VIRY.CZ

Prosím o kontrolu logu z RSIT, děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uživatel at 2016-10-16 09:58:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 72 GB (10%) free of 700 GB
Total RAM: 3948 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:58:50, on 16.10.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Kuba\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Kuba\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service Stub Loader (BRSptStub) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptStub.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11937 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe" --type=host --daemon-pipe=428
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}"
"C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {15F8C764-5D9B-47F3-B4BC-E0337F96BBE3}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
"C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe" -s
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=53.0.2785.143 --handshake-handle=0xb8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4080.0.209095720\1892659629" --mojo-application-channel-token=FCDAE06D1F76D402B3DE07728CB72149 --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-conservative/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_41/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,11,13,14,15,18,31,48,56 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2342 --gpu-driver-date=3-25-2011 --mojo-platform-channel-handle=1224 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-conservative/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_41/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=15C94AF2CF5E65F282FE21B685DD1418 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --mojo-channel-token=786A9F43FACE20D709E2B195C7BB3F6A --mojo-application-channel-token=15C94AF2CF5E65F282FE21B685DD1418 --channel="4080.3.170392089\995793038" --mojo-platform-channel-handle=2040 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-conservative/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_41/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=237991ACE844B566AD3E41C70503FB51 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --mojo-channel-token=894C39298FB5D6146E4FDC5419832ADE --mojo-application-channel-token=237991ACE844B566AD3E41C70503FB51 --channel="4080.5.1690064021\1258825672" --mojo-platform-channel-handle=4256 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Uživatel\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\RMAutoUpdate.job - C:\Program Files (x86)\PC Tools Registry Mechanic\SULauncher.exe
C:\Windows\tasks\RMSchedule.job - C:\Program Files (x86)\PC Tools Registry Mechanic\RegMech.exe /F
C:\Windows\tasks\WpsUpdateTask_Katka.job - C:\Program Files (x86)\Kingsoft\Kingsoft Presentation\office6\wpsupdate.exe -from=task

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-09-09 948792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-09-09 713440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-01-26 368728]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-05-09 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-05-09 391960]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-05-09 419096]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-10-08 2392360]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-09 11860072]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-05-10 1831528]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]
"Spotify Web Helper"=C:\Users\Kuba\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-09-18 1529456]
"Spotify"=C:\Users\Kuba\AppData\Roaming\Spotify\Spotify.exe [2016-09-18 6795376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-24 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate]
C:\Program Files (x86)\OpenSubtitlesPlayer\ALLUpdate.exe [2015-02-12 2615752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2011-04-24 297280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent]
C:\Program Files (x86)\Bluestacks\HD-Agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
C:\Users\Kuba\Desktop\Jiné programy\Nemo\Clownfish.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Uživatel\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Uživatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe [2016-10-05 3503088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2011-03-29 408432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2011-03-29 202608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2013-09-09 2532352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]
C:\Program Files\Microsoft LifeChat\LifeChat.exe [2009-09-24 371712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-09-13 5565960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Remote Mouse]
C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
C:\Users\Katka\AppData\Roaming\Spotify\Spotify.exe [2016-10-14 6884976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2000-08-24 110592]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-04-02 340848]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-03-14 1081424]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2012-08-21 105120]
""= []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-10-14 9083840]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-09-13 5565960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-10-16 09:58:43 ----D---- C:\rsit
2016-10-08 11:02:55 ----A---- C:\Windows\system32\drivers\vcsvad.sys
2016-09-22 18:02:24 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-09-22 18:02:24 ----A---- C:\Windows\system32\tzres.dll
2016-09-17 22:03:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-17 22:03:19 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-09-17 22:03:19 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-09-17 22:03:19 ----A---- C:\Windows\system32\ntdll.dll
2016-09-17 22:03:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-09-17 22:03:18 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\schannel.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\KernelBase.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\kernel32.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\advapi32.dll
2016-09-17 22:03:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\wow64win.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\winsrv.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-09-17 22:03:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-09-17 22:03:16 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\wow64.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\srcore.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-09-17 22:03:16 ----A---- C:\Windows\system32\drivers\appid.sys
2016-09-17 22:03:16 ----A---- C:\Windows\system32\conhost.exe
2016-09-17 22:03:16 ----A---- C:\Windows\system32\appidsvc.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\appidapi.dll
2016-09-17 22:03:15 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-09-17 22:03:13 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-09-17 22:03:13 ----A---- C:\Windows\system32\rstrui.exe
2016-09-17 22:03:13 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-17 22:03:12 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-09-17 22:03:12 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\srclient.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\smss.exe
2016-09-17 22:03:12 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\ntvdm64.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\wow64cpu.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\certcli.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\apisetschema.dll
2016-09-17 22:03:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-17 22:03:10 ----A---- C:\Windows\SYSWOW64\user.exe
2016-09-17 22:03:10 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-09-17 22:03:10 ----A---- C:\Windows\system32\rpcrt4.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\wdigest.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\TSpkg.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\sspicli.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\rpchttp.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\msv1_0.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\lsasrv.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\kerberos.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-09-17 22:03:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\sspisrv.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\secur32.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\msobjs.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\msaudite.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\lsass.exe
2016-09-17 22:03:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-09-17 22:03:08 ----A---- C:\Windows\system32\cryptbase.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\credssp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\auditpol.exe
2016-09-17 22:03:08 ----A---- C:\Windows\system32\adtschema.dll
2016-09-17 22:02:43 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-17 22:02:43 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-17 22:02:42 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-09-17 22:02:36 ----A---- C:\Windows\system32\iernonce.dll
2016-09-17 22:02:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\inseng.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\ie4uinit.exe
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-09-17 22:02:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-17 22:02:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\urlmon.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\occache.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\iedkcs32.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-09-17 22:02:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-17 22:02:29 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-17 22:02:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-17 22:02:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-09-17 22:02:27 ----A---- C:\Windows\system32\iesetup.dll
2016-09-17 22:02:27 ----A---- C:\Windows\system32\ieapfltr.dll
2016-09-17 22:02:25 ----A---- C:\Windows\system32\iertutil.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-09-17 22:02:24 ----A---- C:\Windows\system32\vbscript.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-09-17 22:02:23 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-17 22:02:22 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-17 22:02:21 ----A---- C:\Windows\system32\ieui.dll
2016-09-17 22:02:21 ----A---- C:\Windows\system32\ieframe.dll
2016-09-17 22:02:19 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-09-17 22:02:19 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\webcheck.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\jscript9diag.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\jscript.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-17 22:02:17 ----A---- C:\Windows\system32\jscript9.dll
2016-09-17 22:02:16 ----A---- C:\Windows\system32\wininet.dll
2016-09-17 22:02:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-09-17 22:02:14 ----A---- C:\Windows\system32\msrating.dll
2016-09-17 22:02:13 ----A---- C:\Windows\system32\mshtml.dll
2016-09-17 22:01:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-09-17 22:01:40 ----A---- C:\Windows\system32\win32k.sys
2016-09-17 22:01:40 ----A---- C:\Windows\system32\user32.dll
2016-09-17 21:55:38 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-09-17 21:55:38 ----A---- C:\Windows\system32\oleaut32.dll

======List of files/folders modified in the last 1 month======

2016-10-16 09:58:48 ----D---- C:\Program Files\trend micro
2016-10-16 09:55:30 ----D---- C:\AdwCleaner
2016-10-16 09:50:40 ----D---- C:\Windows\temp
2016-10-16 09:45:54 ----D---- C:\Windows\SoftwareDistribution
2016-10-16 09:45:25 ----D---- C:\Program Files (x86)\Steam
2016-10-16 09:45:19 ----D---- C:\Windows\Logs
2016-10-16 09:45:19 ----D---- C:\Windows\inf
2016-10-16 09:45:19 ----D---- C:\Windows\debug
2016-10-16 09:45:19 ----D---- C:\Windows
2016-10-16 09:44:58 ----A---- C:\Windows\SYSWOW64\log.txt
2016-10-16 09:41:49 ----D---- C:\Windows\system32\config
2016-10-16 09:40:25 ----D---- C:\ProgramData\clear.fi
2016-10-16 09:39:54 ----D---- C:\Program Files (x86)\PC Tools Registry Mechanic
2016-10-15 19:54:18 ----D---- C:\Windows\System32
2016-10-15 19:54:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-10-15 11:30:26 ----D---- C:\Windows\system32\drivers
2016-10-15 10:49:14 ----D---- C:\Program Files (x86)\Battle.net
2016-10-14 17:33:40 ----AD---- C:\ProgramData\Temp
2016-10-12 12:11:32 ----D---- C:\Windows\SysWOW64
2016-10-12 12:11:28 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-10-12 12:11:22 ----D---- C:\Windows\system32\Macromed
2016-10-12 12:11:20 ----D---- C:\Windows\SYSWOW64\Macromed
2016-10-12 10:58:20 ----SHD---- C:\System Volume Information
2016-10-08 16:39:07 ----D---- C:\Program Files (x86)\Hearthstone
2016-10-08 14:15:20 ----AD---- C:\ProgramData
2016-10-08 11:13:24 ----RD---- C:\Program Files (x86)
2016-10-08 11:11:03 ----D---- C:\Windows\system32\DriverStore
2016-10-06 20:04:00 ----D---- C:\Windows\Prefetch
2016-10-05 18:34:06 ----D---- C:\ProgramData\Origin
2016-10-05 18:31:46 ----D---- C:\Program Files (x86)\Origin
2016-10-05 12:59:39 ----D---- C:\Users\Uživatel\AppData\Roaming\Spotify
2016-09-29 18:25:47 ----D---- C:\Program Files\TruckersMP
2016-09-28 19:32:06 ----D---- C:\ProgramData\Soulseek
2016-09-25 20:52:20 ----D---- C:\Windows\rescache
2016-09-25 20:35:27 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2016-09-25 19:35:16 ----SHD---- C:\Windows\Installer
2016-09-25 19:35:16 ----D---- C:\ProgramData\Skype
2016-09-25 19:35:15 ----D---- C:\Config.Msi
2016-09-25 19:35:06 ----RD---- C:\Program Files (x86)\Skype
2016-09-25 19:35:06 ----D---- C:\Program Files (x86)\Common Files
2016-09-22 22:18:36 ----D---- C:\Windows\winsxs
2016-09-22 22:18:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-09-22 22:18:21 ----D---- C:\Windows\system32\cs-CZ
2016-09-22 17:46:56 ----D---- C:\Windows\system32\Tasks
2016-09-18 11:57:59 ----D---- C:\Program Files\Internet Explorer
2016-09-18 11:57:58 ----D---- C:\Windows\SYSWOW64\en-US
2016-09-18 11:57:56 ----D---- C:\Windows\system32\en-US
2016-09-18 11:57:53 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-18 11:57:39 ----D---- C:\Windows\AppPatch
2016-09-18 11:57:38 ----D---- C:\Windows\system32\Boot
2016-09-18 02:13:48 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-18 02:13:48 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-09-18 01:41:00 ----D---- C:\Windows\system32\MRT
2016-09-18 01:40:05 ----AC---- C:\Windows\system32\MRT.exe
2016-09-17 21:56:39 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-09-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-09-14 437272]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-09-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-09-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-09-22 513632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 283200]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-07-14 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-07-14 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-07-14 62776]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-09-09 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-09-09 163416]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2015-09-22 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2016-02-24 130880]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2016-06-08 34720]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-14 2899176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-04-20 169584]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2009-12-03 721768]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2009-12-03 269672]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2009-12-03 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2009-12-03 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-10-08 1395248]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 dvdmmg;dvdmmg; \??\C:\Windows\system32\drivers\dvdmmg.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-01-14 74840]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-09-09 37656]
S3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 cpuz135;cpuz135; \??\C:\Users\UIVATE~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-01-30 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2015-01-30 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2015-01-30 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2015-07-10 141440]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-09 197128]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-03-14 352336]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-04-02 173424]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-05-10 872552]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2013-06-13 101888]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2016-09-13 2621448]
R2 chromoting;Služba Vzdálené plochy Chrome; C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe [2016-06-20 76616]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [2016-08-31 419248]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-08-21 794272]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-01-30 76888]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2016-01-29 190120]
R2 RzKLService;RzKLService; C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe [2016-02-26 132864]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-03 483688]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-03 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2016-10-05 2209296]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-12 270016]
S3 BRSptStub;BitRaider Mini-Support Service Stub Loader; C:\ProgramData\BitRaider\BRSptStub.exe [2014-11-06 363208]
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2014-11-17 182304]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-08-29 655624]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-06-21 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-06-21 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-09-01 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-10-05 2142728]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-11-19 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-10-13 1459488]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-09 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-26 29696]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-03-11 136120]
S4 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
S4 PinnacleUpdateSvc;PinnacleUpdate Service; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [2015-08-06 438272]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

tak ten ted nenašel nic viz log
ale synátor (je to jeho NB) mi řekl že ADW spustil už včera
takže dávám nejdřív dnešní log a pod něj včerejší

# AdwCleaner v6.021 - Logfile created 16/10/2016 at 10:47:57
# Updated on 06/10/2016 by ToolsLib
# Database : 2016-10-15.3 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Uživatel - ACER
# Running from : C:\Users\Uživatel\Desktop\adwcleaner_6.021.exe
# Mode: Scan
# Support : https://toolslib.net/forum



***** [ Services ] *****

No malicious services found.


***** [ Folders ] *****

No malicious folders found.


***** [ Files ] *****

No malicious files found.


***** [ DLL ] *****

No malicious DLLs found.


***** [ WMI ] *****

No malicious keys found.


***** [ Shortcuts ] *****

No infected shortcut found.


***** [ Scheduled Tasks ] *****

No malicious task found.


***** [ Registry ] *****

No malicious registry entries found.


***** [ Web browsers ] *****

No malicious Firefox based browser items found.
No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1297 Bytes] - [10/07/2016 20:46:08]
C:\AdwCleaner\AdwCleaner[C2].txt - [12115 Bytes] - [28/09/2016 18:56:34]
C:\AdwCleaner\AdwCleaner[C3].txt - [1744 Bytes] - [15/10/2016 21:56:56]
C:\AdwCleaner\AdwCleaner[S1].txt - [376 Bytes] - [10/07/2016 20:36:49]
C:\AdwCleaner\AdwCleaner[S2].txt - [1109 Bytes] - [10/07/2016 20:41:09]
C:\AdwCleaner\AdwCleaner[S3].txt - [11822 Bytes] - [28/09/2016 18:54:20]
C:\AdwCleaner\AdwCleaner[S4].txt - [1833 Bytes] - [15/10/2016 21:56:39]
C:\AdwCleaner\AdwCleaner[S5].txt - [1665 Bytes] - [16/10/2016 09:55:30]
C:\AdwCleaner\AdwCleaner[S6].txt - [1586 Bytes] - [16/10/2016 10:47:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1659 Bytes] ##########


____

# AdwCleaner v6.020 - Logfile created 28/09/2016 at 18:54:20
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-27.2 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Uživatel - ACER
# Running from : C:\Users\Uživatel\Desktop\adwcleaner_6.020.exe
# Mode: Scan
# Support : https://toolslib.net/forum



***** [ Services ] *****

No malicious services found.


***** [ Folders ] *****

No malicious folders found.


***** [ Files ] *****

File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_ciuvo.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_ciuvo.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_inst.shoppingate.info_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_inst.shoppingate.info_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_nps.pastaleads.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_nps.pastaleads.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_pstatic.eshopcomp.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_pstatic.eshopcomp.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_www.superfish.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_ad.turn.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_ad.turn.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_api.ciuvo.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_api.ciuvo.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_astrology.dl.tb.ask.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_astrology.dl.tb.ask.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_cdn.turn.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_cdn.turn.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_cs.reimageplus.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_cs.reimageplus.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_cursormania.dl.tb.ask.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_cursormania.dl.tb.ask.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_en.softonic.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_eula.mindspark.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_eula.mindspark.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_fromdoctopdf.dl.tb.ask.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_fromdoctopdf.dl.tb.ask.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_lego-harry-potter.en.softonic.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_lego-harry-potter.en.softonic.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_lego-the-hobbit.en.softonic.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_lego-the-hobbit.en.softonic.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_mywebface.dl.tb.ask.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_mywebface.dl.tb.ask.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_nps.pastaleads.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_nps.pastaleads.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_octodad-game.en.softonic.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_octodad-game.en.softonic.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_pstatic.eshopcomp.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_pstatic.eshopcomp.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_search.tb.ask.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_search.tb.ask.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_st.chatango.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_wlogin.icq.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.azlyrics.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.solvusoft.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.solvusoft.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found: C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Found: C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_zwinky.dl.tb.ask.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_zwinky.dl.tb.ask.com_0.localstorage-journal
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found: C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found: C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Found: C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxp_www.superfish.com_0.localstorage-journal


***** [ DLL ] *****

No malicious DLLs found.


***** [ WMI ] *****

No malicious keys found.


***** [ Shortcuts ] *****

No infected shortcut found.


***** [ Scheduled Tasks ] *****

No malicious task found.


***** [ Registry ] *****

Key Found: HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
Key Found: HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}


***** [ Web browsers ] *****

No malicious Firefox based browser items found.
Chrome pref Found: [C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - ask.com
Chrome pref Found: [C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences ] - flcjcajklmlbpmgckpcmnampagbhhmcp
Chrome pref Found: [C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences ] - jbolfgndggfhhpbnkgnpjkfhinclbigj
Chrome pref Found: [C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - askws
Chrome pref Found: [C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - painttool-sai.en.softonic.com
Chrome pref Found: [C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 2\Web data] - ask.com
Chrome pref Found: [C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 2\Web data] - aol.com
Chrome pref Found: [C:\Users\Katka\AppData\Local\Google\Chrome\User Data\Profile 5\Web data] - ask.com
Chrome pref Found: [C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - ask.com
Chrome pref Found: [C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - aol.com
Chrome pref Found: [C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences ] - flcjcajklmlbpmgckpcmnampagbhhmcp
Chrome pref Found: [C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences ] - jbolfgndggfhhpbnkgnpjkfhinclbigj

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1297 Bytes] - [10/07/2016 20:46:08]
C:\AdwCleaner\AdwCleaner[S1].txt - [376 Bytes] - [10/07/2016 20:36:49]
C:\AdwCleaner\AdwCleaner[S2].txt - [1109 Bytes] - [10/07/2016 20:41:09]
C:\AdwCleaner\AdwCleaner[S3].txt - [11668 Bytes] - [28/09/2016 18:54:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [11742 Bytes] ##########

ADW nemazal, neklikl jste na mazání. Zkuste ještě jednou.

tak takto

# AdwCleaner v6.021 - Logfile created 16/10/2016 at 15:42:48
# Updated on 06/10/2016 by ToolsLib
# Database : 2016-10-15.3 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Uživatel - ACER
# Running from : C:\Users\Uživatel\Desktop\adwcleaner_6.021.exe
# Mode: Clean
# Support : https://toolslib.net/forum



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****



***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1297 Bytes] - [10/07/2016 20:46:08]
C:\AdwCleaner\AdwCleaner[C2].txt - [12115 Bytes] - [28/09/2016 18:56:34]
C:\AdwCleaner\AdwCleaner[C3].txt - [1744 Bytes] - [15/10/2016 21:56:56]
C:\AdwCleaner\AdwCleaner[C4].txt - [1570 Bytes] - [16/10/2016 10:48:07]
C:\AdwCleaner\AdwCleaner[C5].txt - [1054 Bytes] - [16/10/2016 15:42:48]
C:\AdwCleaner\AdwCleaner[S1].txt - [376 Bytes] - [10/07/2016 20:36:49]
C:\AdwCleaner\AdwCleaner[S2].txt - [1109 Bytes] - [10/07/2016 20:41:09]
C:\AdwCleaner\AdwCleaner[S3].txt - [11822 Bytes] - [28/09/2016 18:54:20]
C:\AdwCleaner\AdwCleaner[S4].txt - [1833 Bytes] - [15/10/2016 21:56:39]
C:\AdwCleaner\AdwCleaner[S5].txt - [1665 Bytes] - [16/10/2016 09:55:30]
C:\AdwCleaner\AdwCleaner[S6].txt - [1738 Bytes] - [16/10/2016 10:47:57]
C:\AdwCleaner\AdwCleaner[S7].txt - [1884 Bytes] - [16/10/2016 15:42:39]

########## EOF - C:\AdwCleaner\AdwCleaner[C5].txt - [1638 Bytes] ##########

Teď je to OK. Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uživatel at 2016-10-16 17:55:34
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 77 GB (11%) free of 700 GB
Total RAM: 3948 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:55:38, on 16.10.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Kuba\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Kuba\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service Stub Loader (BRSptStub) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptStub.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11877 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe" --type=host --daemon-pipe=436
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}"
"C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
"C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe" -s
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
taskeng.exe {73F7A7A5-B182-42C1-A513-8974EC4F736E}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=53.0.2785.143 --handshake-handle=0xb8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4668.0.601407996\1980622768" --mojo-application-channel-token=FCE50CFCF71D3C348D27F5AE586A3508 --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-conservative/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeChannelStable/Enabled/ClientSideDetectionModel/Model0/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_41/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,11,13,14,15,18,31,48,56 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2342 --gpu-driver-date=3-25-2011 --mojo-platform-channel-handle=1252 --ignored=" --type=renderer " /prefetch:2
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,BlockSmallPluginContent<PluginPowerSaverTiny,MaterialDesignUserManager<MaterialDesignUserManager,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-conservative/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeChannelStable/Enabled/*ClientSideDetectionModel/Model0/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MaterialDesignUserManager/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PluginPowerSaverTiny/Enabled/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/MonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SignInPasswordPromo/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_41/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=90B3AF849C96419CFD849025FA3CF4CC --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --mojo-channel-token=6CE3306BF5812A10F971F62D8A885538 --mojo-application-channel-token=90B3AF849C96419CFD849025FA3CF4CC --channel="4668.3.677570006\2084155643" --mojo-platform-channel-handle=3856 /prefetch:1
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\system32\svchost.exe -k SDRSVC

"C:\Users\Uživatel\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\RMAutoUpdate.job - C:\Program Files (x86)\PC Tools Registry Mechanic\SULauncher.exe
C:\Windows\tasks\RMSchedule.job - C:\Program Files (x86)\PC Tools Registry Mechanic\RegMech.exe /F
C:\Windows\tasks\WpsUpdateTask_Katka.job - C:\Program Files (x86)\Kingsoft\Kingsoft Presentation\office6\wpsupdate.exe -from=task

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-09-09 948792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-09-09 713440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-01-26 368728]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-05-09 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-05-09 391960]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-05-09 419096]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-10-08 2392360]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-09 11860072]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-05-10 1831528]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]
"Spotify Web Helper"=C:\Users\Kuba\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-09-18 1529456]
"Spotify"=C:\Users\Kuba\AppData\Roaming\Spotify\Spotify.exe [2016-09-18 6795376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-24 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate]
C:\Program Files (x86)\OpenSubtitlesPlayer\ALLUpdate.exe [2015-02-12 2615752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2011-04-24 297280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent]
C:\Program Files (x86)\Bluestacks\HD-Agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
C:\Users\Kuba\Desktop\Jiné programy\Nemo\Clownfish.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Uživatel\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Uživatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe [2016-10-05 3503088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2011-03-29 408432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2011-03-29 202608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2013-09-09 2532352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]
C:\Program Files\Microsoft LifeChat\LifeChat.exe [2009-09-24 371712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-09-13 5565960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Remote Mouse]
C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
C:\Users\Katka\AppData\Roaming\Spotify\Spotify.exe [2016-10-14 6884976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2000-08-24 110592]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-04-02 340848]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-03-14 1081424]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2012-08-21 105120]
""= []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-10-14 9083840]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-09-13 5565960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-10-16 09:58:43 ----D---- C:\rsit
2016-10-08 11:02:55 ----A---- C:\Windows\system32\drivers\vcsvad.sys
2016-09-22 18:02:24 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-09-22 18:02:24 ----A---- C:\Windows\system32\tzres.dll
2016-09-17 22:03:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-17 22:03:19 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-09-17 22:03:19 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-09-17 22:03:19 ----A---- C:\Windows\system32\ntdll.dll
2016-09-17 22:03:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-09-17 22:03:18 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\schannel.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\KernelBase.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\kernel32.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\advapi32.dll
2016-09-17 22:03:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\wow64win.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\winsrv.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-09-17 22:03:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-09-17 22:03:16 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\wow64.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\srcore.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-09-17 22:03:16 ----A---- C:\Windows\system32\drivers\appid.sys
2016-09-17 22:03:16 ----A---- C:\Windows\system32\conhost.exe
2016-09-17 22:03:16 ----A---- C:\Windows\system32\appidsvc.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\appidapi.dll
2016-09-17 22:03:15 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-09-17 22:03:13 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-09-17 22:03:13 ----A---- C:\Windows\system32\rstrui.exe
2016-09-17 22:03:13 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-17 22:03:12 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-09-17 22:03:12 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\srclient.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\smss.exe
2016-09-17 22:03:12 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\ntvdm64.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\wow64cpu.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\certcli.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\apisetschema.dll
2016-09-17 22:03:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-17 22:03:10 ----A---- C:\Windows\SYSWOW64\user.exe
2016-09-17 22:03:10 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-09-17 22:03:10 ----A---- C:\Windows\system32\rpcrt4.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\wdigest.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\TSpkg.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\sspicli.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\rpchttp.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\msv1_0.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\lsasrv.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\kerberos.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-09-17 22:03:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\sspisrv.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\secur32.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\msobjs.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\msaudite.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\lsass.exe
2016-09-17 22:03:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-09-17 22:03:08 ----A---- C:\Windows\system32\cryptbase.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\credssp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\auditpol.exe
2016-09-17 22:03:08 ----A---- C:\Windows\system32\adtschema.dll
2016-09-17 22:02:43 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-17 22:02:43 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-17 22:02:42 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-09-17 22:02:36 ----A---- C:\Windows\system32\iernonce.dll
2016-09-17 22:02:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\inseng.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\ie4uinit.exe
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-09-17 22:02:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-17 22:02:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\urlmon.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\occache.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\iedkcs32.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-09-17 22:02:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-17 22:02:29 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-17 22:02:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-17 22:02:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-09-17 22:02:27 ----A---- C:\Windows\system32\iesetup.dll
2016-09-17 22:02:27 ----A---- C:\Windows\system32\ieapfltr.dll
2016-09-17 22:02:25 ----A---- C:\Windows\system32\iertutil.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-09-17 22:02:24 ----A---- C:\Windows\system32\vbscript.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-09-17 22:02:23 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-17 22:02:22 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-17 22:02:21 ----A---- C:\Windows\system32\ieui.dll
2016-09-17 22:02:21 ----A---- C:\Windows\system32\ieframe.dll
2016-09-17 22:02:19 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-09-17 22:02:19 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\webcheck.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\jscript9diag.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\jscript.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-17 22:02:17 ----A---- C:\Windows\system32\jscript9.dll
2016-09-17 22:02:16 ----A---- C:\Windows\system32\wininet.dll
2016-09-17 22:02:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-09-17 22:02:14 ----A---- C:\Windows\system32\msrating.dll
2016-09-17 22:02:13 ----A---- C:\Windows\system32\mshtml.dll
2016-09-17 22:01:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-09-17 22:01:40 ----A---- C:\Windows\system32\win32k.sys
2016-09-17 22:01:40 ----A---- C:\Windows\system32\user32.dll
2016-09-17 21:55:38 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-09-17 21:55:38 ----A---- C:\Windows\system32\oleaut32.dll

======List of files/folders modified in the last 1 month======

2016-10-16 17:55:35 ----D---- C:\Program Files\trend micro
2016-10-16 15:48:37 ----A---- C:\Windows\SYSWOW64\log.txt
2016-10-16 15:46:39 ----D---- C:\Windows\temp
2016-10-16 15:46:34 ----D---- C:\Windows\system32\config
2016-10-16 15:45:57 ----D---- C:\ProgramData\clear.fi
2016-10-16 15:45:39 ----D---- C:\Program Files (x86)\PC Tools Registry Mechanic
2016-10-16 15:42:48 ----D---- C:\AdwCleaner
2016-10-16 13:12:20 ----AD---- C:\ProgramData
2016-10-16 12:23:30 ----RSD---- C:\Windows\Fonts
2016-10-16 11:41:42 ----D---- C:\Windows\system32\drivers
2016-10-16 10:50:47 ----AD---- C:\ProgramData\Temp
2016-10-16 10:50:45 ----D---- C:\Windows\system32\catroot2
2016-10-16 10:49:22 ----D---- C:\Windows
2016-10-16 09:45:54 ----D---- C:\Windows\SoftwareDistribution
2016-10-16 09:45:25 ----D---- C:\Program Files (x86)\Steam
2016-10-16 09:45:19 ----D---- C:\Windows\Logs
2016-10-16 09:45:19 ----D---- C:\Windows\inf
2016-10-16 09:45:19 ----D---- C:\Windows\debug
2016-10-15 19:54:18 ----D---- C:\Windows\System32
2016-10-15 19:54:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-10-15 10:49:14 ----D---- C:\Program Files (x86)\Battle.net
2016-10-12 12:11:32 ----D---- C:\Windows\SysWOW64
2016-10-12 12:11:28 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-10-12 12:11:22 ----D---- C:\Windows\system32\Macromed
2016-10-12 12:11:20 ----D---- C:\Windows\SYSWOW64\Macromed
2016-10-12 10:58:20 ----SHD---- C:\System Volume Information
2016-10-08 16:39:07 ----D---- C:\Program Files (x86)\Hearthstone
2016-10-08 11:13:24 ----RD---- C:\Program Files (x86)
2016-10-08 11:11:03 ----D---- C:\Windows\system32\DriverStore
2016-10-06 20:04:00 ----D---- C:\Windows\Prefetch
2016-10-05 18:34:06 ----D---- C:\ProgramData\Origin
2016-10-05 18:31:46 ----D---- C:\Program Files (x86)\Origin
2016-10-05 12:59:39 ----D---- C:\Users\Uživatel\AppData\Roaming\Spotify
2016-09-29 18:25:47 ----D---- C:\Program Files\TruckersMP
2016-09-28 19:32:06 ----D---- C:\ProgramData\Soulseek
2016-09-25 20:52:20 ----D---- C:\Windows\rescache
2016-09-25 20:35:27 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2016-09-25 19:35:16 ----SHD---- C:\Windows\Installer
2016-09-25 19:35:16 ----D---- C:\ProgramData\Skype
2016-09-25 19:35:15 ----D---- C:\Config.Msi
2016-09-25 19:35:06 ----RD---- C:\Program Files (x86)\Skype
2016-09-25 19:35:06 ----D---- C:\Program Files (x86)\Common Files
2016-09-22 22:18:36 ----D---- C:\Windows\winsxs
2016-09-22 22:18:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-09-22 22:18:21 ----D---- C:\Windows\system32\cs-CZ
2016-09-22 17:46:56 ----D---- C:\Windows\system32\Tasks
2016-09-18 11:57:59 ----D---- C:\Program Files\Internet Explorer
2016-09-18 11:57:58 ----D---- C:\Windows\SYSWOW64\en-US
2016-09-18 11:57:56 ----D---- C:\Windows\system32\en-US
2016-09-18 11:57:53 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-18 11:57:39 ----D---- C:\Windows\AppPatch
2016-09-18 11:57:38 ----D---- C:\Windows\system32\Boot
2016-09-18 02:13:48 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-18 02:13:48 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-09-18 01:41:00 ----D---- C:\Windows\system32\MRT
2016-09-18 01:40:05 ----AC---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-09-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-09-14 437272]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-09-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-09-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-09-22 513632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 283200]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-07-14 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-07-14 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-07-14 62776]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-09-09 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-09-09 163416]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2015-09-22 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2016-02-24 130880]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2016-06-08 34720]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-14 2899176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-04-20 169584]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2009-12-03 721768]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2009-12-03 269672]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2009-12-03 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2009-12-03 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-10-08 1395248]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 dvdmmg;dvdmmg; \??\C:\Windows\system32\drivers\dvdmmg.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-01-14 74840]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-09-09 37656]
S3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 cpuz135;cpuz135; \??\C:\Users\UIVATE~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-01-30 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2015-01-30 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2015-01-30 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2015-07-10 141440]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-09 197128]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-03-14 352336]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-04-02 173424]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-05-10 872552]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2013-06-13 101888]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2016-09-13 2621448]
R2 chromoting;Služba Vzdálené plochy Chrome; C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe [2016-06-20 76616]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [2016-08-31 419248]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-08-21 794272]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-01-30 76888]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2016-01-29 190120]
R2 RzKLService;RzKLService; C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe [2016-02-26 132864]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-03 483688]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-03 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2016-10-05 2209296]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-12 270016]
S3 BRSptStub;BitRaider Mini-Support Service Stub Loader; C:\ProgramData\BitRaider\BRSptStub.exe [2014-11-06 363208]
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2014-11-17 182304]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-08-29 655624]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-06-21 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-06-21 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-09-01 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-10-05 2142728]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-11-19 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-10-13 1459488]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-09 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-26 29696]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-03-11 136120]
S4 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
S4 PinnacleUpdateSvc;PinnacleUpdate Service; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [2015-08-06 438272]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]/64

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

provedeno

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uživatel at 2016-10-16 19:04:03
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 78 GB (11%) free of 700 GB
Total RAM: 3948 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:04:12, on 16.10.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Kuba\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Kuba\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service Stub Loader (BRSptStub) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptStub.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11696 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
winlogon.exe

C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {7CB1E23E-0D4A-49F1-8754-1EBADA6E0EC9}
"C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe" --type=host --daemon-pipe=436
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {3B845D92-C8D1-44A9-A99F-0FEE37194BE1}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
"C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe" -s
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
taskeng.exe {D3E65C74-6A95-4234-9C59-53979B840D86}
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\10162016_185742.log
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\igfxext.exe -Embedding
"C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
taskhost.exe $(Arg0)
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\Uživatel\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\RMAutoUpdate.job - C:\Program Files (x86)\PC Tools Registry Mechanic\SULauncher.exe
C:\Windows\tasks\RMSchedule.job - C:\Program Files (x86)\PC Tools Registry Mechanic\RegMech.exe /F
C:\Windows\tasks\WpsUpdateTask_Katka.job - C:\Program Files (x86)\Kingsoft\Kingsoft Presentation\office6\wpsupdate.exe -from=task

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-09-09 948792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-09-09 713440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-01-26 368728]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-05-09 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-05-09 391960]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-05-09 419096]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-10-08 2392360]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-09 11860072]
"Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-05-10 1831528]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-03-11 8686296]
"Spotify Web Helper"=C:\Users\Kuba\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-09-18 1529456]
"Spotify"=C:\Users\Kuba\AppData\Roaming\Spotify\Spotify.exe [2016-09-18 6795376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-24 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate]
C:\Program Files (x86)\OpenSubtitlesPlayer\ALLUpdate.exe [2015-02-12 2615752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2011-04-24 297280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent]
C:\Program Files (x86)\Bluestacks\HD-Agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
C:\Users\Kuba\Desktop\Jiné programy\Nemo\Clownfish.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Uživatel\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Uživatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe [2016-10-05 3503088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2011-03-29 408432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2011-03-29 202608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2013-09-09 2532352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]
C:\Program Files\Microsoft LifeChat\LifeChat.exe [2009-09-24 371712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-09-13 5565960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Remote Mouse]
C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
C:\Users\Katka\AppData\Roaming\Spotify\Spotify.exe [2016-10-14 6884976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2000-08-24 110592]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-04-02 340848]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-03-14 1081424]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2012-08-21 105120]
""= []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-10-14 9083840]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-09-13 5565960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-10-16 18:57:42 ----D---- C:\_OTM
2016-10-16 09:58:43 ----D---- C:\rsit
2016-10-08 11:02:55 ----A---- C:\Windows\system32\drivers\vcsvad.sys
2016-09-22 18:02:24 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-09-22 18:02:24 ----A---- C:\Windows\system32\tzres.dll
2016-09-17 22:03:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-17 22:03:19 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-09-17 22:03:19 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-09-17 22:03:19 ----A---- C:\Windows\system32\ntdll.dll
2016-09-17 22:03:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-09-17 22:03:18 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\schannel.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\KernelBase.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\kernel32.dll
2016-09-17 22:03:18 ----A---- C:\Windows\system32\advapi32.dll
2016-09-17 22:03:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\wow64win.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\winsrv.dll
2016-09-17 22:03:17 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-09-17 22:03:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-09-17 22:03:16 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\wow64.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\srcore.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-09-17 22:03:16 ----A---- C:\Windows\system32\drivers\appid.sys
2016-09-17 22:03:16 ----A---- C:\Windows\system32\conhost.exe
2016-09-17 22:03:16 ----A---- C:\Windows\system32\appidsvc.dll
2016-09-17 22:03:16 ----A---- C:\Windows\system32\appidapi.dll
2016-09-17 22:03:15 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-09-17 22:03:13 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-09-17 22:03:13 ----A---- C:\Windows\system32\rstrui.exe
2016-09-17 22:03:13 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-17 22:03:12 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-09-17 22:03:12 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\srclient.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\smss.exe
2016-09-17 22:03:12 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\ntvdm64.dll
2016-09-17 22:03:12 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-17 22:03:11 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-09-17 22:03:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\wow64cpu.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\certcli.dll
2016-09-17 22:03:11 ----A---- C:\Windows\system32\apisetschema.dll
2016-09-17 22:03:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-17 22:03:10 ----A---- C:\Windows\SYSWOW64\user.exe
2016-09-17 22:03:10 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-09-17 22:03:10 ----A---- C:\Windows\system32\rpcrt4.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-09-17 22:03:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\wdigest.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\TSpkg.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\sspicli.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\rpchttp.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\msv1_0.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\lsasrv.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\kerberos.dll
2016-09-17 22:03:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-09-17 22:03:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-09-17 22:03:08 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\sspisrv.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\secur32.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\msobjs.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\msaudite.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\lsass.exe
2016-09-17 22:03:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-09-17 22:03:08 ----A---- C:\Windows\system32\cryptbase.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\credssp.dll
2016-09-17 22:03:08 ----A---- C:\Windows\system32\auditpol.exe
2016-09-17 22:03:08 ----A---- C:\Windows\system32\adtschema.dll
2016-09-17 22:02:43 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-17 22:02:43 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-17 22:02:42 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-09-17 22:02:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-09-17 22:02:36 ----A---- C:\Windows\system32\iernonce.dll
2016-09-17 22:02:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-09-17 22:02:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\inseng.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-09-17 22:02:35 ----A---- C:\Windows\system32\ie4uinit.exe
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-09-17 22:02:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-09-17 22:02:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-17 22:02:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-09-17 22:02:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\urlmon.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\occache.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-09-17 22:02:30 ----A---- C:\Windows\system32\iedkcs32.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-09-17 22:02:29 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-09-17 22:02:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-17 22:02:29 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-17 22:02:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-17 22:02:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-09-17 22:02:27 ----A---- C:\Windows\system32\iesetup.dll
2016-09-17 22:02:27 ----A---- C:\Windows\system32\ieapfltr.dll
2016-09-17 22:02:25 ----A---- C:\Windows\system32\iertutil.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-09-17 22:02:24 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-09-17 22:02:24 ----A---- C:\Windows\system32\vbscript.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-09-17 22:02:23 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-09-17 22:02:23 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-17 22:02:22 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-17 22:02:21 ----A---- C:\Windows\system32\ieui.dll
2016-09-17 22:02:21 ----A---- C:\Windows\system32\ieframe.dll
2016-09-17 22:02:19 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-09-17 22:02:19 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\webcheck.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\jscript9diag.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\jscript.dll
2016-09-17 22:02:18 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-17 22:02:17 ----A---- C:\Windows\system32\jscript9.dll
2016-09-17 22:02:16 ----A---- C:\Windows\system32\wininet.dll
2016-09-17 22:02:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-09-17 22:02:14 ----A---- C:\Windows\system32\msrating.dll
2016-09-17 22:02:13 ----A---- C:\Windows\system32\mshtml.dll
2016-09-17 22:01:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-09-17 22:01:40 ----A---- C:\Windows\system32\win32k.sys
2016-09-17 22:01:40 ----A---- C:\Windows\system32\user32.dll
2016-09-17 21:55:38 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-09-17 21:55:38 ----A---- C:\Windows\system32\oleaut32.dll

======List of files/folders modified in the last 1 month======

2016-10-16 19:04:08 ----D---- C:\Program Files\trend micro
2016-10-16 19:02:56 ----D---- C:\Windows\temp
2016-10-16 19:02:55 ----D---- C:\Windows\system32\config
2016-10-16 19:01:37 ----D---- C:\ProgramData\clear.fi
2016-10-16 19:01:02 ----D---- C:\Program Files (x86)\PC Tools Registry Mechanic
2016-10-16 19:00:13 ----D---- C:\Windows
2016-10-16 18:59:34 ----A---- C:\Windows\SYSWOW64\log.txt
2016-10-16 18:57:43 ----D---- C:\Windows\Tasks
2016-10-16 15:42:48 ----D---- C:\AdwCleaner
2016-10-16 13:12:20 ----AD---- C:\ProgramData
2016-10-16 12:23:30 ----RSD---- C:\Windows\Fonts
2016-10-16 11:41:42 ----D---- C:\Windows\system32\drivers
2016-10-16 10:50:47 ----AD---- C:\ProgramData\Temp
2016-10-16 10:50:45 ----D---- C:\Windows\system32\catroot2
2016-10-16 09:45:54 ----D---- C:\Windows\SoftwareDistribution
2016-10-16 09:45:25 ----D---- C:\Program Files (x86)\Steam
2016-10-16 09:45:19 ----D---- C:\Windows\Logs
2016-10-16 09:45:19 ----D---- C:\Windows\inf
2016-10-16 09:45:19 ----D---- C:\Windows\debug
2016-10-15 19:54:18 ----D---- C:\Windows\System32
2016-10-15 19:54:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-10-15 10:49:14 ----D---- C:\Program Files (x86)\Battle.net
2016-10-12 12:11:32 ----D---- C:\Windows\SysWOW64
2016-10-12 12:11:28 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-10-12 12:11:22 ----D---- C:\Windows\system32\Macromed
2016-10-12 12:11:20 ----D---- C:\Windows\SYSWOW64\Macromed
2016-10-12 10:58:20 ----SHD---- C:\System Volume Information
2016-10-08 16:39:07 ----D---- C:\Program Files (x86)\Hearthstone
2016-10-08 11:13:24 ----RD---- C:\Program Files (x86)
2016-10-08 11:11:03 ----D---- C:\Windows\system32\DriverStore
2016-10-06 20:04:00 ----D---- C:\Windows\Prefetch
2016-10-05 18:34:06 ----D---- C:\ProgramData\Origin
2016-10-05 18:31:46 ----D---- C:\Program Files (x86)\Origin
2016-10-05 12:59:39 ----D---- C:\Users\Uživatel\AppData\Roaming\Spotify
2016-09-29 18:25:47 ----D---- C:\Program Files\TruckersMP
2016-09-28 19:32:06 ----D---- C:\ProgramData\Soulseek
2016-09-25 20:52:20 ----D---- C:\Windows\rescache
2016-09-25 20:35:27 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2016-09-25 19:35:16 ----SHD---- C:\Windows\Installer
2016-09-25 19:35:16 ----D---- C:\ProgramData\Skype
2016-09-25 19:35:15 ----D---- C:\Config.Msi
2016-09-25 19:35:06 ----RD---- C:\Program Files (x86)\Skype
2016-09-25 19:35:06 ----D---- C:\Program Files (x86)\Common Files
2016-09-22 22:18:36 ----D---- C:\Windows\winsxs
2016-09-22 22:18:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-09-22 22:18:21 ----D---- C:\Windows\system32\cs-CZ
2016-09-22 17:46:56 ----D---- C:\Windows\system32\Tasks
2016-09-18 11:57:59 ----D---- C:\Program Files\Internet Explorer
2016-09-18 11:57:58 ----D---- C:\Windows\SYSWOW64\en-US
2016-09-18 11:57:56 ----D---- C:\Windows\system32\en-US
2016-09-18 11:57:53 ----D---- C:\Program Files (x86)\Internet Explorer
2016-09-18 11:57:39 ----D---- C:\Windows\AppPatch
2016-09-18 11:57:38 ----D---- C:\Windows\system32\Boot
2016-09-18 02:13:48 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-18 02:13:48 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-09-18 01:41:00 ----D---- C:\Windows\system32\MRT
2016-09-18 01:40:05 ----AC---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-09-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-09-14 437272]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-09-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-09-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-09-22 513632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-18 283200]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-07-14 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-07-14 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-07-14 62776]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-09-09 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-09-09 163416]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2015-09-22 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2016-02-24 130880]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2016-06-08 34720]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-14 2899176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-04-20 169584]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-01-04 8507392]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2009-12-03 721768]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2009-12-03 269672]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2009-12-03 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2009-12-03 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-10-08 1395248]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 dvdmmg;dvdmmg; \??\C:\Windows\system32\drivers\dvdmmg.sys []
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-01-14 74840]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-09-09 37656]
S3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 cpuz135;cpuz135; \??\C:\Users\UIVATE~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-01-30 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2015-01-30 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2015-01-30 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2015-07-10 141440]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-09 197128]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-03-14 352336]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-04-02 173424]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-05-10 872552]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2013-06-13 101888]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2016-09-13 2621448]
R2 chromoting;Služba Vzdálené plochy Chrome; C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe [2016-06-20 76616]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [2016-08-31 419248]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-08-21 794272]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-01-30 76888]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2016-01-29 190120]
R2 RzKLService;RzKLService; C:\Users\Kuba\Desktop\cortex\Razer Cortex\RzKLService.exe [2016-02-26 132864]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-03 483688]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-03 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2016-10-05 2209296]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-07-25 324224]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-12 270016]
S3 BRSptStub;BitRaider Mini-Support Service Stub Loader; C:\ProgramData\BitRaider\BRSptStub.exe [2014-11-06 363208]
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2014-11-17 182304]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-08-29 655624]
S3 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-06-21 227904]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-06-21 203344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-09-01 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-10-05 2142728]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-11-19 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-10-13 1459488]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-09 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-26 29696]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-03-11 136120]
S4 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
S4 PinnacleUpdateSvc;PinnacleUpdate Service; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [2015-08-06 438272]

-----------------EOF-----------------

Smazáno. Nastala nějaká změna?

moc ne, procesor stále jede na 25 procent

Pokud má důvod, 25% není zase tak moc. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 17.10.2016
Čas skenování: 6:56
Protokol: scan.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.10.16.08
Databáze rootkitů: v2016.09.26.02
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Uživatel

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 622760
Uplynulý čas: 1 hod, 32 min, 54 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 2
HackTool.Agent.Steam, C:\Program Files (x86)\Octodad Dadliest Catch\steam_api.dll, , [70789efb3268cd69b10048bdcc3925db],
Adware.AdInstaller, C:\Users\Uživatel\Downloads\FIFA_14_Free [1].exe, , [e1073a5fe4b6f046306b6e7bdd27f10f],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

nejvíc to tam žere
svchost.exe (netsvcs)
svchost.exe (LocalSystemNetworkRestricted)

Nálezy smažte a oznamte, zda se něco změnilo.