VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Franni1828 at 2016-02-19 21:40:02
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 140 GB (46%) free of 305 GB
Total RAM: 4044 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:40:08, on 19.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe
C:\Program Files (x86)\WinZip\FAHWindow32.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Franni1828.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKCU\..\Run: [Advanced SystemCare 9] "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [MyComGames] "C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe" -autostart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: FAH.lnk = C:\Program Files (x86)\WinZip\FAHConsole.exe
O4 - Global Startup: Update Notifier.lnk = C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files (x86)\WinZip\WzPreloader.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8743 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"taskhost.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
"C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe"
"C:\Program Files (x86)\WinZip\FAHWindow32.exe" register
"C:\Program Files (x86)\WinZip\FAHWindow64.exe" register
"C:\Program Files (x86)\WinZip\WzPreloader.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
taskeng.exe {5F94902D-C64A-4795-A040-766D6A775559}
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /SkipUac
"C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe" /skipuac
"C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe" -updated -lowermode
"C:\Windows\system32\gwx\gwx.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4004.0.778091775\1300146568" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,24,52,62 --gpu-vendor-id=0x10de --gpu-device-id=0x1189 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.6175 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4004.2.731234118\819163923" --font-cache-shared-handle=3240 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4004.3.1315475317\1794221639" --font-cache-shared-handle=3136 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4004.6.981235383\1639678028" --ppapi-flash-args --lang=cs --device-scale-factor=1 --font-cache-shared-handle=1820 --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4004.16.1011167147\435978396" --font-cache-shared-handle=5552 /prefetch:673131151
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe" /starttips
"C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe" /startup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/*CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/*ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4004.103.1837581681\546161994" --font-cache-shared-handle=7004 /prefetch:673131151

"C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-186531883534648264013408010891933820020-995491350-284217974-350879989-1076874210
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Disabled/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/*CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/1DaySingleProfile/*ExtensionActionRedesign/Default/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/PP_Ethersuggest_A3_Stable_R8/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/*QUIC/EnabledNoId/*ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/SlimmingPaint/EnableSlimmingPaint/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/WebRTC-LocalIPPermissionCheck/Default/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4004.128.129749578\1523725452" --font-cache-shared-handle=1632 /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe292_ Global\UsGthrCtrlFltPipeMssGthrPipe292 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Franni1828\Downloads\RSITx64 (1).exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12 2472224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-04-01 672032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-02-06 8781568]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-12 2787264]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-01-12 1860120]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 9"=C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2015-11-30 2010912]
"MyComGames"=C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe [2016-02-24 4813680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2015-11-12 5893920]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files (x86)\WinZip\FAHConsole.exe
Update Notifier.lnk - C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe
WinZip Preloader.lnk - C:\Program Files (x86)\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-29 16:15:35 ----A---- C:\Windows\SYSWOW64\IObitSmartDefragExtension.dll
2016-02-29 16:15:35 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2016-02-29 16:15:35 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2016-02-29 16:15:33 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2016-02-29 16:15:03 ----D---- C:\Users\Franni1828\AppData\Roaming\Apple Computer
2016-02-23 23:16:44 ----A---- C:\Windows\system32\YamahaAE2.dll
2016-02-23 23:16:43 ----A---- C:\Windows\system32\YamahaAE.dll
2016-02-23 23:16:38 ----A---- C:\Windows\system32\WavesGUILib64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\SYSWOW64\SRCOM.dll
2016-02-23 23:16:37 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tossaemaxapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tossaeapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\toseaeapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tosasfapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tosade.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tepeqapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tadefxapo264.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tadefxapo.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSWOW64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSTSX64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSTSH64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSHP64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRRPTR64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRCOM64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRCOM.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRAPO64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\sltech64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\slprp64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\slcnt64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\sl3apo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFSS_APO.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFNHK64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFCOM64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFAPO64.dll
2016-02-23 23:16:36 ----A---- C:\Windows\SYSWOW64\SECOMN32.DLL
2016-02-23 23:16:36 ----A---- C:\Windows\system32\SEHDRA64.dll
2016-02-23 23:16:36 ----A---- C:\Windows\system32\SECOMN64.dll
2016-02-23 23:16:36 ----A---- C:\Windows\system32\SEAPO64.dll
2016-02-23 23:16:34 ----A---- C:\Windows\system32\RtPgEx64.dll
2016-02-23 23:16:34 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2016-02-23 23:16:31 ----A---- C:\Windows\system32\SETE1C9.tmp
2016-02-23 23:16:31 ----A---- C:\Windows\system32\SET155C.tmp
2016-02-23 23:16:31 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2016-02-23 23:16:31 ----A---- C:\Windows\system32\drivers\rtkSSTsetting.dat
2016-02-23 23:16:30 ----A---- C:\Windows\system32\SET449C.tmp
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEEP64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEEL64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEEG64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEED64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RtDataProc64.dll
2016-02-23 23:16:28 ----A---- C:\Windows\system32\RTCOM64.dll
2016-02-23 23:16:27 ----A---- C:\Windows\system32\RP3DHT64.dll
2016-02-23 23:16:27 ----A---- C:\Windows\system32\RP3DAA64.dll
2016-02-23 23:16:27 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2016-02-23 23:16:26 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2016-02-23 23:16:26 ----A---- C:\Windows\system32\SET3BC0.tmp
2016-02-23 23:16:23 ----A---- C:\Windows\system32\RCoRes64.dat
2016-02-23 23:16:23 ----A---- C:\Windows\system32\RCoInstII64.dll
2016-02-23 23:16:21 ----A---- C:\Windows\system32\R4EEP64A.dll
2016-02-23 23:16:21 ----A---- C:\Windows\system32\R4EEL64A.dll
2016-02-23 23:16:21 ----A---- C:\Windows\system32\R4EEG64A.dll
2016-02-23 23:16:20 ----A---- C:\Windows\system32\R4EED64A.dll
2016-02-23 23:16:20 ----A---- C:\Windows\system32\R4EEA64A.dll
2016-02-23 23:16:19 ----A---- C:\Windows\system32\NAHIMICV2apo.dll
2016-02-23 23:16:19 ----A---- C:\Windows\system32\NahimicAPONSControl.dll
2016-02-23 23:16:18 ----A---- C:\Windows\system32\NAHIMICAPOlfx.dll
2016-02-23 23:16:18 ----A---- C:\Windows\system32\MISS_APO.dll
2016-02-23 23:16:16 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-02-23 23:16:14 ----A---- C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-02-23 23:16:13 ----A---- C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-02-23 23:16:11 ----A---- C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-02-23 23:16:11 ----A---- C:\Windows\system32\MaxxSpeechAPO64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO7064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO6064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO5064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\KAAPORT64.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\IntelSstCApoPropPage.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\IntelSSTAPO.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\ICEsoundAPO64.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\HiFiDAX2API.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\FMAPO64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DolbyDAX2APOv211.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DolbyDAX2APOv201.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DolbyDAX2APOProp.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPP64AF3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPP64A.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPO64AF3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPO64A.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPD64AF3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPD64A.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPA64F3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPA64.dll
2016-02-23 23:16:06 ----A---- C:\Windows\system32\CX64APO.dll
2016-02-23 23:16:06 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-02-23 23:16:06 ----A---- C:\Windows\system32\audioLibVc.dll
2016-02-23 23:16:05 ----A---- C:\Windows\system32\AERTAR64.dll
2016-02-23 23:16:05 ----A---- C:\Windows\system32\AERTAC64.dll
2016-02-23 23:16:05 ----A---- C:\Windows\system32\AcpiServiceVnA64.dll
2016-02-19 21:40:03 ----D---- C:\Program Files\trend micro
2016-02-19 17:22:59 ----AH---- C:\aaw7boot.cmd
2016-02-19 17:22:59 ----A---- C:\Windows\system32\lsdelete.exe
2016-02-19 17:13:56 ----DC---- C:\Windows\system32\DRVSTORE
2016-02-19 17:13:56 ----A---- C:\Windows\system32\drivers\Lbd.sys
2016-02-19 17:10:45 ----HDC---- C:\ProgramData\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2016-02-19 17:10:38 ----D---- C:\ProgramData\Lavasoft
2016-02-19 17:10:38 ----D---- C:\Program Files (x86)\Lavasoft
2016-02-14 08:43:09 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-02-14 08:35:12 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-02-14 08:35:12 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-02-14 08:35:12 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-02-14 08:35:12 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-02-14 08:35:12 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-02-14 08:35:12 ----A---- C:\Windows\system32\nvopencl.dll
2016-02-14 08:35:12 ----A---- C:\Windows\system32\nvoglv64.dll
2016-02-14 08:35:12 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-02-14 08:35:11 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-02-14 08:35:11 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-02-14 08:35:11 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-02-14 08:35:11 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-02-14 08:35:11 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-02-14 08:35:11 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\nvinitx.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\NvIFR64.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\NvFBC64.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\nvdispgenco6436175.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\nvdispco6436175.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\nvcuvid.dll
2016-02-14 08:35:11 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-02-14 08:35:10 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-02-14 08:35:10 ----A---- C:\Windows\system32\nvcuda.dll
2016-02-14 08:35:07 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-02-14 08:35:07 ----A---- C:\Windows\system32\nvcompiler.dll
2016-02-14 08:20:37 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-14 08:20:35 ----D---- C:\Windows\SYSWOW64\Macromed
2016-02-14 08:20:32 ----D---- C:\Windows\system32\Macromed
2016-02-14 08:18:22 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-02-14 08:15:52 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-02-14 08:15:51 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-02-14 08:14:42 ----D---- C:\ProgramData\Package Cache
2016-02-11 16:32:40 ----D---- C:\Users\Franni1828\AppData\Roaming\NVIDIA
2016-02-11 16:32:17 ----D---- C:\Program Files (x86)\Geeks3D
2016-02-10 17:15:55 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-02-10 17:15:55 ----A---- C:\Windows\system32\jnwmon.dll
2016-02-10 17:15:55 ----A---- C:\Windows\system32\InkEd.dll
2016-02-10 17:15:50 ----A---- C:\Windows\system32\appraiser.dll
2016-02-10 17:15:49 ----A---- C:\Windows\system32\generaltel.dll
2016-02-10 17:15:49 ----A---- C:\Windows\system32\aeinv.dll
2016-02-10 17:15:48 ----A---- C:\Windows\system32\invagent.dll
2016-02-10 17:15:48 ----A---- C:\Windows\system32\devinv.dll
2016-02-10 17:15:48 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-02-10 17:15:48 ----A---- C:\Windows\system32\acmigration.dll
2016-02-10 17:15:43 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-10 17:15:43 ----A---- C:\Windows\system32\iertutil.dll
2016-02-10 17:15:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-10 17:15:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-10 17:15:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-02-10 17:15:41 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-10 17:15:40 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-02-10 17:15:40 ----A---- C:\Windows\system32\urlmon.dll
2016-02-10 17:15:40 ----A---- C:\Windows\system32\ieui.dll
2016-02-10 17:15:40 ----A---- C:\Windows\system32\ieframe.dll
2016-02-10 17:15:39 ----A---- C:\Windows\system32\mshtml.dll
2016-02-10 17:15:39 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-02-10 17:15:18 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 17:15:18 ----A---- C:\Windows\system32\inseng.dll
2016-02-10 17:15:18 ----A---- C:\Windows\system32\iernonce.dll
2016-02-10 17:15:18 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-10 17:15:18 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-10 17:15:18 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-10 17:15:17 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 17:15:17 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-02-10 17:15:17 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 17:15:16 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 17:15:16 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-02-10 17:15:16 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 17:15:16 ----A---- C:\Windows\system32\occache.dll
2016-02-10 17:15:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 17:15:16 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-10 17:15:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-02-10 17:15:15 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-02-10 17:15:15 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-02-10 17:15:15 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 17:15:15 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-10 17:15:15 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-10 17:15:14 ----A---- C:\Windows\system32\iesetup.dll
2016-02-10 17:15:14 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-10 17:15:13 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 17:15:13 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 17:15:13 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-02-10 17:15:13 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-02-10 17:15:13 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-02-10 17:15:13 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 17:15:13 ----A---- C:\Windows\system32\vbscript.dll
2016-02-10 17:15:13 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-10 17:15:12 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-10 17:15:11 ----A---- C:\Windows\system32\webcheck.dll
2016-02-10 17:15:11 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-10 17:15:11 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-10 17:15:11 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-10 17:15:11 ----A---- C:\Windows\system32\jscript9.dll
2016-02-10 17:15:11 ----A---- C:\Windows\system32\jscript.dll
2016-02-10 17:15:10 ----A---- C:\Windows\system32\wininet.dll
2016-02-10 17:15:09 ----A---- C:\Windows\system32\msrating.dll
2016-02-10 17:15:09 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-10 17:14:09 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 17:14:07 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-10 17:14:07 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-02-10 17:14:07 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-10 17:14:07 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-10 17:14:07 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wups2.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wups.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wudriver.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wucltux.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wuapp.exe
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wuapi.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 17:14:07 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-02-10 17:14:00 ----A---- C:\Windows\system32\win32k.sys
2016-02-10 17:13:46 ----A---- C:\Windows\system32\ole32.dll
2016-02-10 17:13:41 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-02-10 17:12:56 ----A---- C:\Windows\system32\EncDec.dll
2016-02-10 17:12:56 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-10 17:12:55 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 17:12:55 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 17:12:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 17:12:55 ----A---- C:\Windows\system32\ntdll.dll
2016-02-10 17:12:54 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-10 17:12:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-02-10 17:12:53 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 17:12:53 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-10 17:12:53 ----A---- C:\Windows\system32\kerberos.dll
2016-02-10 17:12:51 ----A---- C:\Windows\system32\kernel32.dll
2016-02-10 17:12:50 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-02-10 17:12:50 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 17:12:50 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 17:12:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 17:12:50 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-02-10 17:12:50 ----A---- C:\Windows\system32\advapi32.dll
2016-02-10 17:12:49 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 17:12:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-10 17:12:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-10 17:12:47 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-10 17:12:45 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-10 17:12:44 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-02-10 17:12:44 ----A---- C:\Windows\system32\smss.exe
2016-02-10 17:12:44 ----A---- C:\Windows\system32\schannel.dll
2016-02-10 17:12:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 17:12:43 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\wow64win.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\winsrv.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\srcore.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-10 17:12:43 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-10 17:12:42 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-02-10 17:12:42 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-02-10 17:12:42 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-02-10 17:12:42 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-02-10 17:12:42 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\wow64cpu.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\wow64.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\wdigest.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\sspicli.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\srclient.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\lsass.exe
2016-02-10 17:12:42 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 17:12:42 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-10 17:12:42 ----A---- C:\Windows\system32\conhost.exe
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 17:12:41 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-02-10 17:12:41 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-02-10 17:12:41 ----A---- C:\Windows\system32\secur32.dll
2016-02-10 17:12:41 ----A---- C:\Windows\system32\rstrui.exe
2016-02-10 17:12:41 ----A---- C:\Windows\system32\ntvdm64.dll
2016-02-10 17:12:41 ----A---- C:\Windows\system32\credssp.dll
2016-02-10 17:12:41 ----A---- C:\Windows\system32\auditpol.exe
2016-02-10 17:12:41 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-10 17:12:40 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 17:12:40 ----A---- C:\Windows\SYSWOW64\user.exe
2016-02-10 17:12:39 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-02-10 17:12:39 ----A---- C:\Windows\system32\adtschema.dll
2016-02-10 17:12:38 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-02-10 17:12:38 ----A---- C:\Windows\system32\msaudite.dll
2016-02-10 17:12:37 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-02-10 17:12:37 ----A---- C:\Windows\system32\msobjs.dll
2016-02-10 17:11:35 ----A---- C:\Windows\system32\shell32.dll
2016-02-10 17:11:33 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-02-10 17:11:33 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-02-10 17:11:33 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-02-10 17:11:33 ----A---- C:\Windows\explorer.exe
2016-02-10 17:11:32 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2016-02-10 17:11:32 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-02-10 17:11:32 ----A---- C:\Windows\system32\authui.dll
2016-02-09 15:56:59 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-09 15:56:59 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-06 21:50:21 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2016-02-06 21:50:21 ----A---- C:\Windows\system32\RtkCfg64.dll
2016-02-06 21:50:21 ----A---- C:\Windows\system32\RtkApi64.dll
2016-02-06 21:50:21 ----A---- C:\Windows\system32\RltkAPO64.dll
2016-02-01 21:45:25 ----D---- C:\Free 3GP Video Converter
2016-02-01 21:45:13 ----D---- C:\Program Files (x86)\DVDVideoSoft
2016-02-01 21:44:14 ----D---- C:\Users\Franni1828\AppData\Roaming\DVDVideoSoft
2016-01-29 23:14:51 ----D---- C:\Program Files (x86)\Guitar Pro 5
2016-01-29 22:54:38 ----D---- C:\ProgramData\WinZip
2016-01-29 22:54:26 ----D---- C:\Program Files (x86)\WinZip

======List of files/folders modified in the last 1 month======

2016-02-29 16:16:06 ----D---- C:\ProgramData\ProductData
2016-02-29 16:15:35 ----D---- C:\Windows\SysWOW64
2016-02-29 16:15:35 ----D---- C:\ProgramData\IObit
2016-02-29 16:15:29 ----D---- C:\Program Files (x86)\IObit
2016-02-29 16:15:27 ----D---- C:\Users\Franni1828\AppData\Roaming\IObit
2016-02-27 03:01:06 ----D---- C:\Windows\winsxs
2016-02-27 03:01:00 ----SD---- C:\Windows\SYSWOW64\GWX
2016-02-27 03:01:00 ----SD---- C:\Windows\system32\GWX
2016-02-26 21:02:08 ----D---- C:\Windows
2016-02-23 23:21:10 ----D---- C:\Windows\system32\catroot
2016-02-23 23:20:14 ----D---- C:\Windows\system32\DAX2
2016-02-23 23:19:08 ----D---- C:\Windows\SYSWOW64\RTCOM
2016-02-23 23:18:58 ----D---- C:\Windows\inf
2016-02-23 23:18:56 ----D---- C:\Windows\system32\catroot2
2016-02-23 23:18:47 ----D---- C:\Windows\system32\DriverStore
2016-02-19 21:40:04 ----D---- C:\Windows\Temp
2016-02-19 21:40:03 ----RD---- C:\Program Files
2016-02-19 17:22:59 ----D---- C:\Windows\System32
2016-02-19 17:15:13 ----D---- C:\Windows\system32\Tasks
2016-02-19 17:13:56 ----D---- C:\Windows\system32\drivers
2016-02-19 17:10:45 ----SHD---- C:\Windows\Installer
2016-02-19 17:10:45 ----HD---- C:\ProgramData
2016-02-19 17:10:38 ----RD---- C:\Program Files (x86)
2016-02-19 17:08:15 ----SHD---- C:\System Volume Information
2016-02-17 16:50:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-17 16:48:35 ----D---- C:\Windows\system32\config
2016-02-17 16:44:12 ----D---- C:\ProgramData\NVIDIA
2016-02-14 08:49:32 ----D---- C:\Windows\SoftwareDistribution
2016-02-14 08:46:11 ----D---- C:\Windows\debug
2016-02-14 08:43:42 ----D---- C:\ProgramData\NVIDIA Corporation
2016-02-14 08:43:16 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-02-14 08:39:41 ----D---- C:\Program Files\NVIDIA Corporation
2016-02-14 08:20:39 ----D---- C:\Windows\Tasks
2016-02-14 08:15:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2016-02-12 22:24:35 ----D---- C:\Windows\Prefetch
2016-02-11 21:27:48 ----D---- C:\Windows\system32\wdi
2016-02-11 14:51:13 ----D---- C:\Windows\rescache
2016-02-11 03:52:43 ----D---- C:\Windows\Microsoft.NET
2016-02-11 03:52:16 ----RSD---- C:\Windows\assembly
2016-02-11 03:34:38 ----SD---- C:\Windows\system32\CompatTel
2016-02-11 03:34:38 ----D---- C:\Windows\SYSWOW64\en-US
2016-02-11 03:34:38 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-11 03:34:38 ----D---- C:\Windows\system32\en-US
2016-02-11 03:34:38 ----D---- C:\Windows\system32\cs-CZ
2016-02-11 03:34:38 ----D---- C:\Windows\system32\appraiser
2016-02-11 03:34:38 ----D---- C:\Windows\AppPatch
2016-02-11 03:34:38 ----D---- C:\Program Files\Windows Journal
2016-02-11 03:34:38 ----D---- C:\Program Files\Internet Explorer
2016-02-11 03:34:38 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-11 03:34:32 ----D---- C:\Windows\cs-CZ
2016-02-11 03:18:40 ----D---- C:\Windows\system32\MRT
2016-02-11 03:13:45 ----A---- C:\Windows\system32\MRT.exe
2016-02-01 21:45:13 ----D---- C:\Program Files (x86)\Common Files
2016-01-29 23:14:52 ----RSD---- C:\Windows\Fonts
2016-01-23 04:42:25 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-01-23 04:42:25 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-01-23 04:42:25 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-01-23 04:42:25 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-01-23 04:42:25 ----A---- C:\Windows\system32\nvapi64.dll
2016-01-23 02:04:10 ----A---- C:\Windows\system32\nvsvc64.dll
2016-01-23 02:04:10 ----A---- C:\Windows\system32\nvcpl.dll
2016-01-23 02:04:08 ----A---- C:\Windows\system32\nvvsvc.exe
2016-01-23 02:04:08 ----A---- C:\Windows\system32\nvsvcr.dll
2016-01-23 02:04:07 ----A---- C:\Windows\system32\nvshext.dll
2016-01-23 02:04:07 ----A---- C:\Windows\system32\nvmctray.dll
2016-01-23 02:04:07 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-01-23 02:04:07 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-01-21 00:27:23 ----D---- C:\Windows\Panther
2016-01-21 00:27:23 ----D---- C:\Windows\Logs
2016-01-20 16:23:27 ----SD---- C:\Users\Franni1828\AppData\Roaming\Microsoft
2016-01-20 16:06:12 ----D---- C:\Windows\AppCompat

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2016-01-15 11944]
R0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys [2009-09-23 69152]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2014-06-04 21184]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-01-15 26528]
R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2015-03-25 23048]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2016-02-23 4705536]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-01-15 205456]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-12 26560]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2015-03-25 34848]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2015-10-15 1026304]
R3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0); C:\Windows\system32\DRIVERS\rusb3hub.sys [2016-01-15 114568]
R3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0); C:\Windows\system32\DRIVERS\rusb3xhc.sys [2016-01-15 230280]
R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2015-03-25 23016]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2016-01-16 237968]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;YunOS USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService9;Advanced SystemCare Service 9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [2015-11-04 827680]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-12 1163200]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2015-11-04 882464]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2009-09-24 1169232]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-12 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-01-12 4812736]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-01-23 1263040]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-01-23 424384]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-01-12 6308288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-15 144200]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-11-10 2934048]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-23 269504]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-15 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 114688]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-01-18 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
dekujuu

Zdravím, přes Odebrat programy nebo CCleaner níže odinstaluj vše od IObit a Lavasoft Ad-Aware

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)
Služba Google Update (gupdatem)

dvojklikem se otevře karta kde nejprve službu zastav tlačítkem Zastavit u položky Typ spouštění vyber Zakázáno a klik na OK.


V Knihovně Plánovače úloh zakaž Google Update bude to tam vícekrát.


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

# AdwCleaner v5.037 - Logfile created 20/02/2016 at 16:48:39
# Updated 28/02/2016 by Xplode
# Database : 2016-02-28.2 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Franni1828 - FRANNI1828-PC
# Running from : C:\Users\Franni1828\Desktop\adwcleaner_5.037.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****

[-] File Deleted : C:\Users\Franni1828\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_youtubedownloader.en.softonic.com_0.localstorage

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

[-] [C:\Users\Franni1828\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : youtubedownloader.en.softonic.com
[-] [C:\Users\Franni1828\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : free-3gp-video-converter.en.softonic.com

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1172 bytes] - [20/02/2016 16:48:39]
C:\AdwCleaner\AdwCleaner[C6].txt - [10860 bytes] - [02/01/2016 21:21:37]
C:\AdwCleaner\AdwCleaner[R0].txt - [8201 bytes] - [19/09/2014 15:39:27]
C:\AdwCleaner\AdwCleaner[R1].txt - [2420 bytes] - [05/10/2014 10:38:29]
C:\AdwCleaner\AdwCleaner[R2].txt - [30730 bytes] - [18/05/2015 18:13:59]
C:\AdwCleaner\AdwCleaner[R3].txt - [5035 bytes] - [14/06/2015 09:00:47]
C:\AdwCleaner\AdwCleaner[R4].txt - [1717 bytes] - [14/06/2015 09:58:12]
C:\AdwCleaner\AdwCleaner[S0].txt - [8989 bytes] - [19/09/2014 15:42:18]
C:\AdwCleaner\AdwCleaner[S1].txt - [4379 bytes] - [05/10/2014 10:39:53]
C:\AdwCleaner\AdwCleaner[S2].txt - [27989 bytes] - [18/05/2015 18:15:13]
C:\AdwCleaner\AdwCleaner[S3].txt - [5278 bytes] - [14/06/2015 09:02:54]
C:\AdwCleaner\AdwCleaner[S4].txt - [1776 bytes] - [14/06/2015 10:00:34]
C:\AdwCleaner\AdwCleaner[S6].txt - [10212 bytes] - [02/01/2016 16:50:02]
C:\AdwCleaner\AdwCleaner[S7].txt - [10212 bytes] - [02/01/2016 21:14:18]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2199 bytes] ##########
kdyz kliknu na nejaky odkaz ci stranku tak mi ta stranka nenaskoci a naskoci mi nejaka reklama nebo uplna blbost..dekuju

Odinstaluj MyComGames.


Použij Mbam z mého podpisu a dej mi sem z něj log po smazání.


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

my com games nemohu odinstalovat,,,slouzi ke spusteni armored warfare

ComboFix 16-03-01.01 - Franni1828 03.03.2016 22:20:28.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4044.2571 [GMT 1:00]
Spuštěný z: c:\users\Franni1828\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-02-03 do 2016-03-03 )))))))))))))))))))))))))))))))
.
.
2016-03-03 21:26 . 2016-03-03 21:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-03-03 15:21 . 2016-03-03 15:21 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{58FC8ED9-6EA6-4891-9D22-98DB1871F89E}\offreg.208.dll
2016-03-02 15:45 . 2016-03-02 15:45 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{58FC8ED9-6EA6-4891-9D22-98DB1871F89E}\offreg.2160.dll
2016-02-29 15:15 . 2016-01-28 17:23 33704 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2016-02-29 15:15 . 2015-01-10 14:32 128288 ----a-w- c:\windows\system32\IObitSmartDefragExtension.dll
2016-02-29 15:15 . 2016-02-29 15:15 -------- d-----w- c:\users\Franni1828\AppData\Roaming\Apple Computer
2016-02-20 20:52 . 2015-12-16 09:15 11154520 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{58FC8ED9-6EA6-4891-9D22-98DB1871F89E}\mpengine.dll
2016-02-20 15:27 . 2016-02-20 15:27 -------- d-----w- c:\program files\CCleaner
2016-02-19 20:40 . 2016-02-19 20:40 -------- d-----w- c:\program files\trend micro
2016-02-19 16:13 . 2016-02-20 15:28 -------- dc----w- c:\windows\system32\DRVSTORE
2016-02-19 16:10 . 2016-02-20 15:28 -------- d-----w- c:\programdata\Lavasoft
2016-02-14 07:43 . 2016-01-23 01:12 110016 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2016-02-14 07:20 . 2016-02-23 22:21 796864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2016-02-14 07:20 . 2016-02-23 22:21 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-02-14 07:20 . 2016-02-14 07:20 -------- d-----w- c:\windows\SysWow64\Macromed
2016-02-14 07:20 . 2016-02-14 07:20 -------- d-----w- c:\windows\system32\Macromed
2016-02-14 07:18 . 2016-01-12 04:40 112032 ----a-w- c:\windows\system32\NvRtmpStreamer64.dll
2016-02-14 07:15 . 2015-12-18 06:11 47760 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2016-02-14 07:15 . 2015-12-18 06:10 90768 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2016-02-14 07:14 . 2016-02-14 07:37 -------- d-----w- c:\programdata\Package Cache
2016-02-11 15:32 . 2016-02-11 15:32 -------- d-----w- c:\users\Franni1828\AppData\Roaming\NVIDIA
2016-02-11 15:32 . 2016-02-11 15:32 -------- d-----w- c:\program files (x86)\Geeks3D
2016-02-10 16:14 . 2016-01-07 17:42 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2016-02-10 16:13 . 2016-01-16 19:01 2085888 ----a-w- c:\windows\system32\ole32.dll
2016-02-10 16:13 . 2016-01-16 18:36 1413632 ----a-w- c:\windows\SysWow64\ole32.dll
2016-02-10 16:11 . 2016-01-22 06:19 14179840 ----a-w- c:\windows\system32\shell32.dll
2016-02-10 16:11 . 2016-01-22 06:15 1866752 ----a-w- c:\windows\system32\ExplorerFrame.dll
2016-02-10 16:11 . 2016-01-22 05:19 3231232 ----a-w- c:\windows\explorer.exe
2016-02-10 16:11 . 2016-01-22 05:12 2973184 ----a-w- c:\windows\SysWow64\explorer.exe
2016-02-10 16:11 . 2016-01-22 06:12 1940992 ----a-w- c:\windows\system32\authui.dll
2016-02-10 16:11 . 2016-01-22 06:00 1498624 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2016-02-10 16:11 . 2016-01-22 05:59 1805824 ----a-w- c:\windows\SysWow64\authui.dll
2016-02-09 14:56 . 2015-07-30 13:13 103120 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2016-02-09 14:56 . 2015-07-30 13:13 124624 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-02-11 02:13 . 2016-01-15 21:36 146614896 ----a-w- c:\windows\system32\MRT.exe
2016-01-23 03:42 . 2016-01-15 22:27 18758400 ----a-w- c:\windows\system32\nvwgf2umx.dll
2016-01-23 03:42 . 2016-01-15 22:27 16327896 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2016-01-23 03:42 . 2016-01-15 22:27 14016576 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2016-01-23 03:42 . 2016-01-15 22:27 3258664 ----a-w- c:\windows\SysWow64\nvapi.dll
2016-01-23 03:42 . 2016-01-15 22:07 3683560 ----a-w- c:\windows\system32\nvapi64.dll
2016-01-23 01:04 . 2016-01-15 22:09 6368312 ----a-w- c:\windows\system32\nvcpl.dll
2016-01-23 01:04 . 2016-01-15 22:09 2992064 ----a-w- c:\windows\system32\nvsvc64.dll
2016-01-23 01:04 . 2016-01-15 22:09 2563128 ----a-w- c:\windows\system32\nvsvcr.dll
2016-01-23 01:04 . 2016-01-15 22:09 1263040 ----a-w- c:\windows\system32\nvvsvc.exe
2016-01-23 01:04 . 2016-01-15 22:29 83512 ----a-w- c:\windows\system32\nv3dappshextr.dll
2016-01-23 01:04 . 2016-01-15 22:29 532024 ----a-w- c:\windows\system32\nv3dappshext.dll
2016-01-23 01:04 . 2016-01-15 22:09 71224 ----a-w- c:\windows\system32\nvshext.dll
2016-01-23 01:04 . 2016-01-15 22:09 393784 ----a-w- c:\windows\system32\nvmctray.dll
2016-01-22 21:07 . 2016-01-15 22:09 6125650 ----a-w- c:\windows\system32\nvcoproc.bin
2016-01-22 06:19 . 2016-02-10 16:12 344064 ----a-w- c:\windows\system32\schannel.dll
2016-01-22 06:05 . 2016-02-10 16:12 251392 ----a-w- c:\windows\SysWow64\schannel.dll
2016-01-22 05:59 . 2016-02-10 16:12 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2016-01-18 15:09 . 2016-01-18 15:09 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2016-01-18 15:09 . 2016-01-18 15:09 942592 ----a-w- c:\windows\system32\jsIntl.dll
2016-01-18 15:09 . 2016-01-18 15:09 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2016-01-18 15:09 . 2016-01-18 15:09 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2016-01-18 15:09 . 2016-01-18 15:09 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2016-01-18 15:09 . 2016-01-18 15:09 81408 ----a-w- c:\windows\system32\icardie.dll
2016-01-18 15:09 . 2016-01-18 15:09 77312 ----a-w- c:\windows\system32\tdc.ocx
2016-01-18 15:09 . 2016-01-18 15:09 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2016-01-18 15:09 . 2016-01-18 15:09 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2016-01-18 15:09 . 2016-01-18 15:09 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2016-01-18 15:09 . 2016-01-18 15:09 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2016-01-18 15:09 . 2016-01-18 15:09 62464 ----a-w- c:\windows\system32\pngfilt.dll
2016-01-18 15:09 . 2016-01-18 15:09 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2016-01-18 15:09 . 2016-01-18 15:09 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2016-01-18 15:09 . 2016-01-18 15:09 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2016-01-18 15:09 . 2016-01-18 15:09 48640 ----a-w- c:\windows\system32\mshtmler.dll
2016-01-18 15:09 . 2016-01-18 15:09 48128 ----a-w- c:\windows\system32\imgutil.dll
2016-01-18 15:09 . 2016-01-18 15:09 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2016-01-18 15:09 . 2016-01-18 15:09 30208 ----a-w- c:\windows\system32\licmgr10.dll
2016-01-18 15:09 . 2016-01-18 15:09 247808 ----a-w- c:\windows\system32\msls31.dll
2016-01-18 15:09 . 2016-01-18 15:09 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2016-01-18 15:09 . 2016-01-18 15:09 235520 ----a-w- c:\windows\system32\url.dll
2016-01-18 15:09 . 2016-01-18 15:09 235008 ----a-w- c:\windows\system32\elshyph.dll
2016-01-18 15:09 . 2016-01-18 15:09 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2016-01-18 15:09 . 2016-01-18 15:09 167424 ----a-w- c:\windows\system32\iexpress.exe
2016-01-18 15:09 . 2016-01-18 15:09 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2016-01-18 15:09 . 2016-01-18 15:09 143872 ----a-w- c:\windows\system32\wextract.exe
2016-01-18 15:09 . 2016-01-18 15:09 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2016-01-18 15:09 . 2016-01-18 15:09 13824 ----a-w- c:\windows\system32\mshta.exe
2016-01-18 15:09 . 2016-01-18 15:09 135680 ----a-w- c:\windows\system32\iepeers.dll
2016-01-18 15:09 . 2016-01-18 15:09 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2016-01-18 15:09 . 2016-01-18 15:09 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2016-01-18 15:09 . 2016-01-18 15:09 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2016-01-18 15:09 . 2016-01-18 15:09 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2016-01-18 15:09 . 2016-01-18 15:09 105984 ----a-w- c:\windows\system32\iesysprep.dll
2016-01-18 15:07 . 2016-01-18 15:07 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2016-01-18 15:07 . 2016-01-18 15:07 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2016-01-18 15:07 . 2016-01-18 15:07 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2016-01-18 15:07 . 2016-01-18 15:07 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2016-01-18 15:07 . 2016-01-18 15:07 363008 ----a-w- c:\windows\system32\dxgi.dll
2016-01-18 15:07 . 2016-01-18 15:07 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2016-01-18 15:07 . 2016-01-18 15:07 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 296960 ----a-w- c:\windows\system32\d3d10core.dll
2016-01-18 15:07 . 2016-01-18 15:07 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2016-01-18 15:07 . 2016-01-18 15:07 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2016-01-18 15:07 . 2016-01-18 15:07 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2016-01-18 15:07 . 2016-01-18 15:07 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2016-01-18 15:07 . 2016-01-18 15:07 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2016-01-18 15:07 . 2016-01-18 15:07 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2016-01-18 15:07 . 2016-01-18 15:07 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2016-01-18 15:07 . 2016-01-18 15:07 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2016-01-18 15:07 . 2016-01-18 15:07 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2016-01-18 15:07 . 2016-01-18 15:07 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2016-01-18 15:07 . 2016-01-18 15:07 1238528 ----a-w- c:\windows\system32\d3d10.dll
2016-01-18 15:07 . 2016-01-18 15:07 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2016-01-18 15:07 . 2016-01-18 15:07 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2016-01-18 15:07 . 2016-01-18 15:07 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-18 15:07 . 2016-01-18 15:07 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-17 02:07 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2016-01-17 02:07 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2016-01-16 11:01 . 2016-01-16 11:01 97624 ----a-w- c:\windows\system32\RTEEL64H.dll
2016-01-16 11:01 . 2016-01-16 11:01 92264 ----a-w- c:\windows\system32\RHCoInst64.dll
2016-01-16 11:01 . 2016-01-16 11:01 78680 ----a-w- c:\windows\system32\RTEEG64H.dll
2016-01-16 11:01 . 2016-01-16 11:01 74592 ----a-w- c:\windows\system32\R4EEG64H.dll
2016-01-16 11:01 . 2016-01-16 11:01 7163744 ----a-w- c:\windows\system32\R4EEP64H.dll
2016-01-16 11:01 . 2016-01-16 11:01 433504 ----a-w- c:\windows\system32\R4EED64H.dll
2016-01-16 11:01 . 2016-01-16 11:01 3746408 ----a-w- c:\windows\system32\RtkHDM64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MyComGames"="c:\users\Franni1828\AppData\Local\MyComGames\MyComGames.exe" [2016-02-24 4813680]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2016-02-12 8641240]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FAH.lnk - c:\program files (x86)\WinZip\FAHConsole.exe [2015-10-23 454880]
Update Notifier.lnk - c:\program files (x86)\WinZip\WZUpdateNotifier.exe [2015-10-23 1143008]
WinZip Preloader.lnk - c:\program files (x86)\WinZip\WzPreloader.exe [2015-10-23 124128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSimpleNetIDList"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 amdide64;amdide64;c:\windows\system32\DRIVERS\amdide64.sys;c:\windows\SYSNATIVE\DRIVERS\amdide64.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 NvStreamNetworkSvc;NVIDIA Streamer Network Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0);c:\windows\system32\DRIVERS\rusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\rusb3hub.sys [x]
S3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0);c:\windows\system32\DRIVERS\rusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\rusb3xhc.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - NVSTREAMKMS
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-02-19 20:26 1088664 ----a-w- c:\program files (x86)\Google\Chrome\Application\48.0.2564.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2016-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-14 22:21]
.
2016-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-01-15 00:38]
.
2016-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-01-15 00:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2016-02-23 8783616]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2016-01-12 2787264]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2016-01-12 1860120]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_306_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_306_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.20"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-03-03 22:28:43
ComboFix-quarantined-files.txt 2016-03-03 21:28
.
Před spuštěním: Volných bajtů: 158 069 612 544
Po spuštění: Volných bajtů: 157 635 170 304
.
- - End Of File - - 5100812D132009B48B3AE1686C432A38
A36C5E4F47E84449FF07ED3517B43A31

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Ještě si počkám na ten Mbam jak jsme psal.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 5.3.2016
Čas skenování: 17:57
Protokol: mbm.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.03.05.05
Databáze rootkitů: v2016.02.27.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Franni1828

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 334402
Uplynulý čas: 11 min, 47 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Bezva čisto, Mbam můžeš odinstalovat a pak písni jak se PC chová.

ahoj,,byl jsem mimo pc,,tak se omlouvam za zdrzeni,,no kdyz kliknu tak se mi otevre novy list ale ze strankou pozadovanou,ale s reklamou..
dekuju

V prohlížeči vymaž historii, zakaž všechna rozšíření a doplňky krom Flash Playeru.

Ještě dotaz, děje se to ve všech prohlížečích nebo jen v konkrétním ?

Dej mi sem ještě aktuální log z Rsit.

jen v google chrome,,jinak opera,,mozilla v pohode,,ok vymazu,,,vse v historii

franni píše:jen v google chrome,,jinak opera,,mozilla v pohode,,ok vymazu,,,vse v historii

Pak písni stav a nezapomeň na ten log.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Franni1828 at 2016-03-22 15:52:16
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 149 GB (49%) free of 305 GB
Total RAM: 4044 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:52:19, on 22.3.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18231)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\VDownloader\VDownloader4.exe
C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe
C:\Users\Franni1828\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Franni1828\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe
C:\Program Files (x86)\WinZip\FAHWindow32.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe
C:\Program Files\trend micro\Franni1828.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [MyComGames] "C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe" -autostart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Franni1828\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Franni1828\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [BingSvc] C:\Users\Franni1828\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - Global Startup: FAH.lnk = C:\Program Files (x86)\WinZip\FAHConsole.exe
O4 - Global Startup: Update Notifier.lnk = C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files (x86)\WinZip\WzPreloader.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7208 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\VDownloader\VDownloader4.exe" /silent
"C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe" -autostart
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "4103844592002682552-131300504-11210364021504922091-1741439627-1829273467911416187
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
szndesktop.exe default start
"C:\Users\Franni1828\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-19885364397881296-763988857458495147-864606914-569945511-20056484741612800859
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\Franni1828\AppData\Local\Microsoft\BingSvc\BingSvc.exe"
"C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe"
"C:\Program Files (x86)\WinZip\FAHWindow32.exe" register
"C:\Program Files (x86)\WinZip\WzPreloader.exe"
"C:\Program Files (x86)\WinZip\FAHWindow64.exe" register
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe" --type=renderer --disable-gpu-compositing --force-device-scale-factor=1.00 --no-sandbox --lang=en-US --disable-pack-loading --lang=ru --log-file="C:\Users\Franni1828\AppData\Local\MyComGames\Chrome.log" --log-severity=error --product-version="Chrome/45.0.2454.62 Downloader/1730 MyComGameCenter/173" --disable-extensions --ppapi-flash-path="C:\Users\Franni1828\AppData\Local\MyComGames\Chrome\3.2454.1317\pepflashplayer32_18_0_0_232.dll" --ppapi-flash-version=18.0.0.232 --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="3380.0.1234566659\2106343484" /prefetch:673131151
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Franni1828\Desktop\RSITx64 (1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-03-13 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-13 212576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-02-23 8783616]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-12 2787264]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-01-12 1860120]
"VDownloader"=C:\Program Files\VDownloader\VDownloader4.exe [2016-02-23 4305920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MyComGames"=C:\Users\Franni1828\AppData\Local\MyComGames\MyComGames.exe [2016-03-14 4844912]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-02-12 8641240]
"cz.seznam.software.autoupdate"=C:\Users\Franni1828\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Franni1828\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50670720]
"BingSvc"=C:\Users\Franni1828\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2016-03-19 144008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 595504]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files (x86)\WinZip\FAHConsole.exe
Update Notifier.lnk - C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe
WinZip Preloader.lnk - C:\Program Files (x86)\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSimpleNetIDList"=1
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-03-22 15:52:16 ----D---- C:\rsit
2016-03-22 15:29:36 ----SHD---- C:\found.002
2016-03-19 23:14:44 ----D---- C:\Users\Franni1828\AppData\Roaming\Skype
2016-03-19 23:14:13 ----RD---- C:\Program Files (x86)\Skype
2016-03-19 23:14:02 ----D---- C:\ProgramData\Skype
2016-03-13 08:20:59 ----D---- C:\Users\Franni1828\AppData\Roaming\VDownloader
2016-03-13 08:20:38 ----D---- C:\Program Files\VDownloader
2016-03-13 08:13:51 ----D---- C:\Users\Franni1828\AppData\Roaming\Sun
2016-03-13 08:13:37 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2016-03-13 08:13:16 ----D---- C:\ProgramData\Oracle
2016-03-13 08:13:13 ----D---- C:\Program Files\Java
2016-03-12 23:21:48 ----D---- C:\Users\Franni1828\AppData\Roaming\Opera Software
2016-03-12 23:21:01 ----D---- C:\Users\Franni1828\AppData\Roaming\Youtube Downloader HD
2016-03-12 23:20:52 ----D---- C:\Program Files (x86)\Opera
2016-03-12 23:20:49 ----D---- C:\Users\Franni1828\AppData\Roaming\OpenCandy
2016-03-12 23:20:49 ----D---- C:\Program Files (x86)\Youtube Downloader HD
2016-03-12 23:02:13 ----D---- C:\Program Files (x86)\Seznam.cz
2016-03-12 23:02:11 ----D---- C:\Users\Franni1828\AppData\Roaming\YouTube Downloader
2016-03-12 23:01:52 ----D---- C:\Users\Franni1828\AppData\Roaming\Seznam.cz
2016-03-12 23:01:47 ----D---- C:\Program Files (x86)\YTD
2016-03-10 05:46:16 ----N---- C:\bootsqm.dat
2016-03-10 05:44:30 ----SHD---- C:\found.001
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\win32k.sys
2016-03-09 16:17:19 ----A---- C:\Windows\system32\ucrtbase.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:17:19 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:17:16 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-03-09 16:17:16 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-03-09 16:17:16 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-03-09 16:17:16 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-03-09 16:17:16 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wuwebv.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wups2.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wups.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wudriver.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wucltux.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wuaueng.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wuauclt.exe
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wuapp.exe
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wuapi.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 16:17:16 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-03-09 16:17:13 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-03-09 16:17:13 ----A---- C:\Windows\system32\drivers\ntfs.sys
2016-03-09 16:17:12 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-03-09 16:17:12 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-03-09 16:17:12 ----A---- C:\Windows\system32\oleaut32.dll
2016-03-09 16:17:12 ----A---- C:\Windows\system32\asycfilt.dll
2016-03-09 16:17:08 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-03-09 16:17:08 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-03-09 16:17:08 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-03-09 16:17:08 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-03-09 16:17:08 ----A---- C:\Windows\system32\iertutil.dll
2016-03-09 16:17:08 ----A---- C:\Windows\system32\iernonce.dll
2016-03-09 16:17:08 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-03-09 16:17:08 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-03-09 16:17:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-03-09 16:17:07 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 16:17:07 ----A---- C:\Windows\system32\inseng.dll
2016-03-09 16:17:07 ----A---- C:\Windows\system32\ie4uinit.exe
2016-03-09 16:17:06 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-03-09 16:17:06 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-03-09 16:17:05 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-03-09 16:17:05 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-03-09 16:17:05 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-03-09 16:17:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-03-09 16:17:05 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-03-09 16:17:05 ----A---- C:\Windows\system32\urlmon.dll
2016-03-09 16:17:05 ----A---- C:\Windows\system32\occache.dll
2016-03-09 16:17:05 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 16:17:05 ----A---- C:\Windows\system32\msfeeds.dll
2016-03-09 16:17:05 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 16:17:05 ----A---- C:\Windows\system32\iedkcs32.dll
2016-03-09 16:17:05 ----A---- C:\Windows\system32\dxtrans.dll
2016-03-09 16:17:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-03-09 16:17:04 ----A---- C:\Windows\system32\iesetup.dll
2016-03-09 16:17:04 ----A---- C:\Windows\system32\ieapfltr.dll
2016-03-09 16:17:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-03-09 16:17:03 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-03-09 16:17:03 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-03-09 16:17:03 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-03-09 16:17:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-03-09 16:17:03 ----A---- C:\Windows\system32\vbscript.dll
2016-03-09 16:17:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-03-09 16:17:02 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-03-09 16:17:02 ----A---- C:\Windows\system32\jsproxy.dll
2016-03-09 16:17:02 ----A---- C:\Windows\system32\ieui.dll
2016-03-09 16:17:02 ----A---- C:\Windows\system32\ieframe.dll
2016-03-09 16:17:02 ----A---- C:\Windows\system32\dxtmsft.dll
2016-03-09 16:17:01 ----A---- C:\Windows\system32\webcheck.dll
2016-03-09 16:17:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-03-09 16:17:01 ----A---- C:\Windows\system32\mshtmled.dll
2016-03-09 16:17:01 ----A---- C:\Windows\system32\jscript.dll
2016-03-09 16:17:01 ----A---- C:\Windows\system32\ieUnatt.exe
2016-03-09 16:17:00 ----A---- C:\Windows\system32\wininet.dll
2016-03-09 16:17:00 ----A---- C:\Windows\system32\jscript9diag.dll
2016-03-09 16:17:00 ----A---- C:\Windows\system32\jscript9.dll
2016-03-09 16:16:59 ----A---- C:\Windows\system32\msrating.dll
2016-03-09 16:16:59 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-03-09 16:16:59 ----A---- C:\Windows\system32\mshtml.dll
2016-03-09 16:16:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-03-09 16:16:27 ----A---- C:\Windows\system32\ntdll.dll
2016-03-09 16:16:26 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-03-09 16:16:26 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-03-09 16:16:26 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-03-09 16:16:26 ----A---- C:\Windows\system32\KernelBase.dll
2016-03-09 16:16:26 ----A---- C:\Windows\system32\kerberos.dll
2016-03-09 16:16:25 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-03-09 16:16:25 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-03-09 16:16:25 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-03-09 16:16:25 ----A---- C:\Windows\system32\kernel32.dll
2016-03-09 16:16:25 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-03-09 16:16:25 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-03-09 16:16:25 ----A---- C:\Windows\system32\advapi32.dll
2016-03-09 16:16:24 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-03-09 16:16:24 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-03-09 16:16:24 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-03-09 16:16:24 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\wow64win.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\wow64.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\winsrv.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\wdigest.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\TSpkg.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\sspicli.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\srcore.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\smss.exe
2016-03-09 16:16:24 ----A---- C:\Windows\system32\schannel.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\rpcrt4.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\ncrypt.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\msv1_0.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\lsasrv.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-03-09 16:16:24 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-03-09 16:16:24 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-03-09 16:16:24 ----A---- C:\Windows\system32\csrsrv.dll
2016-03-09 16:16:24 ----A---- C:\Windows\system32\conhost.exe
2016-03-09 16:16:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:16:23 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-03-09 16:16:23 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-03-09 16:16:23 ----A---- C:\Windows\system32\wow64cpu.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\sspisrv.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\srclient.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\secur32.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\rstrui.exe
2016-03-09 16:16:23 ----A---- C:\Windows\system32\ntvdm64.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\lsass.exe
2016-03-09 16:16:23 ----A---- C:\Windows\system32\cryptbase.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\credssp.dll
2016-03-09 16:16:23 ----A---- C:\Windows\system32\auditpol.exe
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:16:22 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\user.exe
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-03-09 16:16:22 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-03-09 16:16:22 ----A---- C:\Windows\system32\msobjs.dll
2016-03-09 16:16:22 ----A---- C:\Windows\system32\msaudite.dll
2016-03-09 16:16:22 ----A---- C:\Windows\system32\apisetschema.dll
2016-03-09 16:16:22 ----A---- C:\Windows\system32\adtschema.dll
2016-03-09 16:16:13 ----A---- C:\Windows\system32\wmp.dll
2016-03-09 16:16:12 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-03-09 16:16:12 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-03-09 16:16:12 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2016-03-09 16:16:12 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2016-03-09 16:16:12 ----A---- C:\Windows\system32\spwmp.dll
2016-03-09 16:16:12 ----A---- C:\Windows\system32\dxmasf.dll
2016-03-09 16:16:11 ----A---- C:\Windows\system32\wmploc.DLL
2016-03-09 16:16:10 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-03-09 16:16:10 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-03-09 16:16:10 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-03-09 16:16:10 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-03-09 16:16:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-03-09 16:16:10 ----A---- C:\Windows\system32\mfds.dll
2016-03-09 16:16:10 ----A---- C:\Windows\system32\lpk.dll
2016-03-09 16:16:10 ----A---- C:\Windows\system32\fontsub.dll
2016-03-09 16:16:10 ----A---- C:\Windows\system32\dciman32.dll
2016-03-09 16:16:10 ----A---- C:\Windows\system32\atmlib.dll
2016-03-09 16:16:10 ----A---- C:\Windows\system32\atmfd.dll
2016-03-09 16:16:09 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-03-09 16:16:09 ----A---- C:\Windows\system32\seclogon.dll
2016-03-09 16:16:09 ----A---- C:\Windows\system32\generaltel.dll
2016-03-09 16:16:09 ----A---- C:\Windows\system32\appraiser.dll
2016-03-09 16:16:08 ----A---- C:\Windows\system32\invagent.dll
2016-03-09 16:16:08 ----A---- C:\Windows\system32\devinv.dll
2016-03-09 16:16:08 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-03-09 16:16:08 ----A---- C:\Windows\system32\aeinv.dll
2016-03-09 16:16:08 ----A---- C:\Windows\system32\acmigration.dll
2016-03-06 01:36:44 ----SHD---- C:\$RECYCLE.BIN
2016-03-04 16:04:55 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2016-03-04 16:03:18 ----D---- C:\ProgramData\Malwarebytes
2016-03-04 16:03:18 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-04 16:03:18 ----A---- C:\Windows\system32\drivers\mwac.sys
2016-03-04 16:03:18 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2016-03-04 16:03:18 ----A---- C:\Windows\system32\drivers\mbam.sys
2016-03-03 22:28:45 ----D---- C:\Windows\temp
2016-02-29 16:15:35 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2016-02-29 16:15:35 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2016-02-29 16:15:03 ----D---- C:\Users\Franni1828\AppData\Roaming\Apple Computer
2016-02-23 23:16:44 ----A---- C:\Windows\system32\YamahaAE2.dll
2016-02-23 23:16:43 ----A---- C:\Windows\system32\YamahaAE.dll
2016-02-23 23:16:38 ----A---- C:\Windows\system32\WavesGUILib64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\SYSWOW64\SRCOM.dll
2016-02-23 23:16:37 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tossaemaxapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tossaeapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\toseaeapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tosasfapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tosade.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tepeqapo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tadefxapo264.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\tadefxapo.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSWOW64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSTSX64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSTSH64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRSHP64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRRPTR64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRCOM64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRCOM.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SRAPO64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\sltech64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\slprp64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\slcnt64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\sl3apo64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFSS_APO.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFNHK64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFCOM64.dll
2016-02-23 23:16:37 ----A---- C:\Windows\system32\SFAPO64.dll
2016-02-23 23:16:36 ----A---- C:\Windows\SYSWOW64\SECOMN32.DLL
2016-02-23 23:16:36 ----A---- C:\Windows\system32\SEHDRA64.dll
2016-02-23 23:16:36 ----A---- C:\Windows\system32\SECOMN64.dll
2016-02-23 23:16:36 ----A---- C:\Windows\system32\SEAPO64.dll
2016-02-23 23:16:34 ----A---- C:\Windows\system32\RtPgEx64.dll
2016-02-23 23:16:34 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2016-02-23 23:16:31 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2016-02-23 23:16:31 ----A---- C:\Windows\system32\RtkCfg64.dll
2016-02-23 23:16:31 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2016-02-23 23:16:31 ----A---- C:\Windows\system32\drivers\rtkSSTsetting.dat
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RtkApi64.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEEP64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEEL64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEEG64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RTEED64A.dll
2016-02-23 23:16:30 ----A---- C:\Windows\system32\RtDataProc64.dll
2016-02-23 23:16:28 ----A---- C:\Windows\system32\RTCOM64.dll
2016-02-23 23:16:27 ----A---- C:\Windows\system32\RP3DHT64.dll
2016-02-23 23:16:27 ----A---- C:\Windows\system32\RP3DAA64.dll
2016-02-23 23:16:27 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2016-02-23 23:16:26 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2016-02-23 23:16:26 ----A---- C:\Windows\system32\RltkAPO64.dll
2016-02-23 23:16:23 ----A---- C:\Windows\system32\RCoRes64.dat
2016-02-23 23:16:23 ----A---- C:\Windows\system32\RCoInstII64.dll
2016-02-23 23:16:21 ----A---- C:\Windows\system32\R4EEP64A.dll
2016-02-23 23:16:21 ----A---- C:\Windows\system32\R4EEL64A.dll
2016-02-23 23:16:21 ----A---- C:\Windows\system32\R4EEG64A.dll
2016-02-23 23:16:20 ----A---- C:\Windows\system32\R4EED64A.dll
2016-02-23 23:16:20 ----A---- C:\Windows\system32\R4EEA64A.dll
2016-02-23 23:16:19 ----A---- C:\Windows\system32\NAHIMICV2apo.dll
2016-02-23 23:16:19 ----A---- C:\Windows\system32\NahimicAPONSControl.dll
2016-02-23 23:16:18 ----A---- C:\Windows\system32\NAHIMICAPOlfx.dll
2016-02-23 23:16:18 ----A---- C:\Windows\system32\MISS_APO.dll
2016-02-23 23:16:16 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-02-23 23:16:14 ----A---- C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-02-23 23:16:13 ----A---- C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-02-23 23:16:11 ----A---- C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-02-23 23:16:11 ----A---- C:\Windows\system32\MaxxSpeechAPO64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO7064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO6064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO5064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2016-02-23 23:16:10 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\KAAPORT64.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\IntelSstCApoPropPage.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\IntelSSTAPO.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\ICEsoundAPO64.dll
2016-02-23 23:16:09 ----A---- C:\Windows\system32\HiFiDAX2API.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\FMAPO64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2016-02-23 23:16:08 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DolbyDAX2APOv211.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DolbyDAX2APOv201.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DolbyDAX2APOProp.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPP64AF3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPP64A.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPO64AF3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPO64A.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPD64AF3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPD64A.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPA64F3.dll
2016-02-23 23:16:07 ----A---- C:\Windows\system32\DDPA64.dll
2016-02-23 23:16:06 ----A---- C:\Windows\system32\CX64APO.dll
2016-02-23 23:16:06 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-02-23 23:16:06 ----A---- C:\Windows\system32\audioLibVc.dll
2016-02-23 23:16:05 ----A---- C:\Windows\system32\AERTAR64.dll
2016-02-23 23:16:05 ----A---- C:\Windows\system32\AERTAC64.dll
2016-02-23 23:16:05 ----A---- C:\Windows\system32\AcpiServiceVnA64.dll

======List of files/folders modified in the last 1 month======

2016-03-22 15:52:18 ----D---- C:\Program Files\trend micro
2016-03-22 15:39:44 ----SHD---- C:\System Volume Information
2016-03-22 15:38:08 ----D---- C:\Windows\system32\config
2016-03-22 15:33:14 ----D---- C:\Windows\Prefetch
2016-03-22 15:33:12 ----D---- C:\ProgramData\ProductData
2016-03-22 15:31:56 ----D---- C:\ProgramData\NVIDIA
2016-03-22 15:31:41 ----D---- C:\Windows
2016-03-19 23:14:50 ----SHD---- C:\Windows\Installer
2016-03-19 23:14:14 ----D---- C:\Program Files (x86)\Common Files
2016-03-19 23:14:13 ----RD---- C:\Program Files (x86)
2016-03-19 23:14:13 ----D---- C:\Windows\SysWOW64
2016-03-19 23:14:02 ----D---- C:\ProgramData
2016-03-19 21:19:21 ----D---- C:\Windows\system32\wdi
2016-03-17 23:23:00 ----D---- C:\Windows\system32\Tasks
2016-03-13 23:06:39 ----D---- C:\Windows\inf
2016-03-13 09:37:25 ----D---- C:\Windows\debug
2016-03-13 09:07:50 ----D---- C:\Windows\System32
2016-03-13 09:07:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-13 08:20:38 ----RD---- C:\Program Files
2016-03-11 21:29:16 ----D---- C:\Windows\Microsoft.NET
2016-03-11 21:28:24 ----RSD---- C:\Windows\assembly
2016-03-10 05:48:28 ----D---- C:\Windows\winsxs
2016-03-10 03:31:00 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-03-10 03:31:00 ----D---- C:\Windows\system32\drivers
2016-03-10 03:31:00 ----D---- C:\Windows\system32\cs-CZ
2016-03-10 03:30:59 ----D---- C:\Windows\SYSWOW64\en-US
2016-03-10 03:30:59 ----D---- C:\Windows\system32\en-US
2016-03-10 03:30:59 ----D---- C:\Program Files\Internet Explorer
2016-03-10 03:30:58 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-10 03:30:56 ----D---- C:\Windows\AppPatch
2016-03-10 03:30:53 ----D---- C:\Windows\system32\DriverStore
2016-03-10 03:06:55 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-10 03:06:54 ----D---- C:\Program Files\Windows Media Player
2016-03-10 03:06:34 ----D---- C:\Windows\system32\MRT
2016-03-10 03:02:09 ----A---- C:\Windows\system32\MRT.exe
2016-03-10 03:01:45 ----D---- C:\Windows\system32\appraiser
2016-03-09 16:15:26 ----D---- C:\Windows\system32\catroot2
2016-03-04 15:57:36 ----D---- C:\AdwCleaner
2016-03-03 22:26:06 ----A---- C:\Windows\system.ini
2016-03-03 22:23:30 ----D---- C:\Windows\SYSWOW64\drivers
2016-02-29 16:15:35 ----D---- C:\ProgramData\IObit
2016-02-29 16:15:27 ----D---- C:\Users\Franni1828\AppData\Roaming\IObit
2016-02-27 03:01:00 ----SD---- C:\Windows\SYSWOW64\GWX
2016-02-27 03:01:00 ----SD---- C:\Windows\system32\GWX
2016-02-23 23:21:32 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-23 23:21:10 ----D---- C:\Windows\system32\catroot
2016-02-23 23:20:14 ----D---- C:\Windows\system32\DAX2
2016-02-23 23:19:08 ----D---- C:\Windows\SYSWOW64\RTCOM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2016-01-15 11944]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-01-15 26528]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2016-02-23 4705536]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-10-05 25816]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-01-15 205456]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-12 26560]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2015-10-15 1026304]
R3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0); C:\Windows\system32\DRIVERS\rusb3hub.sys [2016-01-15 114568]
R3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0); C:\Windows\system32\DRIVERS\rusb3xhc.sys [2016-01-15 230280]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-10-05 63704]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2016-01-16 237968]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;YunOS USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-12 1163200]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-12 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-01-12 4812736]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-01-23 1263040]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-01-23 424384]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-01-12 6308288]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-11-10 2934048]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-23 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-02-08 114688]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2016-01-18 1255736]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-15 144200]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-15 144200]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
dekuju

Nic špatného tam nevidím jen odinstaluj vše od Seznam.cz