x64.exe /tray
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [Prime95] C:\Users\kores\Desktop\Prime\prime95.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: MEGAsync.lnk = C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
O4 - Startup: SBS_LOGIN_SCRIPT.bat – zástupce.lnk = C:\Users\kores\Desktop\SBS_LOGIN_SCRIPT.bat
O4 - Startup: ts3server_win64.exe – zástupce.lnk = C:\GD)\teamspeak3-server_win64\ts3server_win64.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nová poznámka - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Vystřihnout obrázek - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Vystřihnout tuto stránku - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Vystřihnout výběr - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Vystřihnout záložku - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WinToFlash Suggestor - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.dll
O9 - Extra 'Tools' menuitem: WinToFlash Suggestor options - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com//activex/ractrl.cab?lmi=928
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = trest.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{94B211F8-6A8E-4636-A991-D46EF28B9441}: NameServer = 10.0.2.11,10.0.2.12
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = trest.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = trest.local
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\Jaksta\AC\x86\jaudcap.dll
O20 - Winlogon Notify: DkWLNP - DkWLNP.dll (file missing)
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AuditPro Scan - truconneXion, a. s. - C:\Program Files (x86)\AuditPro Scan\Scan.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Cobian Backup 11 Stínová kopie - Requester (cbVSCService11) - CobianSoft, Luis Cobian - C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
O23 - Service: Cobian Backup 11 Gravity (CobianBackup11) - Luis Cobian, CobianSoft - C:\Program Files (x86)\Cobian Backup 11\cbService.exe
O23 - Service: DisplayFusionService - Binary Fortress Software - C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
O23 - Service: SafeNet Log Service (DkLogger) - SafeNet, Inc. - C:\Windows\SysWOW64\dklog.exe
O23 - Service: SafeNet Token Service (DkTknSrv) - SafeNet, Inc. - C:\Windows\SysWOW64\dkcktkn.exe
O23 - Service: SafeNet Virtual Channel Monitor (DkVcm) - SafeNet, Inc. - C:\Windows\SysWOW64\dkvcm.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EHttpSrv) - ESET - C:\Program Files\ESET Endpoint Security\ehttpsrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET Endpoint Security\x86\ekrn.exe
O23 - Service: ESET Remote Administrator Agent (EraAgentSvc) - ESET - C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe
O23 - Service: ESET RA HTTP Server (ERA_HTTP_SERVER) - ESET - C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\EHttpSrv.exe
O23 - Service: ESET Remote Administrator Server (ERA_SERVER) - ESET - C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe
O23 - Service: ESET SHA Service (eshasrv) - ESET - C:\Program Files\ESET Endpoint Security\eshasrv.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: GINIS - Instalační služba (GSSINS01.exe) - GORDIC spol. s r. o. - C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: postgresql-x64-9.2 - PostgreSQL Server 9.2 (postgresql-x64-9.2) - PostgreSQL Global Development Group - C:/GD/PostgreSQL/9.2/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\GD\Sandboxie\SbieSvc.exe
O23 - Service: Run software as Windows service (SKLService) - Unknown owner - C:\Windows\SysWOW64\KAward\aklservice.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\GD\VNC4\WinVNC4.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 19447 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\servicing\TrustedInstaller.exe
"C:\GD\Sandboxie\SbieSvc.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe"
"C:\Program Files (x86)\Cobian Backup 11\cbService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe"
C:\Windows\SysWOW64\dklog.exe
C:\Windows\SysWOW64\dkvcm.exe
"C:\Program Files\ESET Endpoint Security\x86\ekrn.exe"
"C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe"
"C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe"
"C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE"
MSOIDSvcm.exe 2332
"C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe" -sSFN
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:/GD/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N "postgresql-x64-9.2" -D "C:/GD/PostgreSQL/9.2/data" -w
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 867f34fc-18df-4a5b-bc59-7c69fb82dd21 1
"C:\GD\VNC4\WinVNC4.exe" -service
\??\C:\Windows\system32\conhost.exe "15566375551577994794-807377487768815433-1039876970-1447375689-1792515908355694605
"winvnc4.exe" -noconsole -slave Global\WinVNC4_Shutdown_Session_Instance -cadevent Global\WinVNC4_CAD
C:\Windows\SysWOW64\dkcktkn.exe
C:/GD/PostgreSQL/9.2/bin/postgres.exe -D "C:/GD/PostgreSQL/9.2/data"
\??\C:\Windows\system32\conhost.exe "-1700110179-4424600561914991430375030136-2114452971-296141983-280081840820287801
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forklog" "1068" "1064"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1220" "-x4"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1224" "-x3"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1220" "-x5"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkavlauncher" "1224"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkcol" "1220"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d73d3373-e6e4-40ab-8b72-b610a428f5aa -SystemEventPortName:HostProcess-abc1bb89-ca96-4ec8-8de7-99403a967489 -IoCancelEventPortName:HostProcess-aca62637-f002-4cd3-9dee-29445a31e893 -NonStateChangingEventPortName:HostProcess-1623321c-a79a-4bf2-b327-9c196aba172c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:758d984b-e6b2-412a-a622-c94719cc2644 -DeviceGroupId:WpdFsGroup
atieclxx
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k secsvcs
taskhost.exe USER
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "1158576483-1930759068983005341-5123964301064838263-1530288957-1334782535-553244559
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files\ESET Endpoint Security\egui.exe" /hide
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
KHALMNPR.EXE /API
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files\Zune\ZuneLauncher.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\GD\Sandboxie\SbieCtrl.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\GD\i-Funbox DevTeam\iFunBox_x64.exe" /tray
"C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe" "6212" "197552" "197780" "132172" "65932" "65986" "db3f66e3-2288-415b-99ec-e92213664371" "C:\Users\kores\AppData\Roaming\DisplayFusion\AppHookWIN6032_432481a6-fade-47d0-bf25-810896dd7d36.dll" "DisplayFusion" "Software\Binary Fortress Software\DisplayFusion" "Software\Binary Fortress Software\DisplayFusion\Session" "0" "61"
"C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe" "6212" "197552" "197780" "132172" "65932" "65986" "db3f66e3-2288-415b-99ec-e92213664371" "C:\Users\kores\AppData\Roaming\DisplayFusion\AppHookWIN6064_5c7c3aab-d1ef-4c4d-9a2b-d394b6d46b05.dll" "DisplayFusion" "Software\Binary Fortress Software\DisplayFusion" "Software\Binary Fortress Software\DisplayFusion\Session" "1" "61"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\svchost.exe -k WindowsMobile
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized

"C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe"
"C:\GD\CloneCD\CloneCDTray.exe" /s
"C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe"
"C:\Program Files (x86)\SafeNet\BSecClient\AXMonitor.exe"
"C:\Program Files (x86)\SafeNet\BSecClient\dkAutoReg.exe"
"C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\GD)\teamspeak3-server_win64\ts3server_win64.exe"
"C:\Program Files (x86)\Evernote\Evernote\Evernote.exe" /Hide
"C:\Users\kores\AppData\Roaming\Spotify\SpotifyCrashService.exe"
"C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --channel="2324.0.1113887766\279656624" --no-sandbox --disable-d3d11 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.21.143 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc8 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4411 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.21.143 /prefetch:822062411
"C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --no-sandbox --lang=en-US --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.21.143 --disable-spell-checking --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="2324.1.356631290\2043401747" /prefetch:673131151
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Process Explorer\ProcessExplorer\procexp.exe"
"C:\Process Explorer\ProcessExplorer\procexp.exe"
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
"C:\Users\kores\Downloads\RSITx64.exe"
C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AuditPro Scan.job - Scan.exe /TCP:777 /SERVICE
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281Core.job - C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281UA.job - C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\G2MUpdateTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job - C:\Users\kores\AppData\Local\Citrix\GoToMeeting\4419\g2mupdate.exe
C:\Windows\tasks\G2MUploadTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job - C:\Users\kores\AppData\Local\Citrix\GoToMeeting\4419\g2mupload.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave

prefs.js - "browser.startup.homepage" - "https://www.google.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=Software602 Form Filler Plugin
"Path"=C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@vmware.com/vmrc,version=5.5.0.00000]
"Description"=VMware VMRC Browser Plugin
"Path"=C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.5\Firefox\np-vmware-vmrc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Web Components]
"Description"=
"Path"=C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.0]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave\extensions\
{A95ECCE5-EF19-46bf-847B-3761F41FC4A5}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-30 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-12-01 629456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-30 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC36B0BD-27F0-4cdd-8AB1-50651EFC3EFD}]
WinToFlash Suggestor - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.dll [2012-05-25 281424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-19 11613288]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-10-07 1744152]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2012-11-29 7406392]
"Zune Launcher"=C:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-09-17 2461504]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-09-17 2799784]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-12-09 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-10-21 60688]
"MobileDocuments"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DisplayFusion"=C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [2016-01-20 8547320]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2016-02-04 3014224]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2016-02-08 3639280]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"GoogleChromeAutoLaunch_6228F8095EA9E7D325985EBEE7CDD8AE"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2016-02-09 748872]
"SandboxieControl"=C:\GD\Sandboxie\SbieCtrl.exe [2015-02-18 785416]
"iFunBox Fast App Install Handler"=C:\GD\i-Funbox DevTeam\iFunBox_x64.exe [2015-04-12 2692608]
"Dropbox Update"=C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18 134512]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2016-01-15 23499656]
"Prime95"=C:\Users\kores\Desktop\Prime\prime95.exe [2011-04-08 26114560]
"Spotify Web Helper"=C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-02-10 2355312]
"Spotify"=C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe [2016-02-10 8449136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT]
Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDD Regenerator]
C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 660360]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-11-20 60688]
"Cobian Backup 11 interface"=C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [2013-03-07 4407808]
"CloneCDTray"=C:\GD\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"DkStartup"=C:\Program Files (x86)\SafeNet\BSecClient\dkstartup.exe [2007-09-13 49152]
"AxMonitor"=C:\Program Files (x86)\SafeNet\BSecClient\axmonitor.exe [2007-09-13 450560]
"DkAutoReg"=C:\Program Files (x86)\SafeNet\BSecClient\DkAutoReg.exe [2007-09-13 253952]
"Print2PDF Print Monitor"=C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [2011-10-04 220992]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2016-01-08 318248]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GIGABYTE OC_GURU.lnk - C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe

C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
EvernoteTray.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
MEGAsync.lnk - C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
SBS_LOGIN_SCRIPT.bat – zástupce.lnk - C:\Users\kores\Desktop\SBS_LOGIN_SCRIPT.bat
ts3server_win64.exe – zástupce.lnk - C:\GD)\teamspeak3-server_win64\ts3server_win64.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\Jaksta\AC\x64\jaudcap.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-09-27 68376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutorun"=158

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-22 06:50:34 ----D---- C:\rsit
2016-02-22 06:50:34 ----D---- C:\Program Files\trend micro
2016-02-19 10:09:14 ----SHD---- C:\Config.Msi
2016-02-12 08:24:11 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-02-11 06:57:05 ----D---- C:\Users\kores\AppData\Roaming\Samsung
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_whnt.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_mdm.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_mdfl.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_cmnt.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_bus.sys
2016-02-10 17:02:56 ----A---- C:\Windows\SYSWOW64\secman.dll
2016-02-10 17:02:31 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2016-02-10 16:58:15 ----D---- C:\Program Files (x86)\Samsung
2016-02-10 16:57:59 ----D---- C:\ProgramData\Samsung
2016-02-10 15:22:04 ----D---- C:\Users\kores\AppData\Roaming\Spotify
2016-02-10 11:06:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-10 11:06:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-10 11:06:06 ----A---- C:\Windows\system32\iertutil.dll
2016-02-10 11:06:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-10 11:06:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-02-10 11:06:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-10 11:06:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-02-10 11:06:04 ----A---- C:\Windows\system32\urlmon.dll
2016-02-10 11:06:04 ----A---- C:\Windows\system32\mshtml.dll
2016-02-10 11:06:04 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-10 11:06:04 ----A---- C:\Windows\system32\ieui.dll
2016-02-10 11:06:04 ----A---- C:\Windows\system32\ieframe.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\inseng.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\iernonce.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-10 11:05:51 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 11:05:50 ----A---- C:\Windows\system32\occache.dll
2016-02-10 11:05:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 11:05:50 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-10 11:05:49 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 11:05:49 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\iesetup.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 11:05:48 ----A---- C:\Windows\system32\vbscript.dll
2016-02-10 11:05:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-10 11:05:47 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-10 11:05:47 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-10 11:05:47 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\wininet.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\webcheck.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\jscript9.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\jscript.dll
2016-02-10 11:05:45 ----A---- C:\Windows\system32\msrating.dll
2016-02-10 11:05:45 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-10 11:05:15 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 11:05:13 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wups2.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wups.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wudriver.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wucltux.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuapp.exe
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuapi.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-02-10 11:05:05 ----A---- C:\Windows\system32\rdpudd.dll
2016-02-10 11:05:05 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-02-10 11:05:05 ----A---- C:\Windows\system32\rdpcorets.dll
2016-02-10 11:05:04 ----A---- C:\Windows\system32\win32k.sys
2016-02-10 11:04:37 ----A---- C:\Windows\system32\ole32.dll
2016-02-10 11:04:35 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-02-10 11:03:57 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 11:03:57 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 11:03:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 11:03:57 ----A---- C:\Windows\system32\ntdll.dll
2016-02-10 11:03:57 ----A---- C:\Windows\system32\EncDec.dll
2016-02-10 11:03:57 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-10 11:03:56 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 11:03:56 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-10 11:03:56 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-10 11:03:56 ----A---- C:\Windows\system32\kerberos.dll
2016-02-10 11:03:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-02-10 11:03:53 ----A---- C:\Windows\system32\kernel32.dll
2016-02-10 11:03:53 ----A---- C:\Windows\system32\advapi32.dll
2016-02-10 11:03:52 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 11:03:52 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-10 11:03:52 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-10 11:03:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-10 11:03:51 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-02-10 11:03:51 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-10 11:03:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wow64win.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wow64cpu.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wow64.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\winsrv.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wdigest.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\sspicli.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\srcore.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\srclient.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\smss.exe
2016-02-10 11:03:50 ----A---- C:\Windows\system32\schannel.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\secur32.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\rstrui.exe
2016-02-10 11:03:50 ----A---- C:\Windows\system32\ntvdm64.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\lsass.exe
2016-02-10 11:03:50 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 11:03:50 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-10 11:03:50 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\credssp.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\conhost.exe
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-02-10 11:03:49 ----A---- C:\Windows\system32\auditpol.exe
2016-02-10 11:03:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 11:03:48 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-02-10 11:03:48 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-02-10 11:03:47 ----A---- C:\Windows\SYSWOW64\user.exe
2016-02-10 11:03:47 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-02-10 11:03:47 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-10 11:03:45 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-02-10 11:03:45 ----A---- C:\Windows\system32\adtschema.dll
2016-02-10 11:03:44 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-02-10 11:03:44 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-02-10 11:03:44 ----A---- C:\Windows\system32\msobjs.dll
2016-02-10 11:03:44 ----A---- C:\Windows\system32\msaudite.dll
2016-02-10 11:02:58 ----A---- C:\Windows\system32\shell32.dll
2016-02-10 11:02:56 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-02-10 11:02:56 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-02-10 11:02:56 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-02-10 11:02:56 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-02-10 11:02:56 ----A---- C:\Windows\system32\authui.dll
2016-02-10 11:02:56 ----A---- C:\Windows\explorer.exe
2016-02-10 11:02:55 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll

======List of files/folders modified in the last 1 month======

2016-02-22 06:50:35 ----D---- C:\Windows\Temp
2016-02-22 06:50:34 ----RD---- C:\Program Files
2016-02-22 06:45:42 ----D---- C:\Users\kores\AppData\Roaming\602Installer
2016-02-22 06:45:01 ----D---- C:\Users\kores\AppData\Roaming\Dropbox
2016-02-22 06:44:09 ----D---- C:\Program Files (x86)\Steam
2016-02-22 06:43:11 ----D---- C:\ProgramData\boost_interprocess
2016-02-22 06:42:53 ----D---- C:\Windows\Microsoft.NET
2016-02-22 06:39:15 ----RSD---- C:\Windows\assembly
2016-02-22 06:26:55 ----SHD---- C:\System Volume Information
2016-02-22 06:22:07 ----A---- C:\Windows\SYSWOW64\log.txt
2016-02-22 06:22:00 ----D---- C:\ProgramData\Origin
2016-02-22 06:16:34 ----D---- C:\Windows\system32\config
2016-02-22 06:16:29 ----D---- C:\ProgramData\NVIDIA
2016-02-22 06:14:31 ----D---- C:\Windows\winsxs
2016-02-22 06:09:50 ----D---- C:\Windows\SYSWOW64\en-US
2016-02-22 06:09:50 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-22 06:09:50 ----D---- C:\Windows\SysWOW64
2016-02-22 06:09:50 ----D---- C:\Windows\system32\en-US
2016-02-22 06:09:50 ----D---- C:\Windows\system32\cs-CZ
2016-02-22 06:09:50 ----D---- C:\Windows\System32
2016-02-22 06:09:50 ----D---- C:\Program Files\Internet Explorer
2016-02-22 06:09:50 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-22 06:09:44 ----D---- C:\Windows\system32\drivers
2016-02-19 10:16:05 ----D---- C:\Windows\system32\MRT
2016-02-19 10:16:04 ----A---- C:\Windows\system32\MRT.exe
2016-02-19 10:15:48 ----SHD---- C:\Windows\Installer
2016-02-19 10:15:41 ----D---- C:\ProgramData\Microsoft Help
2016-02-19 10:15:27 ----A---- C:\Windows\win.ini
2016-02-19 10:10:44 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-02-19 10:10:36 ----D---- C:\Windows\inf
2016-02-19 10:10:34 ----D---- C:\Windows\Prefetch
2016-02-19 10:10:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-17 18:26:23 ----D---- C:\Windows\rescache
2016-02-17 17:10:24 ----D---- C:\Windows\AppPatch
2016-02-17 17:10:22 ----D---- C:\Windows\cs-CZ
2016-02-17 17:10:22 ----AD---- C:\Windows
2016-02-16 13:06:34 ----D---- C:\Users\kores\AppData\Roaming\vlc
2016-02-15 09:54:00 ----D---- C:\Users\kores\AppData\Roaming\TS3Client
2016-02-15 09:34:04 ----D---- C:\Process Explorer
2016-02-15 00:00:24 ----D---- C:\Program Files (x86)\AuditPro Scan
2016-02-12 12:57:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-12 12:57:01 ----D---- C:\Windows\system32\catroot
2016-02-12 12:51:15 ----RD---- C:\Program Files (x86)
2016-02-10 17:21:12 ----D---- C:\Windows\Tasks
2016-02-10 17:13:15 ----D---- C:\Windows\system32\DriverStore
2016-02-10 17:00:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-10 16:57:59 ----HD---- C:\ProgramData
2016-02-10 15:32:27 ----D---- C:\Users\kores\AppData\Roaming\VMware
2016-02-10 14:01:38 ----D---- C:\Users\kores\AppData\Roaming\Gordic
2016-02-10 11:02:05 ----D---- C:\Windows\system32\catroot2
2016-02-10 08:45:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-08 06:24:08 ----D---- C:\Program Files (x86)\Origin
2016-02-05 08:52:04 ----D---- C:\Program Files\ESET Endpoint Security
2016-01-25 14:58:02 ----D---- C:\Windows\system32\NDF
2016-01-25 10:08:03 ----SD---- C:\Windows\SYSWOW64\GWX
2016-01-25 10:08:03 ----SD---- C:\Windows\system32\GWX
2016-01-25 10:07:54 ----SD---- C:\Windows\system32\CompatTel
2016-01-25 10:07:54 ----D---- C:\Windows\system32\appraiser
2016-01-25 10:03:21 ----D---- C:\Program Files\Microsoft Silverlight
2016-01-25 10:03:21 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2015-10-08 69328]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-04-09 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-10-08 255272]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-10-08 186272]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R1 ElRawDisk;ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys [2009-02-12 26024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2015-10-08 205288]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2015-10-08 52872]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2013-07-04 238352]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2013-07-04 120080]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2013-08-05 52816]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 iKeyEnum;Rainbow iKey Enumerator; C:\Windows\system32\DRIVERS\ikeyenum.sys [2011-07-06 16160]
R3 iKeyIFD;Rainbow iKey Virtual Reader; C:\Windows\system32\DRIVERS\ikeyifd.sys [2011-07-06 22304]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [2012-10-02 66360]
R3 LGSUsbFilt;Logitech Gaming KMDF USB Filter Driver; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [2012-10-02 43832]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-09-17 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-09-17 20288]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-09-04 38048]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SbieDrv;SbieDrv; \??\C:\GD\Sandboxie\SbieDrv.sys [2015-02-18 237064]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2013-07-04 146704]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 esihdrv;esihdrv; \??\C:\Users\kores\AppData\Local\Temp\esihdrv.sys []
S3 GPCIDrv;GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [2014-08-11 14376]
S3 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Users\kores\AppData\Local\Temp\HWiNFO64A.SYS []
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2011-11-01 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 qcusbser-forge;Forge USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\qcusbser.sys [2015-06-08 247872]
S3 qcusbwwan-forge;Forge USB-NDIS WWAN miniport; C:\Windows\system32\DRIVERS\qcusbwwan.sys [2015-06-17 488512]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RnbToken;Rainbow iKey Token Service; C:\Windows\system32\DRIVERS\rnbtoken.sys [2011-07-06 24352]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2011-08-08 27336]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2011-08-08 70656]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2016-01-08 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2016-01-08 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2016-01-08 161280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-06-10 54784]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2013-07-04 131856]
S4 RsFx0150;RsFx0150 Driver; C:\Windows\system32\DRIVERS\RsFx0150.sys [2010-04-03 313696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 cbVSCService11;Cobian Backup 11 Stínová kopie - Requester; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [2013-03-07 67584]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
R2 CobianBackup11;Cobian Backup 11 Gravity; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [2013-03-07 1131008]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DisplayFusionService;DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [2016-01-20 4616216]
R2 DkLogger;SafeNet Log Service; C:\Windows\SysWOW64\dklog.exe [2007-09-13 106496]
R2 DkTknSrv;SafeNet Token Service; C:\Windows\SysWOW64\dkcktkn.exe [2007-09-13 737280]
R2 DkVcm;SafeNet Virtual Channel Monitor; C:\Windows\SysWOW64\dkvcm.exe [2007-09-13 122880]
R2 ekrn;ESET Service; C:\Program Files\ESET Endpoint Security\x86\ekrn.exe [2015-10-02 1576712]
R2 ERA_SERVER;ESET Remote Administrator Server; C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe [2015-11-02 5187272]
R2 EraAgentSvc;ESET Remote Administrator Agent; C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe [2015-09-30 1605832]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-09-17 1149760]
R2 GSSINS01.exe;GINIS - Instalační služba ; C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe [2015-10-16 34816]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 msoidsvc;Microsoft Online Services Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2012-05-17 2079520]
R2 MSSQL$SFN;SQL Server (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [2010-04-03 61913952]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-09-17 1796928]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-09-17 19440960]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-09-13 934216]
R2 postgresql-x64-9.2;postgresql-x64-9.2 - PostgreSQL Server 9.2; C:/GD/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N postgresql-x64-9.2 -D C:/GD/PostgreSQL/9.2/data -w []
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 SbieSvc;Sandboxie Service; C:\GD\Sandboxie\SbieSvc.exe [2015-02-18 175112]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-04-03 267616]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-04-03 146272]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-01-08 754784]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-09-13 411968]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2015-06-24 5097232]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-12-09 644880]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 SKLService;Run software as Windows service; C:\Windows\SysWOW64\KAward\aklservice.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 AuditPro Scan;AuditPro Scan; C:\Program Files (x86)\AuditPro Scan\Scan.exe [2013-05-07 2443584]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2015-07-29 1128448]
S3 EHttpSrv;ESET HTTP Server; C:\Program Files\ESET Endpoint Security\ehttpsrv.exe [2015-10-02 41160]
S3 ERA_HTTP_SERVER;ESET RA HTTP Server; C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\EHttpSrv.exe [2015-11-02 102088]
S3 eshasrv;ESET SHA Service; C:\Program Files\ESET Endpoint Security\eshasrv.exe [2015-10-02 182984]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 114688]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-09-27 359192]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-12 146888]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-02-08 2104840]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-02-04 835152]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 59744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S4 SQLAgent$SFN;SQL Server Agent (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [2010-04-03 428384]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]

-----------------EOF-----------------

Zdravim

Jak casto a pri cem zamrzava?

Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Zamrzává náhodně - jako by časově náhodně - někdy běží 3 dny někdy zamrzne 2x denně. Zdá se mi, že se to stává při větším zatížení RAM - mám puštěnou online muziku, přes spotify, běží mi spousty aplikací. Předchází tomu odpojení od internetu (což sem vlastně úplně zapomněl napsat) takže - odpojí se od internetu - přestane mi hrát hudba a do minuty zamrzne. Odpojí se i od vnitřní sítě a nedá se dostat nikam. Většinou stihnu všechno poukládat, než zamrzne kurzor na nějakém místě

link na crystal disk nefunguje, stáhl jsem verzi 7.5 https://osdn.jp/projects/crystaldiskinfo/releases/

----------------------------------------------------------------------------
CrystalDiskInfo 6.7.5 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64)
Date : 2016/02/22 8:00:20

-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- HL-DT-ST DVDRAM GH22NS70 ATA Device
+ ATA Channel 1 (1) [ATA]
- WDC WD10EARX-00N0YB0 ATA Device
- ATA Channel 0 (0) [ATA]
- ATA Channel 1 (1) [ATA]
+ Intel(R) 6 Series/C200 Series Chipset Family 4 port Serial ATA Storage Controller - 1C00 [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ Intel(R) 6 Series/C200 Series Chipset Family 2 port Serial ATA Storage Controller - 1C08 [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) WDC WD10EARX-00N0YB0 : 1000,2 GB [0/1/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD10EARX-00N0YB0
----------------------------------------------------------------------------
Model : WDC WD10EARX-00N0YB0
Firmware : 51.0AB51
Serial Number : WD-WMC0T0227630
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 34264 hod.
Power On Count : 178 krát
Temperature : 36 C (96 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000003 Počet chyb čtení
03 120 115 _21 000000001B47 Čas na roztočení ploten
04 100 100 __0 0000000000C1 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _54 _54 __0 0000000085D8 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C 100 100 __0 0000000000B2 Počet cyklů zapnutí zařízení
C0 200 200 __0 000000000063 Počet vypnutí disku
C1 177 177 __0 000000010F96 Počet cyklů načítání/vymazání
C2 111 _97 __0 000000000024 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 574D 4330 5430 3232 3736 3330
020: 0000 0000 0032 3531 2E30 4142 3531 5744 4320 5744
030: 3130 4541 5258 2D30 304E 3059 4230 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0004 0044 0040
080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 207F 0059
090: 0059 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 0000 5001 4EE2
110: 5BF3 7340 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 30B5 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 14A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 03 00 00 00 00 00 00 03 27
010: 00 78 73 47 1B 00 00 00 00 00 04 32 00 64 64 C1
020: 00 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 36 36 D8 85 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 64 64 B2 00 00 00 00 00 00 C0 32
070: 00 C8 C8 63 00 00 00 00 00 00 C1 32 00 B1 B1 96
080: 0F 01 00 00 00 00 C2 22 00 6F 61 24 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 AC 44 01 7B
170: 03 00 01 00 02 AC 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 03 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C8

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 00 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 C8 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B5


adwcleaner - log po restartu PC není
2x jsem to spustil, poptvé odstranil i nejké složky (3) a nějaké klíče registru. Log po restartu pc není - ani žádná složka na C vytvořena není

Log z MBAMu
dodám později - zamrzl mi počítač co sem byl na obědě. MBAM jel 2:54 minut a našel 4horzby, bohužel nelze otervřít co to bylo
pustím to znovu

každopádně děkuji

Grave D. píše:link na crystal disk nefunguje, stáhl jsem verzi 7.5 https://osdn.jp/projects/crystaldiskinfo/releases/

Dik za info

Zkuste spustit ADWCleaner i MBAM v nouzovem rezimu. Aspon se zjisti, jestli se to kouse i v nem.

Dnes jel mbam od mého odchodu domů a do rána je pc v pohodě. Je to prostě divný.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 23.2.2016
Čas skenování: 3:08
Protokol:
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.02.22.06
Databáze rootkitů: v2016.02.17.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: kores

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 570857
Uplynulý čas: 25 min, 12 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Varovat
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 7
Adware.Hicosmea, HKCU\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}, , [efcfd291336651e556b421e063a00bf5],
Adware.Hicosmea, HKCU\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [b10d273c811867cf13f86c95c0433ac6],
PUP.Optional.Hicosmea, HKU\S-1-5-21-3320824502-246293271-3617719046-1000_Classes\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [734b23401584d95dba57f3e17e8554ac],
PUP.Optional.Hicosmea, HKU\S-1-5-21-3320824502-246293271-3617719046-500_Classes\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [3b830c5733666accd33e22b261a246ba],
PUP.Optional.Hicosmea, HKU\S-1-5-21-3430899245-4000864472-1088033590-1281_Classes\WOW6432NODE\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}, , [c5f9a4bfe9b0cc6a26ea5e76c93a0bf5],
PUP.Optional.Hicosmea, HKU\S-1-5-21-3430899245-4000864472-1088033590-1281_Classes\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [9b23d48fcecb7cba54bda331d72c02fe],
PUP.Optional.Hicosmea, HKU\S-1-5-21-3430899245-4000864472-1088033590-500_Classes\WOW6432NODE\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}, , [8935aeb55f3af442be538351659ef907],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 2
PUP.Optional.AsteriskPasswords, C:\Users\kores\Downloads\pW.zip, , [0eb05b0889106bcbde1ea76bc441be42],
PUP.Optional.WinToFlashSuggestor, C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\d63uvxha.default\extensions\{285ACFBB-8E53-4feb-90E6-F02A128927F3}.xpi, , [dde1144f346540f6ee6ff81f2cd834cc],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Vsechny nalezy MBAM nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte (ale tentokrat opravdu se spravnym nastavenim - tohle byl jen Sken hrozeb, ten nekontroluje cely pocitac, ja chtel Vlastni sken), at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

koukám, že mi to dalo nějaký špatný log - tohle se mi uložilo do TXT
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22.2.2016
Čas skenování: 22:17
Protokol: mbam.txt
Správce: Ano

Verze: 0.0.0.0000
Databáze malwaru: v2016.02.22.06
Databáze rootkitů: v2016.02.17.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: kores

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 1316982
Uplynulý čas: 6 hod, 50 min, 28 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

jelo to celou noc

A ten ADWCleaner taky sel?


MBAM odinstalujte

Dejte novy log z RSIT

a k tomu

Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach

Dobrý den,
omlouvám se, byl jsem mimo kancelář a počítač byl opět zamrzlý, nahodila mi ho kolegyně, ale nedokázal sem se přihlásit.
dávám požadované logy

MBAM jsem zatím nechal, ADWCleaner sem nezkoušel spustit - když počítač běží, jsem rád, že mohu pracovat ADWCleaner spistím v pondělí - nějak - klidně i v nouzovém režimu a log z něj dodám. Toto je zatím vše co mám - koukám na to, že to práší hodně věcí

Logfile of random's system information tool 1.10 (written by random/random)
Run by kores at 2016-02-26 10:58:07
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 20 GB (6%) free of 354 GB
Total RAM: 8174 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:58:16, on 26.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe
C:\GD\CloneCD\CloneCDTray.exe
C:\Program Files (x86)\SafeNet\BSecClient\AXMonitor.exe
C:\Program Files (x86)\SafeNet\BSecClient\dkAutoReg.exe
C:\Users\kores\AppData\Roaming\Spotify\SpotifyCrashService.exe
C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
\s-app\ADS\ADS.exe
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
C:\Program Files\trend micro\kores.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://servertrest/mailessentials1/pages/Default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Cobian Backup 11 interface] "C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe" -service
O4 - HKLM\..\Run: [CloneCDTray] "C:\GD\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [DkStartup] C:\Program Files (x86)\SafeNet\BSecClient\dkstartup.exe
O4 - HKLM\..\Run: [AxMonitor] C:\Program Files (x86)\SafeNet\BSecClient\axmonitor.exe
O4 - HKLM\..\Run: [DkAutoReg] C:\Program Files (x86)\SafeNet\BSecClient\DkAutoReg.exe
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DisplayFusion] "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_6228F8095EA9E7D325985EBEE7CDD8AE] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [SandboxieControl] "C:\GD\Sandboxie\SbieCtrl.exe"
O4 - HKCU\..\Run: [iFunBox Fast App Install Handler] C:\GD\i-Funbox DevTeam\iFunBox_x64.exe /tray
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [Prime95] C:\Users\kores\Desktop\Prime\prime95.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: MEGAsync.lnk = C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
O4 - Startup: SBS_LOGIN_SCRIPT.bat – zástupce.lnk = C:\Users\kores\Desktop\SBS_LOGIN_SCRIPT.bat
O4 - Startup: ts3server_win64.exe – zástupce.lnk = C:\GD)\teamspeak3-server_win64\ts3server_win64.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nová poznámka - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Vystřihnout obrázek - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Vystřihnout tuto stránku - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Vystřihnout výběr - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Vystřihnout záložku - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WinToFlash Suggestor - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - (no file)
O9 - Extra 'Tools' menuitem: WinToFlash Suggestor options - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com//activex/ractrl.cab?lmi=928
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = trest.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{94B211F8-6A8E-4636-A991-D46EF28B9441}: NameServer = 10.0.2.11,10.0.2.12
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = trest.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = trest.local
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\Jaksta\AC\x86\jaudcap.dll
O20 - Winlogon Notify: DkWLNP - DkWLNP.dll (file missing)
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AuditPro Scan - truconneXion, a. s. - C:\Program Files (x86)\AuditPro Scan\Scan.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Cobian Backup 11 Stínová kopie - Requester (cbVSCService11) - CobianSoft, Luis Cobian - C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
O23 - Service: Cobian Backup 11 Gravity (CobianBackup11) - Luis Cobian, CobianSoft - C:\Program Files (x86)\Cobian Backup 11\cbService.exe
O23 - Service: DisplayFusionService - Binary Fortress Software - C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
O23 - Service: SafeNet Log Service (DkLogger) - SafeNet, Inc. - C:\Windows\SysWOW64\dklog.exe
O23 - Service: SafeNet Token Service (DkTknSrv) - SafeNet, Inc. - C:\Windows\SysWOW64\dkcktkn.exe
O23 - Service: SafeNet Virtual Channel Monitor (DkVcm) - SafeNet, Inc. - C:\Windows\SysWOW64\dkvcm.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EHttpSrv) - ESET - C:\Program Files\ESET Endpoint Security\ehttpsrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET Endpoint Security\x86\ekrn.exe
O23 - Service: ESET Remote Administrator Agent (EraAgentSvc) - ESET - C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe
O23 - Service: ESET RA HTTP Server (ERA_HTTP_SERVER) - ESET - C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\EHttpSrv.exe
O23 - Service: ESET Remote Administrator Server (ERA_SERVER) - ESET - C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe
O23 - Service: ESET SHA Service (eshasrv) - ESET - C:\Program Files\ESET Endpoint Security\eshasrv.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: GINIS - Instalační služba (GSSINS01.exe) - GORDIC spol. s r. o. - C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: postgresql-x64-9.2 - PostgreSQL Server 9.2 (postgresql-x64-9.2) - PostgreSQL Global Development Group - C:/GD/PostgreSQL/9.2/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\GD\Sandboxie\SbieSvc.exe
O23 - Service: Run software as Windows service (SKLService) - Unknown owner - C:\Windows\SysWOW64\KAward\aklservice.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\GD\VNC4\WinVNC4.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 20290 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\GD\Sandboxie\SbieSvc.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe"
"C:\Program Files (x86)\Cobian Backup 11\cbService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe"
C:\Windows\SysWOW64\dklog.exe
C:\Windows\SysWOW64\dkvcm.exe
"C:\Program Files\ESET Endpoint Security\x86\ekrn.exe"
"C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe"
"C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE"
"C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe" -sSFN
MSOIDSvcm.exe 2852
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:/GD/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N "postgresql-x64-9.2" -D "C:/GD/PostgreSQL/9.2/data" -w
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 867f34fc-18df-4a5b-bc59-7c69fb82dd21 1
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
\??\C:\Windows\system32\conhost.exe "182687765980944262-226819193830798576-1638768070162992087-4805164401991484983
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:/GD/PostgreSQL/9.2/bin/postgres.exe -D "C:/GD/PostgreSQL/9.2/data"
\??\C:\Windows\system32\conhost.exe "127620543567289506710160420241152148212-54216084415731097301872656787309958033
"C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forklog" "1068" "1064"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1236" "-x4"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1220" "-x3"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkboot" "1236" "-x5"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkavlauncher" "1220"
"C:/GD/PostgreSQL/9.2/bin/postgres.exe" "--forkcol" "1236"
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\GD\VNC4\WinVNC4.exe" -service
"winvnc4.exe" -noconsole -slave Global\WinVNC4_Shutdown_Session_Instance -cadevent Global\WinVNC4_CAD
C:\Windows\SysWOW64\dkcktkn.exe
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
atieclxx
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\servicing\TrustedInstaller.exe
"taskhost.exe"
"C:\Program Files\ESET Endpoint Security\egui.exe" /hide
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
KHALMNPR.EXE /API
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-495490472101487931-1322345942-997926767-240686014867280912092296167327403799
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files\Zune\ZuneLauncher.exe"
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
"C:\GD\Sandboxie\SbieCtrl.exe"
"C:\GD\i-Funbox DevTeam\iFunBox_x64.exe" /tray
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
"C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe" -service
"C:\GD\CloneCD\CloneCDTray.exe" /s
"C:\Program Files (x86)\SafeNet\BSecClient\AXMonitor.exe"
"C:\Program Files (x86)\SafeNet\BSecClient\dkAutoReg.exe"
"C:\Users\kores\AppData\Roaming\Spotify\SpotifyCrashService.exe"
"C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
"C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe"
"C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe"
"C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe"
"C:\Program Files (x86)\Evernote\Evernote\Evernote.exe" /Hide
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\GD)\teamspeak3-server_win64\ts3server_win64.exe"
"C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --channel="7212.0.692789345\1762851130" --no-sandbox --disable-d3d11 --enable-crash-reporter --lang=en-US --log-file="C:\Users\kores\AppData\Roaming\Spotify\debug.log" --log-severity=disable --product-version=Spotify/1.0.23.90 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,23,51,61 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc8 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4411 --enable-crash-reporter --lang=en-US --log-file="C:\Users\kores\AppData\Roaming\Spotify\debug.log" --log-severity=disable --product-version=Spotify/1.0.23.90 /prefetch:822062411
"C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --no-sandbox --lang=en-US --enable-crash-reporter --lang=en-US --log-file="C:\Users\kores\AppData\Roaming\Spotify\debug.log" --log-severity=disable --product-version=Spotify/1.0.23.90 --disable-extensions --disable-spell-checking --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7212.1.1652941065\1766621542" /prefetch:673131151
"C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe" "5764" "132614" "132822" "132734" "65776" "65840" "90386de7-f132-47d6-93fa-45678992c5aa" "C:\Users\kores\AppData\Roaming\DisplayFusion\AppHookWIN6064_5c7c3aab-d1ef-4c4d-9a2b-d394b6d46b05.dll" "DisplayFusion" "Software\Binary Fortress Software\DisplayFusion" "Software\Binary Fortress Software\DisplayFusion\Session" "1" "61"
"C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe" "5764" "132614" "132822" "132734" "65776" "65840" "90386de7-f132-47d6-93fa-45678992c5aa" "C:\Users\kores\AppData\Roaming\DisplayFusion\AppHookWIN6032_432481a6-fade-47d0-bf25-810896dd7d36.dll" "DisplayFusion" "Software\Binary Fortress Software\DisplayFusion" "Software\Binary Fortress Software\DisplayFusion\Session" "0" "61"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -scheduled -critical
"\\s-app\ADS\ADS.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE"
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" -Embedding
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Windows\System32\notepad.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\cmd.exe"
\??\C:\Windows\system32\conhost.exe "-1790906160-19137427935899309036155269719667631598933158-3403036551899519280

"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="7592.1.2136570603\716611863" "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 7592 "\\.\pipe\gecko-crash-server-pipe.7592" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe" --proxy-stub-channel=Flash11208.114BF3E8.12062 --host-broker-channel=Flash11208.114BF3E8.31317 --host-pid=11208 --host-npapi-version=28 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe" --channel=7732.0068F598.2058061929 --proxy-stub-channel=Flash11208.114BF3E8.12062 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll" --host-npapi-version=28 --type=renderer
C:\Windows\splwow64.exe 8192
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\kores\Dropbox\_PRACOVNÍ\EXCHANGE.doc"
"C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\kores\Downloads\Sia----1000-Forms-Of-Fear-(2014)---320kbps-+-covers\Sia - 1000 Forms Of Fear (2014)\01.Sia - Chandelier.mp3"
"C:\program files\itunes\itunes.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe" --pipe \\.\pipe\30503022393340176168873912 --parentPipe
\??\C:\Windows\system32\conhost.exe "-2700062301509183322962440140196699418-13313238861806698186427241053-1706786420
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe"
\??\C:\Windows\system32\conhost.exe "-2054666618-314408930-1805993891276540708-1384275687-103884869816778089711875000439
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe"
\??\C:\Windows\system32\conhost.exe "-1053918461-12004786572101025008-885395458-142921156462823783-1278806221815375396
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe26_ Global\UsGthrCtrlFltPipeMssGthrPipe26 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe" --pipe \\.\pipe\30503035-649421146413912R \\.\pipe\30503035-649421146413912W --target ad5386931a3c07f126cfe8f2ed5510b772a4c6f4 --library 42F830B3956ED6B0
\??\C:\Windows\system32\conhost.exe "605002659-975729091-2410919791921481161855682386-1825402179-1720011801628007539
"C:\Program Files (x86)\Common Files/Apple/Mobile Device Support/ATH.exe" --pipe \\.\pipe\30503035-646071146416260R \\.\pipe\30503035-646071146416260W --target ad5386931a3c07f126cfe8f2ed5510b772a4c6f4 --library 42F830B3956ED6B0
\??\C:\Windows\system32\conhost.exe "102101633012635546272072365416163337989211747630461893390009-16026285171843131786
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-26f579d4-42eb-4e50-8b32-3a1b7e89445b -SystemEventPortName:HostProcess-095319da-c7b5-4477-8a02-633eb6f8f786 -IoCancelEventPortName:HostProcess-06679d46-d48e-4936-81d8-a60bd728e1fb -NonStateChangingEventPortName:HostProcess-c5a75a13-05aa-4ea0-a9a3-58668de9c5a3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1f30403d-de5e-4f22-b4ff-ee2f5dbccb27 -DeviceGroupId:
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Users\kores\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AuditPro Scan.job - Scan.exe /TCP:777 /SERVICE
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281Core.job - C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281UA.job - C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\G2MUpdateTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job - C:\Users\kores\AppData\Local\Citrix\GoToMeeting\4431\g2mupdate.exe
C:\Windows\tasks\G2MUploadTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job - C:\Users\kores\AppData\Local\Citrix\GoToMeeting\4431\g2mupload.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave

prefs.js - "browser.startup.homepage" - "https://www.google.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=Software602 Form Filler Plugin
"Path"=C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@vmware.com/vmrc,version=5.5.0.00000]
"Description"=VMware VMRC Browser Plugin
"Path"=C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.5\Firefox\np-vmware-vmrc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Web Components]
"Description"=
"Path"=C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.0]
"Description"=
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave\extensions\
{A95ECCE5-EF19-46bf-847B-3761F41FC4A5}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-30 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-12-01 629456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-30 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-19 11613288]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-10-07 1744152]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2012-11-29 7406392]
"Zune Launcher"=C:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-09-17 2461504]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-09-17 2799784]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-12-09 170256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-10-21 60688]
"MobileDocuments"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DisplayFusion"=C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [2016-01-20 8547320]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2016-02-04 3014224]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2016-02-08 3639280]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"GoogleChromeAutoLaunch_6228F8095EA9E7D325985EBEE7CDD8AE"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2016-02-18 746648]
"SandboxieControl"=C:\GD\Sandboxie\SbieCtrl.exe [2015-02-18 785416]
"iFunBox Fast App Install Handler"=C:\GD\i-Funbox DevTeam\iFunBox_x64.exe [2015-04-12 2692608]
"Dropbox Update"=C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18 134512]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2016-01-15 23499656]
"Prime95"=C:\Users\kores\Desktop\Prime\prime95.exe [2011-04-08 26114560]
"Spotify Web Helper"=C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-02-22 1524336]
"Spotify"=C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe [2016-02-22 6743664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT]
Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDD Regenerator]
C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 660360]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-11-20 60688]
"Cobian Backup 11 interface"=C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [2013-03-07 4407808]
"CloneCDTray"=C:\GD\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"DkStartup"=C:\Program Files (x86)\SafeNet\BSecClient\dkstartup.exe [2007-09-13 49152]
"AxMonitor"=C:\Program Files (x86)\SafeNet\BSecClient\axmonitor.exe [2007-09-13 450560]
"DkAutoReg"=C:\Program Files (x86)\SafeNet\BSecClient\DkAutoReg.exe [2007-09-13 253952]
"Print2PDF Print Monitor"=C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [2011-10-04 220992]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2016-01-08 318248]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GIGABYTE OC_GURU.lnk - C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe

C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
EvernoteTray.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
MEGAsync.lnk - C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
SBS_LOGIN_SCRIPT.bat – zástupce.lnk - C:\Users\kores\Desktop\SBS_LOGIN_SCRIPT.bat
ts3server_win64.exe – zástupce.lnk - C:\GD)\teamspeak3-server_win64\ts3server_win64.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\Jaksta\AC\x64\jaudcap.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-09-27 68376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutorun"=158

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-22 22:52:01 ----A---- C:\mbam.txt
2016-02-22 09:12:22 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2016-02-22 09:11:43 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-02-22 09:11:43 ----A---- C:\Windows\system32\drivers\mwac.sys
2016-02-22 09:11:43 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2016-02-22 06:50:34 ----D---- C:\rsit
2016-02-22 06:50:34 ----D---- C:\Program Files\trend micro
2016-02-19 10:09:14 ----SHD---- C:\Config.Msi
2016-02-12 08:24:11 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-02-11 06:57:05 ----D---- C:\Users\kores\AppData\Roaming\Samsung
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_whnt.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_mdm.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_mdfl.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_cmnt.sys
2016-02-10 17:07:37 ----A---- C:\Windows\system32\drivers\ss_bus.sys
2016-02-10 17:02:56 ----A---- C:\Windows\SYSWOW64\secman.dll
2016-02-10 17:02:31 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2016-02-10 16:58:15 ----D---- C:\Program Files (x86)\Samsung
2016-02-10 16:57:59 ----D---- C:\ProgramData\Samsung
2016-02-10 15:22:04 ----D---- C:\Users\kores\AppData\Roaming\Spotify
2016-02-10 11:06:06 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-10 11:06:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-10 11:06:06 ----A---- C:\Windows\system32\iertutil.dll
2016-02-10 11:06:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-10 11:06:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-02-10 11:06:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-10 11:06:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-02-10 11:06:04 ----A---- C:\Windows\system32\urlmon.dll
2016-02-10 11:06:04 ----A---- C:\Windows\system32\mshtml.dll
2016-02-10 11:06:04 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-10 11:06:04 ----A---- C:\Windows\system32\ieui.dll
2016-02-10 11:06:04 ----A---- C:\Windows\system32\ieframe.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 11:05:51 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\inseng.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\iernonce.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-10 11:05:51 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-10 11:05:51 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-02-10 11:05:50 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 11:05:50 ----A---- C:\Windows\system32\occache.dll
2016-02-10 11:05:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 11:05:50 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-10 11:05:49 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 11:05:49 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\iesetup.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-10 11:05:49 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-02-10 11:05:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 11:05:48 ----A---- C:\Windows\system32\vbscript.dll
2016-02-10 11:05:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-10 11:05:47 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-10 11:05:47 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-10 11:05:47 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\wininet.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\webcheck.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\jscript9.dll
2016-02-10 11:05:46 ----A---- C:\Windows\system32\jscript.dll
2016-02-10 11:05:45 ----A---- C:\Windows\system32\msrating.dll
2016-02-10 11:05:45 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-10 11:05:15 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 11:05:13 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-10 11:05:12 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wups2.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wups.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wudriver.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wucltux.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuapp.exe
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wuapi.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 11:05:12 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-02-10 11:05:05 ----A---- C:\Windows\system32\rdpudd.dll
2016-02-10 11:05:05 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-02-10 11:05:05 ----A---- C:\Windows\system32\rdpcorets.dll
2016-02-10 11:05:04 ----A---- C:\Windows\system32\win32k.sys
2016-02-10 11:04:37 ----A---- C:\Windows\system32\ole32.dll
2016-02-10 11:04:35 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-02-10 11:03:57 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 11:03:57 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 11:03:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 11:03:57 ----A---- C:\Windows\system32\ntdll.dll
2016-02-10 11:03:57 ----A---- C:\Windows\system32\EncDec.dll
2016-02-10 11:03:57 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-10 11:03:56 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 11:03:56 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-10 11:03:56 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-10 11:03:56 ----A---- C:\Windows\system32\kerberos.dll
2016-02-10 11:03:55 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 11:03:53 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-02-10 11:03:53 ----A---- C:\Windows\system32\kernel32.dll
2016-02-10 11:03:53 ----A---- C:\Windows\system32\advapi32.dll
2016-02-10 11:03:52 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 11:03:52 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-10 11:03:52 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-10 11:03:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-10 11:03:51 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-02-10 11:03:51 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-10 11:03:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-02-10 11:03:50 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wow64win.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wow64cpu.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wow64.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\winsrv.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\wdigest.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\sspicli.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\srcore.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\srclient.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\smss.exe
2016-02-10 11:03:50 ----A---- C:\Windows\system32\schannel.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\secur32.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\rstrui.exe
2016-02-10 11:03:50 ----A---- C:\Windows\system32\ntvdm64.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\lsass.exe
2016-02-10 11:03:50 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 11:03:50 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-10 11:03:50 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\credssp.dll
2016-02-10 11:03:50 ----A---- C:\Windows\system32\conhost.exe
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 11:03:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-02-10 11:03:49 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-02-10 11:03:49 ----A---- C:\Windows\system32\auditpol.exe
2016-02-10 11:03:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 11:03:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 11:03:48 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-02-10 11:03:48 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-02-10 11:03:47 ----A---- C:\Windows\SYSWOW64\user.exe
2016-02-10 11:03:47 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-02-10 11:03:47 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-10 11:03:45 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-02-10 11:03:45 ----A---- C:\Windows\system32\adtschema.dll
2016-02-10 11:03:44 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-02-10 11:03:44 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-02-10 11:03:44 ----A---- C:\Windows\system32\msobjs.dll
2016-02-10 11:03:44 ----A---- C:\Windows\system32\msaudite.dll
2016-02-10 11:02:58 ----A---- C:\Windows\system32\shell32.dll
2016-02-10 11:02:56 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-02-10 11:02:56 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-02-10 11:02:56 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-02-10 11:02:56 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-02-10 11:02:56 ----A---- C:\Windows\system32\authui.dll
2016-02-10 11:02:56 ----A---- C:\Windows\explorer.exe
2016-02-10 11:02:55 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll

======List of files/folders modified in the last 1 month======

2016-02-26 10:58:19 ----D---- C:\Windows\Temp
2016-02-26 10:58:16 ----D---- C:\Windows\Prefetch
2016-02-26 10:57:23 ----SHD---- C:\System Volume Information
2016-02-26 08:53:54 ----D---- C:\Users\kores\AppData\Roaming\vlc
2016-02-26 08:42:30 ----D---- C:\Windows\System32
2016-02-26 08:42:30 ----D---- C:\Windows\inf
2016-02-26 08:42:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-26 08:27:15 ----D---- C:\Windows\winsxs
2016-02-26 07:06:09 ----D---- C:\ProgramData\Origin
2016-02-26 07:06:09 ----D---- C:\Program Files (x86)\Steam
2016-02-26 06:51:01 ----D---- C:\ProgramData\ADS
2016-02-26 06:23:14 ----D---- C:\Users\kores\AppData\Roaming\Dropbox
2016-02-26 06:21:59 ----D---- C:\Users\kores\AppData\Roaming\602Installer
2016-02-26 06:19:48 ----D---- C:\ProgramData\boost_interprocess
2016-02-24 17:25:08 ----D---- C:\Windows\system32\config
2016-02-24 17:16:59 ----A---- C:\Windows\SYSWOW64\log.txt
2016-02-24 17:13:47 ----D---- C:\ProgramData\NVIDIA
2016-02-24 11:22:29 ----D---- C:\Program Files\WinRAR
2016-02-22 20:05:40 ----D---- C:\Windows\rescache
2016-02-22 12:20:38 ----RD---- C:\Program Files (x86)
2016-02-22 10:05:19 ----D---- C:\Windows\Tasks
2016-02-22 09:12:22 ----D---- C:\Windows\system32\drivers
2016-02-22 09:11:49 ----D---- C:\Users\kores\AppData\Roaming\Malwarebytes
2016-02-22 09:11:43 ----D---- C:\ProgramData\Malwarebytes
2016-02-22 07:06:15 ----D---- C:\Windows\Microsoft.NET
2016-02-22 06:50:34 ----RD---- C:\Program Files
2016-02-22 06:39:15 ----RSD---- C:\Windows\assembly
2016-02-22 06:09:50 ----D---- C:\Windows\SYSWOW64\en-US
2016-02-22 06:09:50 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-22 06:09:50 ----D---- C:\Windows\SysWOW64
2016-02-22 06:09:50 ----D---- C:\Windows\system32\en-US
2016-02-22 06:09:50 ----D---- C:\Windows\system32\cs-CZ
2016-02-22 06:09:50 ----D---- C:\Program Files\Internet Explorer
2016-02-22 06:09:50 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-19 10:29:37 ----D---- C:\Windows\system32\MRT
2016-02-19 10:16:04 ----A---- C:\Windows\system32\MRT.exe
2016-02-19 10:15:48 ----SHD---- C:\Windows\Installer
2016-02-19 10:15:41 ----D---- C:\ProgramData\Microsoft Help
2016-02-19 10:15:27 ----A---- C:\Windows\win.ini
2016-02-19 10:10:44 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-02-17 17:10:24 ----D---- C:\Windows\AppPatch
2016-02-17 17:10:22 ----D---- C:\Windows\cs-CZ
2016-02-17 17:10:22 ----AD---- C:\Windows
2016-02-15 09:54:00 ----D---- C:\Users\kores\AppData\Roaming\TS3Client
2016-02-15 09:34:04 ----D---- C:\Process Explorer
2016-02-15 00:00:24 ----D---- C:\Program Files (x86)\AuditPro Scan
2016-02-12 12:57:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-12 12:57:01 ----D---- C:\Windows\system32\catroot
2016-02-10 17:13:15 ----D---- C:\Windows\system32\DriverStore
2016-02-10 17:00:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-10 16:57:59 ----HD---- C:\ProgramData
2016-02-10 15:32:27 ----D---- C:\Users\kores\AppData\Roaming\VMware
2016-02-10 14:01:38 ----D---- C:\Users\kores\AppData\Roaming\Gordic
2016-02-10 11:02:05 ----D---- C:\Windows\system32\catroot2
2016-02-10 08:45:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-08 06:24:08 ----D---- C:\Program Files (x86)\Origin
2016-02-05 08:52:04 ----D---- C:\Program Files\ESET Endpoint Security

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2015-10-08 69328]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-04-09 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-10-08 255272]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-10-08 186272]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R1 ElRawDisk;ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys [2009-02-12 26024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2015-10-08 205288]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2015-10-08 52872]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2013-07-04 238352]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2013-07-04 120080]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2013-08-05 52816]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 iKeyEnum;Rainbow iKey Enumerator; C:\Windows\system32\DRIVERS\ikeyenum.sys [2011-07-06 16160]
R3 iKeyIFD;Rainbow iKey Virtual Reader; C:\Windows\system32\DRIVERS\ikeyifd.sys [2011-07-06 22304]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [2012-10-02 66360]
R3 LGSUsbFilt;Logitech Gaming KMDF USB Filter Driver; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [2012-10-02 43832]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-26 192216]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-10-05 63704]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-09-17 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-09-17 20288]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-09-04 38048]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SbieDrv;SbieDrv; \??\C:\GD\Sandboxie\SbieDrv.sys [2015-02-18 237064]
R3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2015-06-10 54784]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2013-07-04 146704]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 esihdrv;esihdrv; \??\C:\Users\kores\AppData\Local\Temp\esihdrv.sys []
S3 GPCIDrv;GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [2014-08-11 14376]
S3 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Users\kores\AppData\Local\Temp\HWiNFO64A.SYS []
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2011-09-02 42776]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2011-11-01 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 qcusbser-forge;Forge USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\qcusbser.sys [2015-06-08 247872]
S3 qcusbwwan-forge;Forge USB-NDIS WWAN miniport; C:\Windows\system32\DRIVERS\qcusbwwan.sys [2015-06-17 488512]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RnbToken;Rainbow iKey Token Service; C:\Windows\system32\DRIVERS\rnbtoken.sys [2011-07-06 24352]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2011-08-08 27336]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2011-08-08 70656]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2016-01-08 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2016-01-08 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2016-01-08 161280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2013-07-04 131856]
S4 RsFx0150;RsFx0150 Driver; C:\Windows\system32\DRIVERS\RsFx0150.sys [2010-04-03 313696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 cbVSCService11;Cobian Backup 11 Stínová kopie - Requester; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [2013-03-07 67584]
R2 CobianBackup11;Cobian Backup 11 Gravity; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [2013-03-07 1131008]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DisplayFusionService;DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [2016-01-20 4616216]
R2 DkLogger;SafeNet Log Service; C:\Windows\SysWOW64\dklog.exe [2007-09-13 106496]
R2 DkTknSrv;SafeNet Token Service; C:\Windows\SysWOW64\dkcktkn.exe [2007-09-13 737280]
R2 DkVcm;SafeNet Virtual Channel Monitor; C:\Windows\SysWOW64\dkvcm.exe [2007-09-13 122880]
R2 ekrn;ESET Service; C:\Program Files\ESET Endpoint Security\x86\ekrn.exe [2015-10-02 1576712]
R2 ERA_SERVER;ESET Remote Administrator Server; C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe [2015-11-02 5187272]
R2 EraAgentSvc;ESET Remote Administrator Agent; C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe [2015-09-30 1605832]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-09-17 1149760]
R2 GSSINS01.exe;GINIS - Instalační služba ; C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe [2015-10-16 34816]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
R2 msoidsvc;Microsoft Online Services Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2012-05-17 2079520]
R2 MSSQL$SFN;SQL Server (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [2010-04-03 61913952]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-09-17 1796928]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-09-17 19440960]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-09-13 934216]
R2 postgresql-x64-9.2;postgresql-x64-9.2 - PostgreSQL Server 9.2; C:/GD/PostgreSQL/9.2/bin/pg_ctl.exe runservice -N postgresql-x64-9.2 -D C:/GD/PostgreSQL/9.2/data -w []
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 SbieSvc;Sandboxie Service; C:\GD\Sandboxie\SbieSvc.exe [2015-02-18 175112]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-04-03 267616]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-04-03 146272]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-01-08 754784]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-09-13 411968]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2015-06-24 5097232]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-12-09 644880]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 SKLService;Run software as Windows service; C:\Windows\SysWOW64\KAward\aklservice.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 AuditPro Scan;AuditPro Scan; C:\Program Files (x86)\AuditPro Scan\Scan.exe [2013-05-07 2443584]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2015-07-29 1128448]
S3 EHttpSrv;ESET HTTP Server; C:\Program Files\ESET Endpoint Security\ehttpsrv.exe [2015-10-02 41160]
S3 ERA_HTTP_SERVER;ESET RA HTTP Server; C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\EHttpSrv.exe [2015-11-02 102088]
S3 eshasrv;ESET SHA Service; C:\Program Files\ESET Endpoint Security\eshasrv.exe [2015-10-02 182984]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 114688]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-09-27 359192]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-12 146888]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-02-08 2104840]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-02-04 835152]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 59744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S4 SQLAgent$SFN;SQL Server Agent (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [2010-04-03 428384]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]

-----------------EOF-----------------

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-02-2016 01
Ran by kores (administrator) on KORES-W7 (26-02-2016 11:21:18)
Running from C:\Users\kores\Desktop
Loaded Profiles: kores (Available Profiles: xx & Administrator & kores & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\GD\Sandboxie\SbieSvc.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbService.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(SafeNet, Inc.) C:\Windows\SysWOW64\dklog.exe
(SafeNet, Inc.) C:\Windows\SysWOW64\dkvcm.exe
(ESET) C:\Program Files\ESET Endpoint Security\x86\ekrn.exe
(ESET) C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe
(ESET) C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(GORDIC spol. s r. o.) C:\Program Files (x86)\GORDIC\GINIS\INS01\GSSINS01.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\pg_ctl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(PostgreSQL Global Development Group) C:\GD\PostgreSQL\9.2\bin\postgres.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(RealVNC Ltd.) C:\GD\VNC4\winvnc4.exe
(RealVNC Ltd.) C:\GD\VNC4\winvnc4.exe
(SafeNet, Inc.) C:\Windows\SysWOW64\dkcktkn.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ESET) C:\Program Files\ESET Endpoint Security\egui.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Sandboxie Holdings, LLC) C:\GD\Sandboxie\SbieCtrl.exe
(i-Funbox.com) C:\GD\i-Funbox DevTeam\iFunBox_x64.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Spotify Ltd) C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe
(SlySoft, Inc.) C:\GD\CloneCD\CloneCDTray.exe
() C:\Program Files (x86)\SafeNet\BSecClient\AXMonitor.exe
(SafeNet, Inc.) C:\Program Files (x86)\SafeNet\BSecClient\dkAutoReg.exe
(Spotify Ltd) C:\Users\kores\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Software602) C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
(Dropbox, Inc.) C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
(Mega Limited) C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(TeamSpeak Systems GmbH) C:\GD)\teamspeak3-server_win64\ts3server_win64.exe
(Spotify Ltd) C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(RON Software spol. s r.o.) \\s-app\ADS\ADS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
(forum.viry.cz) C:\Users\kores\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-09] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-11-20] (Apple Inc.)
HKLM-x32\...\Run: [Cobian Backup 11 interface] => C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [4407808 2013-03-07] (Luis Cobian, CobianSoft)
HKLM-x32\...\Run: [CloneCDTray] => C:\GD\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [DkStartup] => C:\Program Files (x86)\SafeNet\BSecClient\dkstartup.exe [49152 2007-09-13] (SafeNet, Inc.)
HKLM-x32\...\Run: [AxMonitor] => C:\Program Files (x86)\SafeNet\BSecClient\axmonitor.exe [450560 2007-09-13] ()
HKLM-x32\...\Run: [DkAutoReg] => C:\Program Files (x86)\SafeNet\BSecClient\DkAutoReg.exe [253952 2007-09-13] (SafeNet, Inc.)
HKLM-x32\...\Run: [Print2PDF Print Monitor] => C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [220992 2011-10-04] (Software602)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318248 2016-01-08] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\DkWLNP-x32: DkWLNP.dll [X]
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [MobileDocuments] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8547320 2016-01-20] (Binary Fortress Software)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3639280 2016-02-08] (Electronic Arts)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [GoogleChromeAutoLaunch_6228F8095EA9E7D325985EBEE7CDD8AE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [746648 2016-02-18] (Google Inc.)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [SandboxieControl] => C:\GD\Sandboxie\SbieCtrl.exe [785416 2015-02-18] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [iFunBox Fast App Install Handler] => C:\GD\i-Funbox DevTeam\iFunBox_x64.exe [2692608 2015-04-12] (i-Funbox.com)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [Dropbox Update] => C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23499656 2016-01-15] (Google)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [Prime95] => C:\Users\kores\Desktop\Prime\prime95.exe [26114560 2011-04-08] ()
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [Spotify Web Helper] => C:\Users\kores\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-02-22] (Spotify Ltd)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\Run: [Spotify] => C:\Users\kores\AppData\Roaming\Spotify\Spotify.exe [6743664 2016-02-22] (Spotify Ltd)
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\MountPoints2: {0032bf98-11f6-11e5-9876-14dae9efcb46} - L:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\...\MountPoints2: {0032c39b-11f6-11e5-9876-14dae9efcb46} - L:\setup.exe
AppInit_DLLs: C:\Windows\Jaksta\AC\x64\jaudcap.dll => C:\Windows\Jaksta\AC\x64\jaudcap.dll [311584 2013-12-16] (Jaksta Technologies Pty Ltd)
AppInit_DLLs-x32: C:\Windows\Jaksta\AC\x86\jaudcap.dll => No File
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-01-15] (Google)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\kores\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\kores\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\kores\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\kores\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\kores\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\kores\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kores\AppData\Roaming\Dropbox\bin\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2015-08-20]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-02-19]
ShortcutTarget: Dropbox.lnk -> C:\Users\kores\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-05-14]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteTray.lnk [2015-06-04]
ShortcutTarget: EvernoteTray.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2015-09-23]
ShortcutTarget: MEGAsync.lnk -> C:\Users\kores\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
Startup: C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SBS_LOGIN_SCRIPT.bat – zástupce.lnk [2012-09-05]
ShortcutTarget: SBS_LOGIN_SCRIPT.bat – zástupce.lnk -> C:\Users\kores\Desktop\SBS_LOGIN_SCRIPT.bat ()
Startup: C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ts3server_win64.exe – zástupce.lnk [2014-10-24]
ShortcutTarget: ts3server_win64.exe – zástupce.lnk -> C:\GD)\teamspeak3-server_win64\ts3server_win64.exe (TeamSpeak Systems GmbH)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: Hosts file not detected in the default directory
Tcpip\..\Interfaces\{09BA3A30-D652-4B4B-B7D6-F4B53B8A1EF0}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{94B211F8-6A8E-4636-A991-D46EF28B9441}: [NameServer] 10.0.2.11,10.0.2.12

Internet Explorer:
==================
HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://servertrest/mailessentials1/pages/Default.aspx
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-30] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-12-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-30] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} hxxps://secure.logmein.com//activex/ractrl.cab?lmi=928
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-03-29] (Belarc, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave
FF Homepage: hxxps://www.google.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2012-07-31] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-09-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-09-13] (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @vmware.com/vmrc,version=5.5.0.00000 -> C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.5\Firefox\np-vmware-vmrc.dll [2014-06-12] (VMware, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2014-07-11] ()
FF Plugin HKU\S-1-5-21-3430899245-4000864472-1088033590-1281: @asperasoft.com/AsperaConnect -> C:\Users\kores\AppData\Local\Programs\Aspera\Aspera Connect\lib\3.1.1\npasperaweb.dll [2013-03-26] (Aspera, Inc. )
FF Plugin HKU\S-1-5-21-3430899245-4000864472-1088033590-1281: @citrixonline.com/appdetectorplugin -> C:\Users\kores\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-03-07] (Citrix Online)
FF Plugin HKU\S-1-5-21-3430899245-4000864472-1088033590-1281: SkypeForBusinessPlugin-15.8 -> C:\Users\kores\AppData\Local\Microsoft\SkypeForBusinessPlugin\15.8.20020.369\npGatewayNpapi.dll [2015-04-20] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3430899245-4000864472-1088033590-1281: SkypeForBusinessPlugin64-15.8 -> C:\Users\kores\AppData\Local\Microsoft\SkypeForBusinessPlugin\15.8.20020.369\npGatewayNpapi-x64.dll [2015-04-20] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\kores\AppData\Roaming\mozilla\plugins\npatgpc.dll [2013-09-05] (Cisco WebEx LLC)
FF Extension: Panic Button - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave\extensions\{24cea704-946d-11da-a72b-0800200c9a66}.xpi [2015-06-03]
FF Extension: Firebug - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\d63uvxha.default\Extensions\firebug@software.joehewitt.com.xpi [2014-01-19] [not signed]
FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\d63uvxha.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2013-11-06] [not signed]
FF Extension: FlashGot - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\d63uvxha.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-01-31] [not signed]
FF Extension: Adblock Plus - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\d63uvxha.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-17] [not signed]
FF Extension: Firebug - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave\Extensions\firebug@software.joehewitt.com.xpi [2016-02-08]
FF Extension: Installer Management - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave\Extensions\{A95ECCE5-EF19-46bf-847B-3761F41FC4A5} [2015-10-12] [not signed]
FF Extension: Adblock Plus - C:\Users\kores\AppData\Roaming\Mozilla\Firefox\Profiles\9jofb8tm.Grave\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-24]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET Endpoint Security\Mozilla Thunderbird => not found

Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File
CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll => No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll => No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => No File
CHR Plugin: (Software602 Form Filler) - C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll => No File
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\SysWOW64\npDeployJava1.dll => No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll => No File
CHR Profile: C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Store) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08]
CHR Extension: (Disk Google) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Vyhledávání Google) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Store) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-26]
CHR Extension: (Gmail) - C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR HKU\S-1-5-21-3430899245-4000864472-1088033590-1281\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 AuditPro Scan; C:\Program Files (x86)\AuditPro Scan\Scan.exe [2443584 2013-05-07] (truconneXion, a. s.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-29] ()
R2 cbVSCService11; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [File not signed]
R2 CobianBackup11; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [1131008 2013-03-07] (Luis Cobian, CobianSoft) [File not signed]
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4616216 2016-01-20] (Binary Fortress Software)
R2 DkLogger; C:\Windows\SysWOW64\dklog.exe [106496 2007-09-13] (SafeNet, Inc.) [File not signed]
R2 DkTknSrv; C:\Windows\SysWOW64\dkcktkn.exe [737280 2007-09-13] (SafeNet, Inc.) [File not signed]
R2 DkVcm; C:\Windows\SysWOW64\dkvcm.exe [122880 2007-09-13] (SafeNet, Inc.) [File not signed]
S3 EHttpSrv; C:\Program Files\ESET Endpoint Security\ehttpsrv.exe [41160 2015-10-02] (ESET)
R2 ekrn; C:\Program Files\ESET Endpoint Security\x86\ekrn.exe [1576712 2015-10-02] (ESET)
R2 EraAgentSvc; C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe [1605832 2015-09-30] (ESET)
S3 ERA_HTTP_SERVER; C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\EHttpSrv.exe [102088 2015-11-02] (ESET)
R2 ERA_SERVER; C:\Program Files (x86)\ESET\ESET Remote Administrator\Server\era.exe [5187272 2015-11-02] (ESET)
S3 eshasrv; C:\Program Files\ESET Endpoint Security\eshasrv.exe [182984 2015-10-02] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
R2 GSSINS01.exe; C:\PROGRAM FILES (X86)\GORDIC\GINIS\INS01\GSSINS01.exe [34816 2015-10-16] (GORDIC spol. s r. o.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2079520 2012-05-17] (Microsoft Corp.)
R2 MSSQL$SFN; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-08] (Electronic Arts)
R2 postgresql-x64-9.2; C:\GD\PostgreSQL\9.2\bin\pg_ctl.exe [89600 2013-04-02] (PostgreSQL Global Development Group) [File not signed]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 SbieSvc; C:\GD\Sandboxie\SbieSvc.exe [175112 2015-02-18] (Sandboxie Holdings, LLC)
S4 SQLAgent$SFN; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WinVNC4; C:\GD\VNC4\WinVNC4.exe [2069880 2010-06-14] (RealVNC Ltd.)
S2 SKLService; C:\Windows\SysWOW64\KAward\aklservice.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2012-11-06] (Advanced Micro Devices) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-09] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [255272 2015-10-08] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [179920 2012-07-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186272 2015-10-08] (ESET)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [205288 2015-10-08] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [52872 2015-10-08] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69328 2015-10-08] (ESET)
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2014-08-11] ()
R3 iKeyEnum; C:\Windows\System32\DRIVERS\ikeyenum.sys [16160 2011-07-06] (SafeNet, Inc.)
R3 iKeyIFD; C:\Windows\System32\DRIVERS\ikeyifd.sys [22304 2011-07-06] (SafeNet, Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-02] (Logitech Inc.)
R3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [43832 2012-10-02] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-26] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 qcusbser-forge; C:\Windows\System32\DRIVERS\qcusbser.sys [247872 2015-06-08] (FORGE Incorporated)
S3 qcusbwwan-forge; C:\Windows\System32\DRIVERS\qcusbwwan.sys [488512 2015-06-17] (FORGE Incorporated)
S3 RnbToken; C:\Windows\System32\DRIVERS\rnbtoken.sys [24352 2011-07-06] (SafeNet, Inc.)
R3 SbieDrv; C:\GD\Sandboxie\SbieDrv.sys [237064 2015-02-18] (Sandboxie Holdings, LLC)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 esihdrv; \??\C:\Users\kores\AppData\Local\Temp\esihdrv.sys [X]
S3 HWiNFO32; \??\C:\Users\kores\AppData\Local\Temp\HWiNFO64A.SYS [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]
S3 WinRing0_1_2_0; \??\C:\Users\kores\Desktop\Moo0_SystemMonitor_1.64_Portable\Moo0 SystemMonitor 1.64 Portable\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-26 11:21 - 2016-02-26 11:23 - 00038656 _____ C:\Users\kores\Desktop\FRST.txt
2016-02-26 11:20 - 2016-02-26 11:21 - 00000000 ____D C:\FRST
2016-02-26 11:05 - 2016-02-26 11:05 - 00001254 _____ C:\Users\kores\Desktop\VPDescEXCPAC.zip
2016-02-26 11:05 - 2014-09-04 07:14 - 00009464 _____ C:\Users\kores\Desktop\VPDescEXCPAC.agp
2016-02-26 09:18 - 2016-02-26 09:18 - 00049798 _____ C:\Users\kores\Downloads\Grimm.S05E09.720p.HDTV.x264-AVS.srt
2016-02-26 09:18 - 2016-02-26 09:18 - 00049606 _____ C:\Users\kores\Downloads\Grimm.S05E08.720p.HDTV.x264-FLEET.srt
2016-02-26 09:18 - 2016-02-26 09:18 - 00047402 _____ C:\Users\kores\Downloads\Grimm.S05E10.720p.HDTV.x264-KILLERS.srt
2016-02-26 09:18 - 2016-02-26 09:18 - 00040565 _____ C:\Users\kores\Downloads\Grimm.S05E07.PROPER.720p.HDTV.x264-KILLERS.srt
2016-02-26 08:59 - 2016-02-26 09:07 - 1181821535 _____ C:\Users\kores\Downloads\Vikings.S04E02.720p.HDTV.x264-KILLERS.mkv
2016-02-26 08:56 - 2016-02-26 08:58 - 902469005 _____ C:\Users\kores\Downloads\Grimm.S05E10.720p.HDTV.x264-KILLERS.mkv
2016-02-26 08:55 - 2016-02-26 09:04 - 920104882 _____ C:\Users\kores\Downloads\Grimm.S05E07.PROPER.720p.HDTV.x264-KILLERS.mkv
2016-02-26 08:55 - 2016-02-26 08:59 - 1021938519 _____ C:\Users\kores\Downloads\Grimm.S05E09.720p.HDTV.x264-AVS.mkv
2016-02-26 08:55 - 2016-02-26 08:57 - 1076512903 _____ C:\Users\kores\Downloads\Grimm.S05E08.720p.HDTV.x264-FLEET.mkv
2016-02-26 08:45 - 2016-02-26 08:45 - 00000000 ____D C:\Users\kores\Downloads\Sia----1000-Forms-Of-Fear-(2014)---320kbps-+-covers
2016-02-26 08:15 - 2016-02-26 08:22 - 123609752 _____ C:\Users\kores\Downloads\Sia----1000-Forms-Of-Fear-(2014)---320kbps-+-covers.rar
2016-02-24 11:37 - 2016-02-24 11:37 - 00855602 ____N C:\Users\kores\Desktop\Můj T-Mobile - T-Mobile.pdf
2016-02-24 11:36 - 2016-02-24 11:36 - 00126545 _____ C:\Users\kores\Downloads\sumsheet_1879963816.csv
2016-02-24 11:35 - 2016-02-24 11:35 - 00026661 _____ C:\Users\kores\Downloads\F_1879963816.pdf
2016-02-24 11:35 - 2016-02-24 11:35 - 00025541 _____ C:\Users\kores\Downloads\H_1879963816.pdf
2016-02-24 11:17 - 2016-02-24 11:17 - 00000000 ____D C:\Users\kores\Downloads\EDIUS_Pro_7.50_Build_191
2016-02-24 10:21 - 2016-02-24 11:04 - 533115585 _____ C:\Users\kores\Downloads\EDIUS Pro 7.2 +odmena.rar
2016-02-24 10:18 - 2016-02-24 10:51 - 543854260 _____ C:\Users\kores\Downloads\EDIUS_Pro_7.50_Build_191.rar
2016-02-24 10:14 - 2016-02-24 10:14 - 00000000 ____D C:\Users\kores\Downloads\EDIUS-Pro-7.2-build-0437-(x64)
2016-02-24 10:10 - 2016-02-24 10:10 - 00112640 ____N (forum.viry.cz) C:\Users\kores\Desktop\FRSTLauncher.exe
2016-02-24 10:08 - 2016-02-24 10:08 - 02371072 _____ (Farbar) C:\Users\kores\Desktop\FRST64.exe
2016-02-22 22:52 - 2016-02-22 22:52 - 00001157 _____ C:\mbam.txt
2016-02-22 22:52 - 2016-02-22 22:51 - 00002660 _____ C:\mbam.xml
2016-02-22 09:12 - 2016-02-26 09:42 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-22 09:11 - 2016-02-22 09:11 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-02-22 09:11 - 2016-02-22 09:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-02-22 09:11 - 2016-02-22 09:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-02-22 09:11 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-22 09:11 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-22 08:01 - 2016-02-22 12:34 - 00009242 ____N C:\Users\kores\Desktop\viry.txt
2016-02-22 07:56 - 2016-02-22 07:56 - 00000000 ____D C:\Users\kores\Downloads\CrystalDiskInfo6_7_5
2016-02-22 07:55 - 2016-02-22 07:55 - 04669119 _____ C:\Users\kores\Downloads\CrystalDiskInfo6_7_5.zip
2016-02-22 07:54 - 2016-02-22 07:54 - 01511936 _____ C:\Users\kores\Desktop\adwcleaner_5.036.exe
2016-02-22 06:50 - 2016-02-26 10:58 - 00000000 ____D C:\Program Files\trend micro
2016-02-22 06:50 - 2016-02-22 06:50 - 00000000 ____D C:\rsit
2016-02-22 06:47 - 2016-02-22 06:47 - 01222144 _____ C:\Users\kores\Downloads\RSITx64.exe
2016-02-19 09:58 - 2016-02-19 09:58 - 03971793 ____N C:\Users\kores\Desktop\Nové Žádosti.zip
2016-02-19 09:58 - 2016-02-19 09:58 - 00000000 ____D C:\Users\kores\Desktop\Nové Žádosti
2016-02-19 07:36 - 2016-02-19 07:36 - 00000000 ____D C:\Users\kores\Desktop\FW_TrueCam_A7s_2.4L
2016-02-19 07:34 - 2016-02-19 07:36 - 07412133 _____ C:\Users\kores\Downloads\FW_TrueCam_A7s_2.4L.zip
2016-02-19 07:34 - 2016-02-19 07:36 - 06682950 _____ C:\Users\kores\Downloads\FW_TrueCam_A7s_2.4.zip
2016-02-19 07:33 - 2016-02-19 07:33 - 00000000 ____D C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-17 16:53 - 2016-02-17 16:53 - 00000973 ____N C:\Users\kores\Desktop\Daum Potplayer-64 Bits.lnk
2016-02-17 09:22 - 2016-02-17 09:22 - 00025767 ____N C:\Users\kores\Desktop\CP nový - 1.12.2015 Lukáš.xlsx
2016-02-16 12:54 - 2016-02-16 12:55 - 27430932 _____ C:\Users\kores\Downloads\Within-Temptation---Ice-Queen-(Single-Edit).flac
2016-02-16 12:52 - 2016-02-16 12:52 - 00000000 ____D C:\Users\kores\Downloads\within-temptation-ice-queen-single-pres-MultiLoad.cz
2016-02-16 12:51 - 2016-02-16 12:52 - 22061607 _____ C:\Users\kores\Downloads\within-temptation-ice-queen-single-pres-MultiLoad.cz.rar
2016-02-16 12:43 - 2016-02-16 12:47 - 75710981 _____ C:\Users\kores\Downloads\Ortel---2013---Mesita.rar
2016-02-16 12:41 - 2016-02-16 13:05 - 00000000 ____D C:\Users\kores\Desktop\SD Auto
2016-02-16 06:40 - 2016-02-16 06:40 - 00000000 ____D C:\Users\kores\Downloads\TOMAS-ORTEL-ZUSTAN-MYM-DOMOVEM
2016-02-16 06:39 - 2016-02-16 06:43 - 62294783 _____ C:\Users\kores\Downloads\Ortel---2014---Defenestrace.rar
2016-02-16 06:35 - 2016-02-16 06:39 - 76191532 _____ C:\Users\kores\Downloads\TOMAS-ORTEL-ZUSTAN-MYM-DOMOVEM.rar
2016-02-15 10:16 - 2016-02-15 10:16 - 00000000 ____D C:\Users\kores\Desktop\pW
2016-02-15 10:15 - 2016-02-15 10:16 - 00103323 _____ C:\Users\kores\Downloads\pW.zip
2016-02-15 10:14 - 2016-02-15 10:14 - 00002610 ____N C:\Users\kores\Documents\addresses.wbx
2016-02-15 09:35 - 2016-02-15 09:35 - 05543304 _____ C:\Users\kores\Downloads\teamspeak3-server_win32-3.0.12.1.zip
2016-02-15 09:33 - 2016-02-15 09:33 - 01270466 _____ C:\Users\kores\Downloads\ProcessExplorer.zip
2016-02-15 09:29 - 2016-02-15 09:30 - 29057448 _____ (TeamSpeak Systems GmbH) C:\Users\kores\Downloads\TeamSpeak3-Client-win32-3.0.18.2.exe
2016-02-15 07:17 - 2016-02-19 09:56 - 00000000 ____D C:\Users\kores\Desktop\Office 365 NWT - nabídka
2016-02-12 08:24 - 2016-02-12 12:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-12 07:04 - 2016-02-12 07:05 - 00075698 ____N C:\Users\kores\Desktop\Faktura.pdf
2016-02-11 08:32 - 2016-02-11 08:32 - 00020255 ____N C:\Users\kores\Desktop\ceník pronájmu hřišť.pdf
2016-02-11 07:13 - 2016-02-11 07:13 - 00088806 ____N C:\Users\kores\Desktop\Kontakty002.csv
2016-02-11 07:13 - 2016-02-11 07:13 - 00017468 ____N C:\Users\kores\Desktop\Kontakty001.csv
2016-02-11 07:13 - 2016-02-11 07:13 - 00005440 ____N C:\Users\kores\Desktop\Kontakty002.spb
2016-02-11 07:13 - 2016-02-11 07:13 - 00003536 ____N C:\Users\kores\Desktop\Kontakty001.spb
2016-02-11 07:13 - 2016-02-11 07:13 - 00000000 ____D C:\Users\kores\Desktop\BackUp
2016-02-11 06:57 - 2016-02-11 06:57 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2016-02-11 06:57 - 2016-02-11 06:57 - 00000000 ____D C:\Users\kores\AppData\Roaming\Samsung
2016-02-11 06:57 - 2016-02-11 06:57 - 00000000 ____D C:\Users\kores\AppData\Local\Samsung
2016-02-11 06:56 - 2016-02-11 06:56 - 00000000 ____D C:\Users\kores\Documents\samsung
2016-02-10 17:07 - 2016-01-08 09:51 - 00161280 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ss_mdm.sys
2016-02-10 17:07 - 2016-01-08 09:51 - 00127488 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ss_bus.sys
2016-02-10 17:07 - 2016-01-08 09:51 - 00018944 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ss_mdfl.sys
2016-02-10 17:07 - 2016-01-08 09:51 - 00015872 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ss_whnt.sys
2016-02-10 17:07 - 2016-01-08 09:51 - 00015360 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ss_cmnt.sys
2016-02-10 17:03 - 2016-02-10 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-02-10 17:02 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2016-02-10 17:02 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2016-02-10 16:58 - 2016-02-10 17:07 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-02-10 16:57 - 2016-02-10 17:05 - 00000000 ____D C:\ProgramData\Samsung
2016-02-10 16:13 - 2016-02-10 16:14 - 79061256 _____ (Samsung Electronics Co., Ltd.) C:\Users\kores\Downloads\KiesSetup.exe
2016-02-10 15:22 - 2016-02-26 09:24 - 00000000 ____D C:\Users\kores\AppData\Roaming\Spotify
2016-02-10 15:22 - 2016-02-26 06:21 - 00000000 ____D C:\Users\kores\AppData\Local\Spotify
2016-02-10 15:22 - 2016-02-10 15:22 - 00001805 ____N C:\Users\kores\Desktop\Spotify.lnk
2016-02-10 15:22 - 2016-02-10 15:22 - 00001791 _____ C:\Users\kores\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-02-10 15:21 - 2016-02-10 15:21 - 00234712 _____ (Spotify Ltd) C:\Users\kores\Downloads\SpotifySetup.exe
2016-02-10 14:16 - 2016-02-10 14:16 - 00005095 _____ C:\Users\kores\Downloads\ACFanControl_V.6 Acer 8942G.zip
2016-02-10 14:15 - 2016-02-10 14:15 - 00781887 _____ C:\Users\kores\Downloads\ACFanControl_setup.zip
2016-02-10 11:06 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 11:06 - 2016-02-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-10 11:06 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-10 11:06 - 2016-02-06 11:11 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-10 11:06 - 2016-02-06 11:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-10 11:06 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-10 11:06 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-02-10 11:06 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-10 11:06 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-02-10 11:06 - 2016-02-06 10:37 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-02-10 11:06 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 11:06 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-10 11:06 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 11:06 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-10 11:05 - 2016-01-22 21:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-10 11:05 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-10 11:05 - 2016-01-22 07:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 11:05 - 2016-01-22 07:41 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-10 11:05 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-10 11:05 - 2016-01-22 07:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-10 11:05 - 2016-01-22 07:40 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-10 11:05 - 2016-01-22 07:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-10 11:05 - 2016-01-22 07:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-10 11:05 - 2016-01-22 07:32 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-10 11:05 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 11:05 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-10 11:05 - 2016-01-22 07:27 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-10 11:05 - 2016-01-22 07:27 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-10 11:05 - 2016-01-22 07:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 11:05 - 2016-01-22 07:17 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-10 11:05 - 2016-01-22 07:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 11:05 - 2016-01-22 07:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-10 11:05 - 2016-01-22 07:05 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-10 11:05 - 2016-01-22 07:04 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-10 11:05 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-10 11:05 - 2016-01-22 07:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-10 11:05 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-02-10 11:05 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-02-10 11:05 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-02-10 11:05 - 2016-01-22 07:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-10 11:05 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-02-10 11:05 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-02-10 11:05 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-02-10 11:05 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-10 11:05 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-02-10 11:05 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-10 11:05 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-10 11:05 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-10 11:05 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-10 11:05 - 2016-01-22 06:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-10 11:05 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-02-10 11:05 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-02-10 11:05 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-02-10 11:05 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-02-10 11:05 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-10 11:05 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-02-10 11:05 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-02-10 11:05 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-02-10 11:05 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 11:05 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-02-10 11:05 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-10 11:05 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-10 11:05 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-02-10 11:05 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-10 11:05 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-10 11:05 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-02-10 11:05 - 2016-01-11 20:05 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-10 11:05 - 2016-01-11 20:05 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-10 11:05 - 2016-01-11 20:05 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-10 11:05 - 2016-01-11 19:52 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-10 11:05 - 2016-01-11 19:47 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-10 11:05 - 2016-01-11 19:26 - 02610176 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-10 11:05 - 2016-01-11 19:24 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-10 11:05 - 2016-01-11 19:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-10 11:05 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-10 11:05 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-10 11:05 - 2016-01-11 19:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-10 11:05 - 2016-01-11 19:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 11:05 - 2016-01-11 19:14 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-10 11:05 - 2016-01-11 19:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-10 11:05 - 2016-01-11 19:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-10 11:05 - 2016-01-11 19:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-02-10 11:05 - 2016-01-07 18:53 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-10 11:05 - 2016-01-07 18:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-10 11:05 - 2015-12-20 19:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-10 11:05 - 2015-12-20 19:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-02-10 11:05 - 2015-12-20 15:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-10 11:04 - 2016-01-16 20:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-10 11:04 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-02-10 11:03 - 2016-01-22 07:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-10 11:03 - 2016-01-22 07:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-10 11:03 - 2016-01-22 07:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-10 11:03 - 2016-01-22 07:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-10 11:03 - 2016-01-22 07:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-02-10 11:03 - 2016-01-22 07:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-10 11:03 - 2016-01-22 07:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-10 11:03 - 2016-01-22 07:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-10 11:03 - 2016-01-22 07:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-10 11:03 - 2016-01-22 07:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-10 11:03 - 2016-01-22 07:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-02-10 11:03 - 2016-01-22 07:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-10 11:03 - 2016-01-22 07:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-10 11:03 - 2016-01-22 07:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 11:03 - 2016-01-22 07:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-10 11:03 - 2016-01-22 07:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-10 11:03 - 2016-01-22 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-10 11:03 - 2016-01-22 07:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-10 11:03 - 2016-01-22 07:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 11:03 - 2016-01-22 07:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 11:03 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-02-10 11:03 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-02-10 11:03 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-10 11:03 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-10 11:03 - 2016-01-22 07:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 07:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-02-10 11:03 - 2016-01-22 07:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-02-10 11:03 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-02-10 11:03 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-02-10 11:03 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-02-10 11:03 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-10 11:03 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 06:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-10 11:03 - 2016-01-22 06:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-10 11:03 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-02-10 11:03 - 2016-01-22 06:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-10 11:03 - 2016-01-22 05:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-10 11:03 - 2016-01-22 05:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-10 11:03 - 2016-01-22 05:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-10 11:03 - 2016-01-22 05:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-10 11:03 - 2016-01-22 05:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-10 11:03 - 2016-01-22 05:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-02-10 11:03 - 2016-01-22 05:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-02-10 11:03 - 2016-01-22 05:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-02-10 11:03 - 2016-01-22 05:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-02-10 11:03 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-02-10 11:03 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 11:03 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 11:02 - 2016-01-22 07:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-10 11:02 - 2016-01-22 07:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-10 11:02 - 2016-01-22 07:12 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-10 11:02 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-10 11:02 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-02-10 11:02 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-10 11:02 - 2016-01-22 06:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-10 11:02 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-02-09 11:20 - 2016-02-09 11:20 - 28705763 _____ C:\Users\kores\Downloads\40POK0147612X01.ZIP
2016-02-08 12:32 - 2016-02-08 12:32 - 00052682 _____ C:\Users\kores\Downloads\Faktura_2016072.pdf
2016-02-08 10:58 - 2016-02-08 10:58 - 06499825 ____N C:\Users\kores\Desktop\příloha 3.3 doklady.rar
2016-02-08 10:57 - 2016-02-08 10:57 - 05309625 ____N C:\Users\kores\Desktop\příloha 3.1 k vyúčtování Mládež.rar
2016-02-08 07:13 - 2016-02-10 10:10 - 00000000 ____D C:\Users\kores\Desktop\Tiskárny - nabídky
2016-02-08 06:37 - 2016-02-10 06:50 - 00000000 ____D C:\Users\kores\Desktop\Prime
2016-02-08 06:37 - 2016-02-08 06:37 - 03980503 _____ C:\Users\kores\Downloads\p95v266.zip
2016-02-08 06:37 - 2016-02-08 06:37 - 03896279 _____ C:\Users\kores\Downloads\p64v266.zip
2016-02-01 09:44 - 2016-02-01 09:44 - 00076938 ____N C:\Users\kores\Desktop\KK 2_2016.pdf
2016-02-01 09:28 - 2016-02-17 12:51 - 00000000 ___RD C:\Users\kores\Desktop\T-Mobile
2016-02-01 09:04 - 2016-02-01 09:05 - 00000000 ____D C:\Users\kores\Desktop\ISP 2016
2016-02-01 08:09 - 2016-02-01 08:09 - 00306151 _____ C:\Users\kores\Downloads\MakeAVI-0.11.zip
2016-02-01 08:09 - 2016-02-01 08:09 - 00000000 ____D C:\Users\kores\Downloads\MakeAVI-0.11
2016-01-29 09:09 - 2016-01-29 09:09 - 00000000 ____D C:\Users\kores\Downloads\Chinaski - Rockfield
2016-01-29 08:07 - 2016-01-29 08:12 - 98949546 _____ C:\Users\kores\Downloads\Chinaski - Rockfield.rar
2016-01-29 08:05 - 2016-01-29 08:10 - 79199548 _____ C:\Users\kores\Downloads\Chinaski---Rockfield-(2014).zip
2016-01-28 08:23 - 2016-01-28 08:23 - 00000543 ____N C:\Users\kores\Desktop\TONERY.xlsx – zástupce.lnk
2016-01-28 07:53 - 2016-01-28 08:25 - 570196744 _____ C:\Users\kores\Downloads\EDIUS-Pro-7.2-build-0437-(x64)(1).rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-26 11:16 - 2015-06-18 09:05 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281UA.job
2016-02-26 11:16 - 2012-02-06 08:33 - 00000120 _____ C:\Windows\system32\config\netlogon.ftl
2016-02-26 11:15 - 2013-02-28 08:27 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-26 11:10 - 2014-09-08 06:49 - 00000000 ____D C:\Users\kores\AppData\Local\DisplayFusion
2016-02-26 10:45 - 2012-04-11 08:35 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-26 10:35 - 2014-03-07 09:58 - 00000562 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job
2016-02-26 10:34 - 2015-04-22 09:50 - 00000000 ____D C:\Users\kores\AppData\Local\848CF3AF-77C8-456E-92D1-E8057A495855.aplzod
2016-02-26 10:24 - 2015-05-31 15:39 - 00000658 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job
2016-02-26 08:53 - 2012-02-06 09:12 - 00000000 ____D C:\Users\kores\AppData\Roaming\vlc
2016-02-26 08:42 - 2011-04-12 09:34 - 00738330 _____ C:\Windows\system32\perfh005.dat
2016-02-26 08:42 - 2011-04-12 09:34 - 00167456 _____ C:\Windows\system32\perfc005.dat
2016-02-26 08:42 - 2009-07-14 06:13 - 01778880 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-26 08:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-02-26 08:32 - 2014-09-10 11:35 - 00003958 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{37857161-9103-4D66-B69F-766B770D10B4}
2016-02-26 07:06 - 2013-08-16 06:44 - 00000000 ____D C:\ProgramData\Origin
2016-02-26 07:06 - 2013-08-07 08:48 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-26 06:51 - 2014-10-17 11:04 - 00000000 ____D C:\ProgramData\ADS
2016-02-26 06:37 - 2012-04-03 11:22 - 00000000 ____D C:\Users\kores\Documents\Soubory aplikace Outlook
2016-02-26 06:34 - 2012-02-06 12:51 - 00002228 ____H C:\Users\kores\Documents\Default.rdp
2016-02-26 06:25 - 2013-04-23 17:51 - 00000000 ___RD C:\Users\kores\Dropbox
2016-02-26 06:23 - 2013-04-23 17:48 - 00000000 ____D C:\Users\kores\AppData\Roaming\Dropbox
2016-02-26 06:23 - 2009-07-14 05:45 - 00031904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-26 06:23 - 2009-07-14 05:45 - 00031904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-26 06:22 - 2012-05-09 08:43 - 00000000 ____D C:\Users\kores\AppData\Roaming\602Installer
2016-02-26 06:20 - 2015-07-13 15:15 - 00000000 ___RD C:\Users\kores\Disk Google
2016-02-26 06:19 - 2014-10-21 18:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-26 06:19 - 2013-02-28 08:27 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-26 02:16 - 2015-06-18 09:05 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281Core.job
2016-02-24 17:13 - 2015-08-20 11:59 - 00000000 ____D C:\ProgramData\NVIDIA
2016-02-24 17:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-24 11:36 - 2012-07-16 06:40 - 00000000 ____N C:\Users\kores\Documents\Print2PDF
2016-02-24 11:22 - 2012-02-06 08:54 - 00000000 ____D C:\Program Files\WinRAR
2016-02-23 08:26 - 2014-01-28 19:07 - 00000000 ____D C:\Users\kores\Documents\adl
2016-02-22 20:05 - 2014-09-30 12:32 - 00000000 ____D C:\Windows\rescache
2016-02-22 10:05 - 2015-05-31 15:39 - 00003678 _____ C:\Windows\System32\Tasks\G2MUploadTask-S-1-5-21-3430899245-4000864472-1088033590-1281
2016-02-22 10:05 - 2014-03-07 09:58 - 00003582 _____ C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3430899245-4000864472-1088033590-1281
2016-02-22 09:11 - 2012-10-18 07:16 - 00000000 ____D C:\Users\kores\AppData\Roaming\Malwarebytes
2016-02-22 09:11 - 2012-10-18 07:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-22 07:55 - 2015-05-11 08:32 - 00000000 ____D C:\Users\kores\Downloads\teenage-mutant-ninja-turtles-2014-ost-pres-MultiLoad.cz
2016-02-22 07:18 - 2013-02-28 08:28 - 00002212 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-22 06:49 - 2015-09-23 15:43 - 00000000 ____D C:\Users\kores\AppData\Local\MEGAsync
2016-02-22 06:27 - 2015-02-26 07:01 - 00000000 ____D C:\Users\kores\AppData\Local\Steam
2016-02-22 06:12 - 2009-07-14 05:45 - 00418608 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-19 10:29 - 2013-08-12 14:35 - 00000000 ____D C:\Windows\system32\MRT
2016-02-19 10:16 - 2012-02-06 13:33 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-19 10:15 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2016-02-19 10:10 - 2012-02-10 09:23 - 01753594 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-02-18 07:06 - 2013-04-26 06:27 - 00000000 ___RD C:\Users\kores\Podcasts
2016-02-17 12:36 - 2015-12-04 08:11 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-17 08:07 - 2015-07-21 06:27 - 00001708 ____N C:\Users\kores\Desktop\Docházka.lnk
2016-02-16 11:00 - 2015-12-08 09:35 - 00000348 ____N C:\Users\kores\Desktop\Pepa.txt
2016-02-15 13:18 - 2014-06-23 06:53 - 00000000 ____D C:\Users\kores\AppData\Local\CrashDumps
2016-02-15 09:54 - 2014-10-21 18:45 - 00000000 ____D C:\Users\kores\AppData\Roaming\TS3Client
2016-02-15 09:46 - 2014-10-21 18:45 - 00000000 ____D C:\Users\kores\AppData\Local\TeamSpeak 3 Client
2016-02-15 09:34 - 2013-09-26 14:20 - 00000000 ____D C:\Process Explorer
2016-02-15 00:00 - 2014-05-12 06:52 - 00000000 ____D C:\Program Files (x86)\AuditPro Scan
2016-02-12 12:57 - 2012-10-31 08:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-10 17:00 - 2012-02-03 11:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-10 16:48 - 2012-08-22 15:38 - 00000000 ____D C:\Users\kores\AppData\Local\Downloaded Installations
2016-02-10 15:32 - 2015-10-27 18:27 - 00000000 ____D C:\Users\kores\AppData\Roaming\VMware
2016-02-10 14:01 - 2012-02-10 09:21 - 00000000 ____D C:\Users\kores\AppData\Roaming\Gordic
2016-02-10 08:45 - 2012-04-11 08:35 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 08:45 - 2012-04-11 08:35 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-10 08:45 - 2012-02-06 13:22 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-08 15:59 - 2016-01-13 13:21 - 00027368 ____N C:\Users\kores\Documents\AuditPro3.xml
2016-02-08 14:50 - 2015-05-14 08:03 - 00566306 ____N C:\Users\kores\Desktop\GSAPOD01.net.txt
2016-02-08 06:24 - 2013-08-16 06:44 - 00000000 ____D C:\Program Files (x86)\Origin
2016-02-05 09:24 - 2013-04-09 10:25 - 00000000 ____D C:\Users\kores\Desktop\certifikát
2016-02-05 08:52 - 2012-10-25 06:46 - 00000000 ____D C:\Program Files\ESET Endpoint Security
2016-02-02 00:10 - 2013-02-28 08:27 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-02 00:10 - 2013-02-28 08:27 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-30 22:11 - 2015-07-13 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

==================== Files in the root of some directories =======

2013-04-19 14:06 - 2013-04-19 14:06 - 0038499 _____ () C:\Users\kores\AppData\Roaming\Hodnoty oddělené čárkami (Windows).ADR
2012-04-16 08:53 - 2015-11-26 12:58 - 0001456 _____ () C:\Users\kores\AppData\Local\Adobe Save for Web 12.0 Prefs
2012-06-07 10:24 - 2012-06-07 10:24 - 0003584 _____ () C:\Users\kores\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-14 06:45 - 2014-08-14 06:45 - 0000001 _____ () C:\Users\kores\AppData\Local\llftool.4.40.agreement
2012-09-04 08:52 - 2015-11-03 14:20 - 0000600 _____ () C:\Users\kores\AppData\Local\PUTTY.RND
2016-01-18 10:54 - 2016-01-18 10:54 - 0011902 _____ () C:\Users\kores\AppData\Local\recently-used.xbel
2013-11-15 10:15 - 2015-09-07 14:51 - 0007599 _____ () C:\Users\kores\AppData\Local\resmon.resmoncfg
2012-02-06 13:37 - 2014-02-04 11:02 - 0279504 _____ () C:\Users\kores\AppData\Local\SRDownloader.err
2012-04-02 07:08 - 2012-04-02 07:26 - 0000240 _____ () C:\Users\kores\AppData\Local\SRDownloader.log
2012-02-06 13:17 - 2014-02-10 08:20 - 0001696 _____ () C:\Users\kores\AppData\Local\SRDownloader.nast
2013-10-03 07:22 - 2013-11-26 11:13 - 0000041 ___SH () C:\ProgramData\.zreglib

Files to move or delete:
====================
C:\Users\kores\DataRefreshUI_5.2.0.5400.dll
C:\Users\kores\postgresql_92.exe


Some files in TEMP:
====================
C:\Users\kores\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuikg2a.dll
C:\Users\kores\AppData\Local\Temp\GUR123D.exe
C:\Users\kores\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\kores\AppData\Local\Temp\procexp64.exe
C:\Users\kores\AppData\Local\Temp\scan.dll
C:\Users\kores\AppData\Local\Temp\ytd-upgrade.exe
C:\Users\xx\AppData\Local\Temp\_is1267.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================

FastStone Photo Resizer 3.5 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.5 - FastStone Soft.)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AuditPro Scan.job => Scan exe /TCP 777 /SERVICE kores AuditPro client installation
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281Core.job => C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3430899245-4000864472-1088033590-1281UA.job => C:\Users\kores\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job => C:\Users\kores\AppData\Local\Citrix\GoToMeeting\4431\g2mupdate.exe
Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-3430899245-4000864472-1088033590-1281.job => C:\Users\kores\AppData\Local\Citrix\GoToMeeting\4431\g2mupload.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Endpoint Security 6.2.2033.1 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Endpoint Security 6.2.2033.1 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\kores\Desktop" je 32044 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT
Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDD Regenerator
C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center
%windir%\WindowsMobile\wmdc.exe [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

MBAM odinstalujte. Aktivoval jste zkusebni verzi, tim se zapl stit a bude se prat s Esetem. Nebo aspon vypnete jeho stity.


Vypnete trvale Windows Defender.

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\kores\Desktop" je 32044 MB.

Velikost plochy by nemela presahovat 200 - 300 MB! Brzdi to chod pc. Cili ji trosku uklidte a na plochu dejte jen zastupce. Jen pozor na obcasnou chybu, ze uzivatele maji na plose slozku, v ni dalsi a v ni dalsi a do te to schovaji. To je sice hezke, ale plochu to nezmensi, jen je to v jinem supliku


Kancelar, kolegyne, to je pracovni/firemni pocitac?

Ano je to firemní počítač. MBAM smažu, defender je vyplý, plocha - mám toho hodně už v zástupcích jen sem si neuvědomil, že toho mám ještě tolik v normálních souborech díky za info


# AdwCleaner v5.036 - Logfile created 26/02/2016 at 13:27:04
# Updated 22/02/2016 by Xplode
# Database : 2016-02-22.1 [Local]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : kores - KORES-W7
# Running from : C:\Users\kores\Desktop\adwcleaner_5.036.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****

[-] File Deleted : C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\kores\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [978 bytes] - [26/02/2016 13:27:04]
C:\AdwCleaner\AdwCleaner[S1].txt - [1024 bytes] - [26/02/2016 13:17:10]
C:\AdwCleaner\AdwCleaner[S2].txt - [1098 bytes] - [26/02/2016 13:25:20]
C:\AdwCleaner\AdwCleaner[S3].txt - [1172 bytes] - [26/02/2016 13:26:19]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1269 bytes] ##########

Grave D. píše:Ano je to firemní počítač.

Pak je mi lito, ale pravidla fora mi nedovoluji pokracovat.

http://forum.viry.cz/viewtopic.php?f=12&t=5601

6. Fórum viry.cz se nezabývá odvirováním firemních PC - na toto jsou ve firmách placení (a někdy až hodně nadstandardně) IT technici, případně si je firma může najmout. My jsme tu zdarma a ve svém volném čase, nehodláme dělat práci za někoho jiného, kdo si pak jen slízne smetánku a plat. Taktéž ani neposkytujeme poradenství v oblasti zabezpečení firemních sítí či nastavení firemních sítí. Zkrátka a jednoduše, naše fórum poskytuje podporu pouze domácím uživatelům.

Omlouvam se, nevedel jsem. prominte, ze jsem zdrzoval a dekuji za rady a Vas cas. Pekny den

No bohuzel nemate zac

Mejte se a treba zase nekdy, snad s lepsim vysledkem