Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Program správce oken plochy přestal pracovat

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Program správce oken plochy přestal pracovat

#1 Příspěvek od The.Brain »

Krásný nedělní večer přeji. Už jsem dlouho nebyl na "preventivce", v posledních dnech začal zlobit Správce oken plochy, po restartu se zobrazuje hláška "Program správce oken plochy přestal pracovat" a přestalo fungovat Aero (okna nejsou průhledná) - předpokládám, že to souvisí. Obnovení nepomohlo, ovladače mám aktuální, víc asi nevymyslím.


Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomáš at 2016-05-08 19:29:04
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 18 GB (15%) free of 122 GB
Total RAM: 8175 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:29:13, on 8.5.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Games\Mount & Blade\Steam.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files\Andy\HandyAndy.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~2\RAPTRI~1\PlaysTV\playstv.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe
C:\Program Files\Andy\AndyADB.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr_im.exe
C:\Program Files\Andy\AndyDnD.exe
C:\Games\Mount & Blade\bin\steamwebhelper.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [PlaysTV] "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Steam] "C:\Games\Mount & Blade\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HandyAndy.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Plays.tv Update Service (PlaysService) - Plays.tv, LLC - C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\SysWOW64\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\SysWOW64\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9308 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe"
"taskhost.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\SysWOW64\vmnat.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
C:\Windows\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Games\Mount & Blade\Steam.exe" -silent
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\splwow64.exe 8192
"C:\Program Files\Andy\HandyAndy.exe"
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\PROGRA~2\RAPTRI~1\PlaysTV\playstv.exe" --log_to_file --from_stub --startup
"C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe" --log_to_file --from_stub --startup
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b77421a7-3128-4751-afe6-ea47d7018562 -SystemEventPortName:HostProcess-bcff03d9-48d2-458e-8604-175c6e5a5b3e -IoCancelEventPortName:HostProcess-5d43c730-2969-4cc6-9afe-e0eb6dc70b23 -NonStateChangingEventPortName:HostProcess-cea3f8a6-7c6d-4c98-acea-885ef2573675 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ee2e4742-5579-4529-b250-7796fdd52163 -DeviceGroupId:WpdFsGroup
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Andy\AndyADB.exe"
raptr_im.exe
"C:\Program Files\Andy\AndyDnD.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR /uac
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=50.0.2661.94 --handshake-handle=0xb0
"C:\PROGRA~2\RAPTRI~1\Raptr\raptr_ep64.exe" 3448
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4392.0.1318928249\651367634" --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,10,12,24,53,71 --gpu-vendor-id=0x1002 --gpu-device-id=0x6719 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,WebFontsIntervention<WebFontsIntervention --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/BrotliEncoding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control50pct/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithModuleLoadAnalysis/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_73/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-LocalIPPermissionCheck/Enabled/ --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="4392.2.789967846\283067002" /prefetch:1
"C:\Games\Mount & Blade\bin\steamwebhelper.exe" -cachedir="C:\Users\Tomáš\AppData\Local\Steam\htmlcache" -steampid=2864 -buildid=1461972496 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
taskeng.exe {50B4F774-B4F8-4447-B129-7BBBBE39E90D}
"C:\Windows\system32\RunDll32.exe" "C:\Windows\system32\WerConCpl.dll", LaunchErcApp -queuereporting
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,WebFontsIntervention<WebFontsIntervention --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/BrotliEncoding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control50pct/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithModuleLoadAnalysis/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_73/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-LocalIPPermissionCheck/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="4392.11.2106781878\1476349743" /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528

"C:\Users\Tomáš\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-02-11 11776104]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 1340192]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"Steam"=C:\Games\Mount & Blade\steam.exe [2016-04-30 3077712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2011-08-04 1612920]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-04 767176]
"Raptr"=C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [2016-04-27 58640]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 594992]
"PlaysTV"=C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [2016-04-05 71440]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HandyAndy.lnk - C:\Program Files\Andy\HandyAndy.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-05-08 19:29:04 ----D---- C:\Program Files\trend micro
2016-05-08 15:10:48 ----A---- C:\Windows\SYSWOW64\CmdLineExt03.dll
2016-05-05 00:29:00 ----A---- C:\Windows\SYSWOW64\vsocklib.dll
2016-05-05 00:29:00 ----A---- C:\Windows\system32\vsocklib.dll
2016-05-05 00:29:00 ----A---- C:\Windows\system32\drivers\vsock.sys
2016-05-05 00:28:59 ----A---- C:\Windows\system32\drivers\vmx86.sys
2016-05-05 00:28:59 ----A---- C:\Windows\system32\drivers\VMkbd.sys
2016-05-05 00:28:33 ----A---- C:\Windows\SYSWOW64\vmnetdhcp.exe
2016-05-05 00:28:30 ----A---- C:\Windows\SYSWOW64\vmnat.exe
2016-05-05 00:28:30 ----A---- C:\Windows\system32\drivers\vmnetuserif.sys
2016-05-05 00:27:56 ----A---- C:\Windows\system32\vnetlib64.dll
2016-05-05 00:27:54 ----A---- C:\Windows\system32\drivers\hcmon.sys
2016-05-05 00:27:51 ----D---- C:\Program Files\Common Files\VMware
2016-05-05 00:27:47 ----D---- C:\ProgramData\VMware
2016-05-05 00:20:52 ----D---- C:\Program Files\AndyOfflineInstaller46.2
2016-05-05 00:20:30 ----D---- C:\Program Files\Andy
2016-04-27 15:55:28 ----D---- C:\System Recovery Files
2016-04-27 15:54:48 ----D---- C:\ProgramData\Recovery
2016-04-13 12:38:30 ----A---- C:\Windows\system32\samsrv.dll
2016-04-13 12:38:28 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-04-13 12:38:28 ----A---- C:\Windows\system32\samlib.dll
2016-04-13 12:38:23 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-13 12:38:22 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-04-13 12:38:22 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-04-13 12:38:18 ----A---- C:\Windows\system32\rpcss.dll
2016-04-13 12:38:17 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-04-13 12:38:17 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-04-13 12:38:17 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-13 12:38:17 ----A---- C:\Windows\system32\msxml3.dll
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-04-13 12:38:13 ----A---- C:\Windows\system32\ole32.dll
2016-04-13 12:38:13 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-13 12:38:13 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wow64win.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wow64.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\winsrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wdigest.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\sspicli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\srcore.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\smss.exe
2016-04-13 12:38:12 ----A---- C:\Windows\system32\schannel.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\ntdll.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\kernel32.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\kerberos.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\conhost.exe
2016-04-13 12:38:12 ----A---- C:\Windows\system32\certcli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\advapi32.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\wow64cpu.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\srclient.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\secur32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\rstrui.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\ntvdm64.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\lsass.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-13 12:38:11 ----A---- C:\Windows\system32\credssp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\auditpol.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidapi.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\user.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\msobjs.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\msaudite.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\adtschema.dll
2016-04-13 12:38:06 ----A---- C:\Windows\system32\win32k.sys
2016-04-13 12:38:06 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-13 12:38:00 ----A---- C:\Windows\SYSWOW64\tbs.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\tbs.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\fveapibase.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\fveapi.dll
2016-04-13 12:37:59 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 12:37:58 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\acmigration.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\iernonce.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-04-13 12:37:52 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 12:37:52 ----A---- C:\Windows\system32\inseng.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\urlmon.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\occache.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 12:37:50 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\iesetup.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-13 12:37:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-04-13 12:37:48 ----A---- C:\Windows\system32\vbscript.dll
2016-04-13 12:37:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-13 12:37:48 ----A---- C:\Windows\system32\iertutil.dll
2016-04-13 12:37:47 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\ieui.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\ieframe.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\webcheck.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\jscript.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-13 12:37:45 ----A---- C:\Windows\system32\wininet.dll
2016-04-13 12:37:45 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-13 12:37:45 ----A---- C:\Windows\system32\jscript9.dll
2016-04-13 12:37:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-13 12:37:43 ----A---- C:\Windows\system32\msrating.dll
2016-04-13 12:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-04-13 12:36:27 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-04-13 12:36:27 ----A---- C:\Windows\system32\tzres.dll
2016-04-09 02:28:59 ----D---- C:\Users\Tomáš\AppData\Roaming\VMware
2016-04-09 02:24:56 ----D---- C:\Program Files (x86)\VMware
2016-04-09 02:17:07 ----D---- C:\Users\Tomáš\AppData\Roaming\Andy

======List of files/folders modified in the last 1 month======

2016-05-08 19:29:13 ----D---- C:\Windows\Prefetch
2016-05-08 19:29:04 ----RD---- C:\Program Files
2016-05-08 19:29:02 ----D---- C:\Windows\Temp
2016-05-08 19:21:56 ----RD---- C:\Users
2016-05-08 19:19:43 ----SHD---- C:\$Recycle.Bin
2016-05-08 19:18:13 ----D---- C:\Windows\System32
2016-05-08 19:18:13 ----D---- C:\Windows\inf
2016-05-08 19:18:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-05-08 19:13:08 ----D---- C:\Users\Tomáš\AppData\Roaming\Raptr
2016-05-08 19:12:39 ----D---- C:\Users\Tomáš\AppData\Roaming\PlaysTV
2016-05-08 19:12:18 ----D---- C:\Windows\Minidump
2016-05-08 19:12:18 ----D---- C:\Windows
2016-05-08 15:30:02 ----SHD---- C:\Windows\Installer
2016-05-08 15:30:02 ----D---- C:\Config.Msi
2016-05-08 15:26:41 ----RD---- C:\Program Files (x86)
2016-05-08 15:26:00 ----D---- C:\Program Files (x86)\Google
2016-05-08 15:25:35 ----D---- C:\Windows\Tasks
2016-05-08 15:25:35 ----D---- C:\Windows\system32\Tasks
2016-05-08 15:23:27 ----SD---- C:\Users\Tomáš\AppData\Roaming\Microsoft
2016-05-08 15:21:03 ----D---- C:\Games
2016-05-08 15:20:56 ----SHD---- C:\System Volume Information
2016-05-08 15:10:48 ----D---- C:\Windows\SysWOW64
2016-05-07 02:13:26 ----D---- C:\Windows\system32\config
2016-05-07 02:13:18 ----D---- C:\Windows\system32\NDF
2016-05-07 02:09:09 ----D---- C:\Windows\winsxs
2016-05-07 02:09:06 ----SD---- C:\Windows\SYSWOW64\GWX
2016-05-07 02:09:06 ----SD---- C:\Windows\system32\GWX
2016-05-07 02:09:01 ----D---- C:\Windows\system32\appraiser
2016-05-05 13:22:15 ----D---- C:\Windows\system32\catroot
2016-05-05 13:22:12 ----D---- C:\Windows\system32\drivers
2016-05-05 13:22:11 ----D---- C:\Windows\system32\DriverStore
2016-05-05 13:22:09 ----D---- C:\Program Files\AMD
2016-05-05 00:27:51 ----D---- C:\Program Files\Common Files
2016-05-05 00:27:51 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-05-05 00:27:50 ----D---- C:\Program Files (x86)\Common Files
2016-05-05 00:27:47 ----HD---- C:\ProgramData
2016-05-04 14:37:32 ----D---- C:\Windows\system32\wfp
2016-05-04 14:37:30 ----D---- C:\Windows\system32\wbem
2016-05-04 14:36:54 ----D---- C:\Windows\system32\catroot2
2016-05-04 14:36:33 ----D---- C:\Windows\registration
2016-05-04 14:35:34 ----RHD---- C:\MSOCache
2016-05-04 14:32:38 ----D---- C:\Windows\debug
2016-05-04 14:26:07 ----D---- C:\ProgramData\CanonIJPLM
2016-04-22 09:57:45 ----N---- C:\Windows\system32\MpSigStub.exe
2016-04-21 00:21:16 ----D---- C:\ProgramData\Microsoft Help
2016-04-15 05:35:34 ----D---- C:\Windows\rescache
2016-04-15 04:19:08 ----D---- C:\Windows\Microsoft.NET
2016-04-15 04:17:01 ----RSD---- C:\Windows\assembly
2016-04-15 04:03:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-04-15 04:03:44 ----D---- C:\Windows\system32\cs-CZ
2016-04-15 04:03:43 ----D---- C:\Windows\system32\en-US
2016-04-15 04:03:42 ----D---- C:\Windows\system32\Boot
2016-04-15 04:03:42 ----D---- C:\Windows\AppPatch
2016-04-15 04:03:41 ----D---- C:\Windows\SYSWOW64\wbem
2016-04-15 04:03:41 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-04-15 04:03:41 ----D---- C:\Windows\Logs
2016-04-15 04:03:38 ----D---- C:\Windows\SYSWOW64\en-US
2016-04-15 04:03:38 ----D---- C:\Program Files\Internet Explorer
2016-04-15 04:03:33 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-15 03:56:05 ----D---- C:\Windows\system32\MRT
2016-04-15 03:53:29 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 289120]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys [2015-11-05 90816]
R0 vsock;vSockets Driver; C:\Windows\system32\drivers\vsock.sys [2015-11-05 75512]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2015-11-06 57536]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2015-11-25 48832]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2015-11-25 26816]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys [2015-11-25 66752]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-08-04 21622784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-08-04 665088]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2016-02-24 96256]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-03-07 40832]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-03-07 65280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-02-11 2739176]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 133816]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
R3 SaiK1708;SaiK1708; C:\Windows\system32\DRIVERS\SaiK1708.sys [2012-09-20 180544]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU1708;SaiU1708; C:\Windows\system32\DRIVERS\SaiU1708.sys [2012-09-20 47168]
R3 vmkbd2;VMware kbd2; \??\C:\Windows\system32\drivers\VMkbd.sys [2015-11-25 33472]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2015-11-25 28864]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-08-04 246784]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 23808]
R2 PlaysService;Plays.tv Update Service; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [2016-04-05 32528]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2016-02-01 75136]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2015-11-25 89792]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\SysWOW64\vmnetdhcp.exe [2015-11-25 358080]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2015-11-06 906944]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\SysWOW64\vmnat.exe [2015-11-25 392896]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 374344]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-04-30 835664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-08 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-08 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 114688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-01 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#2 Příspěvek od Rudy »

Zdravím!
Zkusíme to vyčistit. Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#3 Příspěvek od The.Brain »

# AdwCleaner v5.115 - Log soubor vytvořen 08/05/2016 o 22:54:01
# Aktualizováno 01/05/2016 by Xplode
# Databáze : 2016-05-08.4 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X64)
# Jméno uživatele : Tomáš - TOMÁŠ-PC
# Spuštěno z : C:\Users\Tomáš\Desktop\adwcleaner_5.115.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****


***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****


***** [ Registr ] *****

[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b341249013b9e49d815896bb997e7f76

***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [912 bytes] - [08/05/2016 22:54:01]
C:\AdwCleaner\AdwCleaner[S1].txt - [951 bytes] - [08/05/2016 22:53:11]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1056 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#5 Příspěvek od The.Brain »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomáš at 2016-05-09 16:54:25
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 16 GB (13%) free of 122 GB
Total RAM: 8175 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:54:27, on 9.5.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Games\Mount & Blade\Steam.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~2\RAPTRI~1\PlaysTV\playstv.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe
C:\Program Files\Andy\HandyAndy.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr_im.exe
C:\Program Files\Andy\AndyADB.exe
C:\Program Files\Andy\AndyDnD.exe
C:\Games\Mount & Blade\bin\steamwebhelper.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [PlaysTV] "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Steam] "C:\Games\Mount & Blade\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HandyAndy.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Plays.tv Update Service (PlaysService) - Plays.tv, LLC - C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\SysWOW64\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\SysWOW64\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9170 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\SysWOW64\vmnat.exe
C:\Windows\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe"
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
"C:\Windows\System32\StikyNot.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Games\Mount & Blade\Steam.exe" -silent
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\PROGRA~2\RAPTRI~1\PlaysTV\playstv.exe" --log_to_file --from_stub --startup
"C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe" --log_to_file --from_stub --startup
C:\Windows\splwow64.exe 8192
"C:\Program Files\Andy\HandyAndy.exe"
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Windows\system32\GWX\GWX.exe"
raptr_im.exe
"C:\Program Files\Andy\AndyADB.exe"
"C:\Program Files\Andy\AndyDnD.exe"
"C:\PROGRA~2\RAPTRI~1\PlaysTV\plays_ep64.exe" 3616
"C:\PROGRA~2\RAPTRI~1\Raptr\raptr_ep64.exe" 3676
"C:\Games\Mount & Blade\bin\steamwebhelper.exe" -cachedir="C:\Users\Tomáš\AppData\Local\Steam\htmlcache" -steampid=2940 -buildid=1461972496 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR /uac
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=50.0.2661.94 --handshake-handle=0xb0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3832.0.1958101715\2017598312" --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,10,12,24,53,71 --gpu-vendor-id=0x1002 --gpu-device-id=0x6719 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,WebFontsIntervention<WebFontsIntervention --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/BrotliEncoding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch50pct_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithModuleLoadAnalysis/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_73/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-LocalIPPermissionCheck/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="3832.3.1809906053\1347048360" /prefetch:1
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,WebFontsIntervention<WebFontsIntervention --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/BrotliEncoding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch50pct_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithModuleLoadAnalysis/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_73/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-LocalIPPermissionCheck/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="3832.36.1913430423\2035604833" /prefetch:1
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-49e2fd07-7f77-44c9-bf4b-37b69b2e7dfe -SystemEventPortName:HostProcess-4487d2e6-9982-45a6-92b6-c99bc3637f0f -IoCancelEventPortName:HostProcess-14f18c91-c307-40db-9e74-d35760631473 -NonStateChangingEventPortName:HostProcess-1dc8825e-f6aa-4748-b4b9-3753eb459e76 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:619f7615-7d51-4990-987d-df8048ad6507 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,WebFontsIntervention<WebFontsIntervention --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/BrotliEncoding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch50pct_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithModuleLoadAnalysis/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_73/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-LocalIPPermissionCheck/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="3832.140.623699206\1382005743" /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Tomáš\Downloads\RSITx64 (1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-02-11 11776104]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 1340192]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"Steam"=C:\Games\Mount & Blade\steam.exe [2016-04-30 3077712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2011-08-04 1612920]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-04 767176]
"Raptr"=C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [2016-04-27 58640]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29 594992]
"PlaysTV"=C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [2016-04-05 71440]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HandyAndy.lnk - C:\Program Files\Andy\HandyAndy.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-05-08 22:53:05 ----D---- C:\AdwCleaner
2016-05-08 19:29:04 ----D---- C:\Program Files\trend micro
2016-05-08 15:10:48 ----A---- C:\Windows\SYSWOW64\CmdLineExt03.dll
2016-05-05 00:29:00 ----A---- C:\Windows\SYSWOW64\vsocklib.dll
2016-05-05 00:29:00 ----A---- C:\Windows\system32\vsocklib.dll
2016-05-05 00:29:00 ----A---- C:\Windows\system32\drivers\vsock.sys
2016-05-05 00:28:59 ----A---- C:\Windows\system32\drivers\vmx86.sys
2016-05-05 00:28:59 ----A---- C:\Windows\system32\drivers\VMkbd.sys
2016-05-05 00:28:33 ----A---- C:\Windows\SYSWOW64\vmnetdhcp.exe
2016-05-05 00:28:30 ----A---- C:\Windows\SYSWOW64\vmnat.exe
2016-05-05 00:28:30 ----A---- C:\Windows\system32\drivers\vmnetuserif.sys
2016-05-05 00:27:56 ----A---- C:\Windows\system32\vnetlib64.dll
2016-05-05 00:27:54 ----A---- C:\Windows\system32\drivers\hcmon.sys
2016-05-05 00:27:51 ----D---- C:\Program Files\Common Files\VMware
2016-05-05 00:27:47 ----D---- C:\ProgramData\VMware
2016-05-05 00:20:52 ----D---- C:\Program Files\AndyOfflineInstaller46.2
2016-05-05 00:20:30 ----D---- C:\Program Files\Andy
2016-04-27 15:55:28 ----D---- C:\System Recovery Files
2016-04-27 15:54:48 ----D---- C:\ProgramData\Recovery
2016-04-13 12:38:30 ----A---- C:\Windows\system32\samsrv.dll
2016-04-13 12:38:28 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-04-13 12:38:28 ----A---- C:\Windows\system32\samlib.dll
2016-04-13 12:38:23 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-13 12:38:22 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-04-13 12:38:22 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-04-13 12:38:18 ----A---- C:\Windows\system32\rpcss.dll
2016-04-13 12:38:17 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-04-13 12:38:17 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-04-13 12:38:17 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-13 12:38:17 ----A---- C:\Windows\system32\msxml3.dll
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-04-13 12:38:13 ----A---- C:\Windows\system32\ole32.dll
2016-04-13 12:38:13 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-13 12:38:13 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wow64win.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wow64.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\winsrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wdigest.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\sspicli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\srcore.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\smss.exe
2016-04-13 12:38:12 ----A---- C:\Windows\system32\schannel.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\ntdll.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\kernel32.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\kerberos.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\conhost.exe
2016-04-13 12:38:12 ----A---- C:\Windows\system32\certcli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\advapi32.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\wow64cpu.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\srclient.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\secur32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\rstrui.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\ntvdm64.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\lsass.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-13 12:38:11 ----A---- C:\Windows\system32\credssp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\auditpol.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidapi.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\user.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\msobjs.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\msaudite.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\adtschema.dll
2016-04-13 12:38:06 ----A---- C:\Windows\system32\win32k.sys
2016-04-13 12:38:06 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-13 12:38:00 ----A---- C:\Windows\SYSWOW64\tbs.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\tbs.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\fveapibase.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\fveapi.dll
2016-04-13 12:37:59 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 12:37:58 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\acmigration.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\iernonce.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-04-13 12:37:52 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 12:37:52 ----A---- C:\Windows\system32\inseng.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\urlmon.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\occache.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 12:37:50 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\iesetup.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-13 12:37:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-04-13 12:37:48 ----A---- C:\Windows\system32\vbscript.dll
2016-04-13 12:37:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-13 12:37:48 ----A---- C:\Windows\system32\iertutil.dll
2016-04-13 12:37:47 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\ieui.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\ieframe.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\webcheck.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\jscript.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-13 12:37:45 ----A---- C:\Windows\system32\wininet.dll
2016-04-13 12:37:45 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-13 12:37:45 ----A---- C:\Windows\system32\jscript9.dll
2016-04-13 12:37:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-13 12:37:43 ----A---- C:\Windows\system32\msrating.dll
2016-04-13 12:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-04-13 12:36:27 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-04-13 12:36:27 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2016-05-09 16:54:25 ----D---- C:\Windows\Temp
2016-05-09 14:19:55 ----D---- C:\Windows\Prefetch
2016-05-09 14:18:26 ----SHD---- C:\System Volume Information
2016-05-09 10:55:15 ----D---- C:\Users\Tomáš\AppData\Roaming\PlaysTV
2016-05-09 10:55:08 ----D---- C:\Users\Tomáš\AppData\Roaming\Raptr
2016-05-09 05:22:55 ----D---- C:\Windows\system32\config
2016-05-08 23:00:50 ----D---- C:\Windows\System32
2016-05-08 23:00:50 ----D---- C:\Windows\inf
2016-05-08 23:00:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-05-08 19:29:04 ----RD---- C:\Program Files
2016-05-08 19:21:56 ----RD---- C:\Users
2016-05-08 19:19:43 ----SHD---- C:\$Recycle.Bin
2016-05-08 19:12:18 ----D---- C:\Windows\Minidump
2016-05-08 19:12:18 ----D---- C:\Windows
2016-05-08 15:30:02 ----SHD---- C:\Windows\Installer
2016-05-08 15:30:02 ----D---- C:\Config.Msi
2016-05-08 15:26:41 ----RD---- C:\Program Files (x86)
2016-05-08 15:26:00 ----D---- C:\Program Files (x86)\Google
2016-05-08 15:25:35 ----D---- C:\Windows\Tasks
2016-05-08 15:25:35 ----D---- C:\Windows\system32\Tasks
2016-05-08 15:23:27 ----SD---- C:\Users\Tomáš\AppData\Roaming\Microsoft
2016-05-08 15:21:03 ----D---- C:\Games
2016-05-08 15:10:48 ----D---- C:\Windows\SysWOW64
2016-05-07 12:43:19 ----D---- C:\Users\Tomáš\AppData\Roaming\Andy
2016-05-07 12:42:18 ----D---- C:\Users\Tomáš\AppData\Roaming\VMware
2016-05-07 02:13:18 ----D---- C:\Windows\system32\NDF
2016-05-07 02:09:09 ----D---- C:\Windows\winsxs
2016-05-07 02:09:06 ----SD---- C:\Windows\SYSWOW64\GWX
2016-05-07 02:09:06 ----SD---- C:\Windows\system32\GWX
2016-05-07 02:09:01 ----D---- C:\Windows\system32\appraiser
2016-05-05 13:22:15 ----D---- C:\Windows\system32\catroot
2016-05-05 13:22:12 ----D---- C:\Windows\system32\drivers
2016-05-05 13:22:11 ----D---- C:\Windows\system32\DriverStore
2016-05-05 13:22:09 ----D---- C:\Program Files\AMD
2016-05-05 00:29:05 ----D---- C:\Program Files (x86)\VMware
2016-05-05 00:27:51 ----D---- C:\Program Files\Common Files
2016-05-05 00:27:51 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-05-05 00:27:50 ----D---- C:\Program Files (x86)\Common Files
2016-05-05 00:27:47 ----HD---- C:\ProgramData
2016-05-04 14:37:32 ----D---- C:\Windows\system32\wfp
2016-05-04 14:37:30 ----D---- C:\Windows\system32\wbem
2016-05-04 14:36:54 ----D---- C:\Windows\system32\catroot2
2016-05-04 14:36:33 ----D---- C:\Windows\registration
2016-05-04 14:35:34 ----RHD---- C:\MSOCache
2016-05-04 14:32:38 ----D---- C:\Windows\debug
2016-05-04 14:26:07 ----D---- C:\ProgramData\CanonIJPLM
2016-04-22 09:57:45 ----N---- C:\Windows\system32\MpSigStub.exe
2016-04-21 00:21:16 ----D---- C:\ProgramData\Microsoft Help
2016-04-15 05:35:34 ----D---- C:\Windows\rescache
2016-04-15 04:19:08 ----D---- C:\Windows\Microsoft.NET
2016-04-15 04:17:01 ----RSD---- C:\Windows\assembly
2016-04-15 04:03:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-04-15 04:03:44 ----D---- C:\Windows\system32\cs-CZ
2016-04-15 04:03:43 ----D---- C:\Windows\system32\en-US
2016-04-15 04:03:42 ----D---- C:\Windows\system32\Boot
2016-04-15 04:03:42 ----D---- C:\Windows\AppPatch
2016-04-15 04:03:41 ----D---- C:\Windows\SYSWOW64\wbem
2016-04-15 04:03:41 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-04-15 04:03:41 ----D---- C:\Windows\Logs
2016-04-15 04:03:38 ----D---- C:\Windows\SYSWOW64\en-US
2016-04-15 04:03:38 ----D---- C:\Program Files\Internet Explorer
2016-04-15 04:03:33 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-15 03:56:05 ----D---- C:\Windows\system32\MRT
2016-04-15 03:53:29 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 289120]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys [2015-11-05 90816]
R0 vsock;vSockets Driver; C:\Windows\system32\drivers\vsock.sys [2015-11-05 75512]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2015-11-06 57536]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2015-11-25 48832]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2015-11-25 26816]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys [2015-11-25 66752]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-08-04 21622784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-08-04 665088]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2016-02-24 96256]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-03-07 40832]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-03-07 65280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-02-11 2739176]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 133816]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
R3 SaiK1708;SaiK1708; C:\Windows\system32\DRIVERS\SaiK1708.sys [2012-09-20 180544]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU1708;SaiU1708; C:\Windows\system32\DRIVERS\SaiU1708.sys [2012-09-20 47168]
R3 vmkbd2;VMware kbd2; \??\C:\Windows\system32\drivers\VMkbd.sys [2015-11-25 33472]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2015-11-25 28864]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-08-04 246784]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 23808]
R2 PlaysService;Plays.tv Update Service; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [2016-04-05 32528]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2016-02-01 75136]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2015-11-25 89792]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\SysWOW64\vmnetdhcp.exe [2015-11-25 358080]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2015-11-06 906944]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\SysWOW64\vmnat.exe [2015-11-25 392896]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 374344]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-04-30 835664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-08 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-08 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 114688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-01 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#7 Příspěvek od The.Brain »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomáš at 2016-05-09 19:27:11
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 16 GB (13%) free of 122 GB
Total RAM: 8175 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:27:14, on 9.5.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Games\Mount & Blade\Steam.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\PROGRA~2\RAPTRI~1\PlaysTV\playstv.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe
C:\Program Files\Andy\HandyAndy.exe
C:\Program Files\Andy\AndyADB.exe
C:\Program Files\Andy\AndyDnD.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr_im.exe
C:\Games\Mount & Blade\bin\steamwebhelper.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [PlaysTV] "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Steam] "C:\Games\Mount & Blade\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HandyAndy.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Plays.tv Update Service (PlaysService) - Plays.tv, LLC - C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\SysWOW64\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\SysWOW64\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8997 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {B1C5E55B-3EA7-4615-8570-78592A9DC62C}
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\SysWOW64\vmnat.exe
C:\Windows\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe"
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\WerFault.exe -u -p 1672 -s 432
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-cf28650d-f040-441e-988e-5139d3d5ad88 -SystemEventPortName:HostProcess-c1f8849b-9bd7-4657-a2b0-e1bd60f6c936 -IoCancelEventPortName:HostProcess-2a754503-3e70-43cd-a0a5-88968767a921 -NonStateChangingEventPortName:HostProcess-ee8efa58-86d1-42b1-9858-f907aeded891 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d2d0ec3e-97b5-4eb3-91b9-2e60bc242ed8 -DeviceGroupId:WpdFsGroup
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
taskeng.exe {98BBBE8B-7C9A-4568-9EEB-793ABEA46DC3}
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Games\Mount & Blade\Steam.exe" -silent
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\PROGRA~2\RAPTRI~1\PlaysTV\playstv.exe" --log_to_file --from_stub --startup
"C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe" --log_to_file --from_stub --startup
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\splwow64.exe 8192
"C:\Program Files\Andy\HandyAndy.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Andy\AndyADB.exe"
"C:\Program Files\Andy\AndyDnD.exe"
raptr_im.exe
"C:\PROGRA~2\RAPTRI~1\PlaysTV\plays_ep64.exe" 3944
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR /uac
"C:\PROGRA~2\RAPTRI~1\Raptr\raptr_ep64.exe" 4024
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=50.0.2661.94 --handshake-handle=0xb0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3928.0.939434758\630036255" --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,10,12,24,53,71 --gpu-vendor-id=0x1002 --gpu-device-id=0x6719 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,WebFontsIntervention<WebFontsIntervention --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/BrotliEncoding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control50pct/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithModuleLoadAnalysis/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_73/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_04/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-LocalIPPermissionCheck/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --channel="3928.2.1080931921\886842857" /prefetch:1
"C:\Games\Mount & Blade\bin\steamwebhelper.exe" -cachedir="C:\Users\Tomáš\AppData\Local\Steam\htmlcache" -steampid=3680 -buildid=1461972496 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3421911635-4142593159-2296820687-10003_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3421911635-4142593159-2296820687-10003 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Tomáš\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-06 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-06 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-02-11 11776104]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 1340192]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"Steam"=C:\Games\Mount & Blade\steam.exe [2016-04-30 3077712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2011-08-04 1612920]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-04 767176]
"Raptr"=C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [2016-04-27 58640]
"PlaysTV"=C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [2016-04-05 71440]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HandyAndy.lnk - C:\Program Files\Andy\HandyAndy.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-05-09 19:21:37 ----D---- C:\_OTM
2016-05-08 22:53:05 ----D---- C:\AdwCleaner
2016-05-08 19:29:04 ----D---- C:\Program Files\trend micro
2016-05-08 15:10:48 ----A---- C:\Windows\SYSWOW64\CmdLineExt03.dll
2016-05-05 00:29:00 ----A---- C:\Windows\SYSWOW64\vsocklib.dll
2016-05-05 00:29:00 ----A---- C:\Windows\system32\vsocklib.dll
2016-05-05 00:29:00 ----A---- C:\Windows\system32\drivers\vsock.sys
2016-05-05 00:28:59 ----A---- C:\Windows\system32\drivers\vmx86.sys
2016-05-05 00:28:59 ----A---- C:\Windows\system32\drivers\VMkbd.sys
2016-05-05 00:28:33 ----A---- C:\Windows\SYSWOW64\vmnetdhcp.exe
2016-05-05 00:28:30 ----A---- C:\Windows\SYSWOW64\vmnat.exe
2016-05-05 00:28:30 ----A---- C:\Windows\system32\drivers\vmnetuserif.sys
2016-05-05 00:27:56 ----A---- C:\Windows\system32\vnetlib64.dll
2016-05-05 00:27:54 ----A---- C:\Windows\system32\drivers\hcmon.sys
2016-05-05 00:27:51 ----D---- C:\Program Files\Common Files\VMware
2016-05-05 00:27:47 ----D---- C:\ProgramData\VMware
2016-05-05 00:20:52 ----D---- C:\Program Files\AndyOfflineInstaller46.2
2016-05-05 00:20:30 ----D---- C:\Program Files\Andy
2016-04-27 15:55:28 ----D---- C:\System Recovery Files
2016-04-27 15:54:48 ----D---- C:\ProgramData\Recovery
2016-04-13 12:38:30 ----A---- C:\Windows\system32\samsrv.dll
2016-04-13 12:38:28 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-04-13 12:38:28 ----A---- C:\Windows\system32\samlib.dll
2016-04-13 12:38:23 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-13 12:38:22 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-04-13 12:38:22 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-04-13 12:38:18 ----A---- C:\Windows\system32\rpcss.dll
2016-04-13 12:38:17 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-04-13 12:38:17 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-04-13 12:38:17 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-13 12:38:17 ----A---- C:\Windows\system32\msxml3.dll
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-04-13 12:38:13 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-04-13 12:38:13 ----A---- C:\Windows\system32\ole32.dll
2016-04-13 12:38:13 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-13 12:38:13 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wow64win.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wow64.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\winsrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\wdigest.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\sspicli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\srcore.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\smss.exe
2016-04-13 12:38:12 ----A---- C:\Windows\system32\schannel.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\ntdll.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\kernel32.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\kerberos.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-13 12:38:12 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\conhost.exe
2016-04-13 12:38:12 ----A---- C:\Windows\system32\certcli.dll
2016-04-13 12:38:12 ----A---- C:\Windows\system32\advapi32.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:38:11 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-04-13 12:38:11 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\wow64cpu.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\srclient.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\secur32.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\rstrui.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\ntvdm64.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\lsass.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-13 12:38:11 ----A---- C:\Windows\system32\credssp.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\auditpol.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 12:38:11 ----A---- C:\Windows\system32\appidapi.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:38:10 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\user.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\msobjs.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\msaudite.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-13 12:38:10 ----A---- C:\Windows\system32\adtschema.dll
2016-04-13 12:38:06 ----A---- C:\Windows\system32\win32k.sys
2016-04-13 12:38:06 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-13 12:38:00 ----A---- C:\Windows\SYSWOW64\tbs.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\tbs.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\fveapibase.dll
2016-04-13 12:38:00 ----A---- C:\Windows\system32\fveapi.dll
2016-04-13 12:37:59 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 12:37:58 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 12:37:58 ----A---- C:\Windows\system32\acmigration.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-04-13 12:37:54 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\iernonce.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-13 12:37:54 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-04-13 12:37:52 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-04-13 12:37:52 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 12:37:52 ----A---- C:\Windows\system32\inseng.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-04-13 12:37:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\urlmon.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\occache.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 12:37:51 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-04-13 12:37:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 12:37:50 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\iesetup.dll
2016-04-13 12:37:50 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-13 12:37:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-04-13 12:37:48 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-04-13 12:37:48 ----A---- C:\Windows\system32\vbscript.dll
2016-04-13 12:37:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-13 12:37:48 ----A---- C:\Windows\system32\iertutil.dll
2016-04-13 12:37:47 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\ieui.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\ieframe.dll
2016-04-13 12:37:47 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\webcheck.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\jscript.dll
2016-04-13 12:37:46 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-13 12:37:45 ----A---- C:\Windows\system32\wininet.dll
2016-04-13 12:37:45 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-13 12:37:45 ----A---- C:\Windows\system32\jscript9.dll
2016-04-13 12:37:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-13 12:37:43 ----A---- C:\Windows\system32\msrating.dll
2016-04-13 12:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-04-13 12:36:27 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-04-13 12:36:27 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2016-05-09 19:27:07 ----D---- C:\Windows\Temp
2016-05-09 19:24:33 ----D---- C:\Windows\Prefetch
2016-05-09 19:24:25 ----D---- C:\Users\Tomáš\AppData\Roaming\Raptr
2016-05-09 19:24:04 ----D---- C:\Users\Tomáš\AppData\Roaming\PlaysTV
2016-05-09 19:22:09 ----D---- C:\Windows
2016-05-09 19:21:37 ----D---- C:\Windows\Tasks
2016-05-09 14:18:26 ----SHD---- C:\System Volume Information
2016-05-09 05:22:55 ----D---- C:\Windows\system32\config
2016-05-08 23:00:50 ----D---- C:\Windows\System32
2016-05-08 23:00:50 ----D---- C:\Windows\inf
2016-05-08 23:00:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-05-08 19:29:04 ----RD---- C:\Program Files
2016-05-08 19:21:56 ----RD---- C:\Users
2016-05-08 19:19:43 ----SHD---- C:\$Recycle.Bin
2016-05-08 19:12:18 ----D---- C:\Windows\Minidump
2016-05-08 15:30:02 ----SHD---- C:\Windows\Installer
2016-05-08 15:30:02 ----D---- C:\Config.Msi
2016-05-08 15:26:41 ----RD---- C:\Program Files (x86)
2016-05-08 15:26:00 ----D---- C:\Program Files (x86)\Google
2016-05-08 15:25:35 ----D---- C:\Windows\system32\Tasks
2016-05-08 15:23:27 ----SD---- C:\Users\Tomáš\AppData\Roaming\Microsoft
2016-05-08 15:21:03 ----D---- C:\Games
2016-05-08 15:10:48 ----D---- C:\Windows\SysWOW64
2016-05-07 12:43:19 ----D---- C:\Users\Tomáš\AppData\Roaming\Andy
2016-05-07 12:42:18 ----D---- C:\Users\Tomáš\AppData\Roaming\VMware
2016-05-07 02:13:18 ----D---- C:\Windows\system32\NDF
2016-05-07 02:09:09 ----D---- C:\Windows\winsxs
2016-05-07 02:09:06 ----SD---- C:\Windows\SYSWOW64\GWX
2016-05-07 02:09:06 ----SD---- C:\Windows\system32\GWX
2016-05-07 02:09:01 ----D---- C:\Windows\system32\appraiser
2016-05-05 13:22:15 ----D---- C:\Windows\system32\catroot
2016-05-05 13:22:12 ----D---- C:\Windows\system32\drivers
2016-05-05 13:22:11 ----D---- C:\Windows\system32\DriverStore
2016-05-05 13:22:09 ----D---- C:\Program Files\AMD
2016-05-05 00:29:05 ----D---- C:\Program Files (x86)\VMware
2016-05-05 00:27:51 ----D---- C:\Program Files\Common Files
2016-05-05 00:27:51 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-05-05 00:27:50 ----D---- C:\Program Files (x86)\Common Files
2016-05-05 00:27:47 ----HD---- C:\ProgramData
2016-05-04 14:37:32 ----D---- C:\Windows\system32\wfp
2016-05-04 14:37:30 ----D---- C:\Windows\system32\wbem
2016-05-04 14:36:54 ----D---- C:\Windows\system32\catroot2
2016-05-04 14:36:33 ----D---- C:\Windows\registration
2016-05-04 14:35:34 ----RHD---- C:\MSOCache
2016-05-04 14:32:38 ----D---- C:\Windows\debug
2016-05-04 14:26:07 ----D---- C:\ProgramData\CanonIJPLM
2016-04-22 09:57:45 ----N---- C:\Windows\system32\MpSigStub.exe
2016-04-21 00:21:16 ----D---- C:\ProgramData\Microsoft Help
2016-04-15 05:35:34 ----D---- C:\Windows\rescache
2016-04-15 04:19:08 ----D---- C:\Windows\Microsoft.NET
2016-04-15 04:17:01 ----RSD---- C:\Windows\assembly
2016-04-15 04:03:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-04-15 04:03:44 ----D---- C:\Windows\system32\cs-CZ
2016-04-15 04:03:43 ----D---- C:\Windows\system32\en-US
2016-04-15 04:03:42 ----D---- C:\Windows\system32\Boot
2016-04-15 04:03:42 ----D---- C:\Windows\AppPatch
2016-04-15 04:03:41 ----D---- C:\Windows\SYSWOW64\wbem
2016-04-15 04:03:41 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-04-15 04:03:41 ----D---- C:\Windows\Logs
2016-04-15 04:03:38 ----D---- C:\Windows\SYSWOW64\en-US
2016-04-15 04:03:38 ----D---- C:\Program Files\Internet Explorer
2016-04-15 04:03:33 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-15 03:56:05 ----D---- C:\Windows\system32\MRT
2016-04-15 03:53:29 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 289120]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys [2015-11-05 90816]
R0 vsock;vSockets Driver; C:\Windows\system32\drivers\vsock.sys [2015-11-05 75512]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2015-11-06 57536]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2015-11-25 48832]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2015-11-25 26816]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys [2015-11-25 66752]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-08-04 21622784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-08-04 665088]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2016-02-24 96256]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-03-07 40832]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-03-07 65280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-02-11 2739176]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 133816]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
R3 SaiK1708;SaiK1708; C:\Windows\system32\DRIVERS\SaiK1708.sys [2012-09-20 180544]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU1708;SaiU1708; C:\Windows\system32\DRIVERS\SaiU1708.sys [2012-09-20 47168]
R3 vmkbd2;VMware kbd2; \??\C:\Windows\system32\drivers\VMkbd.sys [2015-11-25 33472]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2015-11-25 28864]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-08-04 246784]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 23808]
R2 PlaysService;Plays.tv Update Service; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [2016-04-05 32528]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2016-02-01 75136]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2015-11-25 89792]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\SysWOW64\vmnetdhcp.exe [2015-11-25 358080]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2015-11-06 906944]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\SysWOW64\vmnat.exe [2015-11-25 392896]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 374344]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-04-30 835664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-08 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-08 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 114688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-01 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#9 Příspěvek od The.Brain »

Nee :40:
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#10 Příspěvek od Rudy »

Udělejte ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#11 Příspěvek od The.Brain »

Tak scan proběhl a po stisknutí tlačítka "Dokončit" žádný výstup. V historii jsem našel "záznam skenu" a "protection log", tak přikládám obojí, snad je to ono.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 9.5.2016
Čas skenování: 23:08
Protokol: a.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.05.09.05
Databáze rootkitů: v2016.05.06.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Tomáš

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 320365
Uplynulý čas: 5 min, 45 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

----------------------------------------------------------------------------------------------------

Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 9.5.2016 23:06, SYSTEM, TOMÁŠ-PC, Protection, Malware Protection, Starting,
Protection, 9.5.2016 23:06, SYSTEM, TOMÁŠ-PC, Protection, Malware Protection, Started,
Protection, 9.5.2016 23:06, SYSTEM, TOMÁŠ-PC, Protection, Malicious Website Protection, Starting,
Protection, 9.5.2016 23:06, SYSTEM, TOMÁŠ-PC, Protection, Malicious Website Protection, Started,
Update, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Manual, Rootkit Database, 2016.2.8.1, 2016.5.6.1,
Update, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Manual, Remediation Database, 2016.2.12.1, 2016.5.6.1,
Update, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Manual, Domain Database, 2016.2.16.8, 2016.5.9.4,
Update, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Manual, Malware Database, 2016.2.16.6, 2016.5.9.5,
Update, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Manual, IP Database, 2016.2.8.1, 2016.5.8.1,
Protection, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Protection, Refresh, Starting,
Protection, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Protection, Malicious Website Protection, Stopping,
Protection, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Protection, Malicious Website Protection, Stopped,
Protection, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Protection, Refresh, Success,
Protection, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Protection, Malicious Website Protection, Starting,
Protection, 9.5.2016 23:07, SYSTEM, TOMÁŠ-PC, Protection, Malicious Website Protection, Started,
Scan, 9.5.2016 23:14, SYSTEM, TOMÁŠ-PC, Manual, Začátek: 9.5.2016 23:08, Doba trvání: 5 min 45 sekund, Sken hrozeb, Dokončeno, Detekce malwaru 0, Detekce jiných hrozeb 0,

(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#12 Příspěvek od Rudy »

Nic podstatného. Je to systémová chyba. Zkuste následující návod: http://www.pc-help.cz/viewtopic.php?t=56961 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#13 Příspěvek od The.Brain »

Díky za tip, tohle už jsem zkoušel, bez výsledku.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Program správce oken plochy přestal pracovat

#14 Příspěvek od Rudy »

Ještě můžeme zkusit systémovou opravu. Startmenu>přík. řádek>(napsat) cmd>enter. Do otevřeného okna napište:
sfc/scannow
a odentrujte. Spustí se sken a případná oprava.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
The.Brain
Návštěvník
Návštěvník
Příspěvky: 96
Registrován: 27 črc 2009 11:03

Re: Program správce oken plochy přestal pracovat

#15 Příspěvek od The.Brain »

Píše to "Nástroj sfc může spouštět pouze správce z relace konzoly", ačkoli účet, jímž jsem přihlášen, správce je.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“