VIRY.CZ

Dobrý den, stává se mi na jednom počítači často a na druhém občas, že mi z ničeho nic klávesnice před začátek textu napíše znak " (uvozovek)
Myslel jsem si že je vadná klávesnice, ale to že se to stává na dvou počítačích je divné.

Pokud na to můžete mrknout, byl bych rád! Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uzivatel at 2017-01-04 12:25:10
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 174 GB (73%) free of 238 GB
Total RAM: 8073 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:25:15, on 4.1.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.seznam.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D8950D0E-FCE7-4AE4-9370-7E4CFBC04362} (FormApps Plug-in) - https://eportal.cssz.cz/fas/page/active ... bff_cs.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8232 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe"
C:\Windows\system32\DRIVERS\o2flash.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d94c331f-fa5e-4be5-8133-d9a505a13343 -SystemEventPortName:HostProcess-e19c7966-f1b9-4383-8798-1bc345c49c58 -IoCancelEventPortName:HostProcess-9811c12b-c152-48ee-8903-8b1089488474 -NonStateChangingEventPortName:HostProcess-f31b6b36-c80c-410d-90ff-97a13887ecdb -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8a77fe26-fda2-44c2-9307-6f8a0bf2599e -DeviceGroupId:
taskeng.exe {AAD241D7-0FCE-492B-9C68-559F8B95EB63}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"taskhost.exe"
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\DellTPad\HidFind.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "1339531494639022585-9687957442789413161302351903-999165390-19337894021159361784
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"taskhost.exe"
C:\Windows\system32\DbxSvc.exe
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /firstrunupdate 0 /DBData:eyJyZXF1ZXN0X3NlcXVlbmNlIjozMX0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0x200
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=1596 --on-initialized-event-handle=668 --parent-handle=672 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,14,16,17,18,21,37,54,65 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2712 --gpu-driver-date=3-26-2012 --service-request-channel-token=3A0FC091F7829E1DA5647ED40D8259B4 --mojo-platform-channel-handle=1412 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=1C0D650A9A02FB8B88EDC7A3F001F184 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=1C0D650A9A02FB8B88EDC7A3F001F184 --mojo-platform-channel-handle=2264 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=89AFADB37AC7FE2EF3F0C551A7AB50FC --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=89AFADB37AC7FE2EF3F0C551A7AB50FC --mojo-platform-channel-handle=2388 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=19934EE0050E897C76327E5541E1EF28 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=19934EE0050E897C76327E5541E1EF28 --mojo-platform-channel-handle=2208 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C4E3E0D84566CB6EE74A789621ECBC7F --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C4E3E0D84566CB6EE74A789621ECBC7F --mojo-platform-channel-handle=5740 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=2B94502B66757F36F3B2FF4B99726BB4 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=2B94502B66757F36F3B2FF4B99726BB4 --mojo-platform-channel-handle=6168 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=43583B401E541138AB425BDF67C96679 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=43583B401E541138AB425BDF67C96679 --mojo-platform-channel-handle=5536 /prefetch:1
"C:\Program Files\TightVNC\tvnviewer.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=B4EDE6A21C12B1A582EE7F6B8E947A4A --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=B4EDE6A21C12B1A582EE7F6B8E947A4A --mojo-platform-channel-handle=2968 /prefetch:1
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3204.0.417456654\651020793" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3204 "\\.\pipe\gecko-crash-server-pipe.3204" tab
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=1AD4D69C3E5773E213F384532B30FE91 --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=1AD4D69C3E5773E213F384532B30FE91 --mojo-platform-channel-handle=3328 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=1235B77B293E98694D49C5B8FD9972A3 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=1235B77B293E98694D49C5B8FD9972A3 --mojo-platform-channel-handle=9176 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=2E4B698A2D8A15D60DB4C06DA080BF11 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=2E4B698A2D8A15D60DB4C06DA080BF11 --mojo-platform-channel-handle=8284 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=BF4B0C724689521EB370A21E3D8C87D9 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=BF4B0C724689521EB370A21E3D8C87D9 --mojo-platform-channel-handle=8620 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/*GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/MaterialDesignDownloads/Enabled/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/*PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityWarningIconUpdate/Control/*SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=AAC96C3D7444D3EAE454DD3AEA0CE049 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=AAC96C3D7444D3EAE454DD3AEA0CE049 --mojo-platform-channel-handle=8388 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe58_ Global\UsGthrCtrlFltPipeMssGthrPipe58 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 876 880 888 65536 884

"C:\Users\Uzivatel\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\c7z87krk.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL


C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\c7z87krk.default\extensions\
trash

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2012-06-18 626552]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-06-18 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-06-18 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-06-18 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-07-05 1128448]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-27 1610936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2017-01-02 25779624]
"ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2016-08-10 139776]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2016-08-10 4513792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-06-18 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-04 12:25:10 ----D---- C:\rsit
2017-01-04 12:25:10 ----D---- C:\Program Files\trend micro
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\DbxSvc.exe
2016-12-14 08:32:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-14 08:32:43 ----A---- C:\Windows\system32\mshtml.dll
2016-12-14 08:32:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-14 08:32:42 ----A---- C:\Windows\system32\jscript9.dll
2016-12-14 08:32:42 ----A---- C:\Windows\system32\ieframe.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\wintrust.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\winload.exe
2016-12-14 08:32:41 ----A---- C:\Windows\system32\wininet.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\win32k.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\usp10.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\user32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\msi.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\gdi32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\crypt32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\consent.exe
2016-12-14 08:32:41 ----A---- C:\Windows\system32\clfs.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\vbscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\urlmon.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-14 08:32:40 ----A---- C:\Windows\system32\ntdll.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\jscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\iertutil.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\hlink.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-14 08:32:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-14 08:32:40 ----A---- C:\Windows\system32\certcli.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\webcheck.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\smss.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\schannel.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\occache.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msrating.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msihnd.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msiexec.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\kernel32.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\kerberos.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\ieui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-14 08:32:39 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\authui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\appinfo.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\advapi32.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64win.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\winsrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wdigest.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\sspicli.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\srcore.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\srclient.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\secur32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\rstrui.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\msimsg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\lsass.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\inseng.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\iesetup.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\iernonce.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\credssp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\conhost.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\auditpol.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidapi.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\adtschema.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\tzres.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\msobjs.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\msaudite.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-12 10:32:02 ----D---- C:\Users\Uzivatel\AppData\Roaming\obs-studio
2016-12-12 10:31:24 ----D---- C:\Program Files (x86)\obs-studio
2016-12-12 10:30:51 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2016-12-12 10:30:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2016-12-12 10:30:51 ----A---- C:\Windows\system32\XAudio2_7.dll
2016-12-12 10:30:51 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2016-12-12 10:30:50 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2016-12-12 10:30:50 ----A---- C:\Windows\system32\xactengine3_7.dll
2016-12-12 10:30:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2016-12-12 10:30:49 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\system32\d3dx11_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\system32\d3dcsx_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\system32\D3DX9_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2016-12-12 10:30:46 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2016-12-12 10:30:46 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2016-12-12 10:30:46 ----A---- C:\Windows\system32\XAudio2_6.dll
2016-12-12 10:30:46 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2016-12-12 10:30:45 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2016-12-12 10:30:45 ----A---- C:\Windows\system32\xactengine3_6.dll
2016-12-12 10:30:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2016-12-12 10:30:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2016-12-12 10:30:43 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2016-12-12 10:30:43 ----A---- C:\Windows\system32\XAudio2_5.dll
2016-12-12 10:30:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2016-12-12 10:30:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2016-12-12 10:30:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2016-12-12 10:30:41 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\system32\d3dx11_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\system32\d3dcsx_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\system32\D3DX9_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\system32\d3dx10_42.dll
2016-12-12 10:30:38 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\system32\d3dx10_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2016-12-12 10:30:37 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2016-12-12 10:30:37 ----A---- C:\Windows\system32\D3DX9_41.dll
2016-12-12 10:30:36 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2016-12-12 10:30:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2016-12-12 10:30:36 ----A---- C:\Windows\system32\XAudio2_4.dll
2016-12-12 10:30:36 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2016-12-12 10:30:35 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2016-12-12 10:30:35 ----A---- C:\Windows\system32\xactengine3_4.dll
2016-12-12 10:30:34 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2016-12-12 10:30:34 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\D3DX9_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2016-12-12 10:30:31 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2016-12-12 10:30:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2016-12-12 10:30:31 ----A---- C:\Windows\system32\XAudio2_3.dll
2016-12-12 10:30:31 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2016-12-12 10:30:30 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2016-12-12 10:30:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2016-12-12 10:30:30 ----A---- C:\Windows\system32\xactengine3_3.dll
2016-12-12 10:30:30 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2016-12-12 10:30:29 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2016-12-12 10:30:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2016-12-12 10:30:29 ----A---- C:\Windows\system32\XAudio2_2.dll
2016-12-12 10:30:29 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2016-12-12 10:30:28 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2016-12-12 10:30:28 ----A---- C:\Windows\system32\xactengine3_2.dll
2016-12-12 10:30:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2016-12-12 10:30:26 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2016-12-12 10:30:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2016-12-12 10:30:25 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2016-12-12 10:30:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2016-12-12 10:30:25 ----A---- C:\Windows\system32\XAudio2_1.dll
2016-12-12 10:30:25 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2016-12-12 10:30:24 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2016-12-12 10:30:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2016-12-12 10:30:24 ----A---- C:\Windows\system32\xactengine3_1.dll
2016-12-12 10:30:24 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2016-12-12 10:30:23 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\system32\d3dx10_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2016-12-12 10:30:22 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2016-12-12 10:30:22 ----A---- C:\Windows\system32\D3DX9_38.dll
2016-12-12 10:30:21 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2016-12-12 10:30:21 ----A---- C:\Windows\system32\XAudio2_0.dll
2016-12-12 10:30:20 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2016-12-12 10:30:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2016-12-12 10:30:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2016-12-12 10:30:19 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\D3DX9_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\d3dx10_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2016-12-12 10:30:16 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2016-12-12 10:30:16 ----A---- C:\Windows\system32\xactengine2_10.dll
2016-12-12 10:30:15 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\system32\d3dx10_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2016-12-12 10:30:14 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2016-12-12 10:30:14 ----A---- C:\Windows\system32\d3dx9_36.dll
2016-12-12 10:30:13 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2016-12-12 10:30:13 ----A---- C:\Windows\system32\xactengine2_9.dll
2016-12-12 10:30:12 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\system32\d3dx10_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2016-12-12 10:30:11 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2016-12-12 10:30:11 ----A---- C:\Windows\system32\d3dx9_35.dll
2016-12-12 10:30:10 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2016-12-12 10:30:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2016-12-12 10:30:10 ----A---- C:\Windows\system32\xactengine2_8.dll
2016-12-12 10:30:10 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\d3dx9_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\d3dx10_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2016-12-12 10:30:08 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2016-12-12 10:30:08 ----A---- C:\Windows\system32\xinput1_3.dll
2016-12-12 10:30:07 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2016-12-12 10:30:07 ----A---- C:\Windows\system32\xactengine2_7.dll
2016-12-12 10:30:06 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\system32\d3dx10_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2016-12-12 10:30:05 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2016-12-12 10:30:05 ----A---- C:\Windows\system32\d3dx9_33.dll
2016-12-12 10:30:04 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2016-12-12 10:30:04 ----A---- C:\Windows\system32\xactengine2_6.dll
2016-12-12 10:30:03 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2016-12-12 10:30:03 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2016-12-12 10:30:03 ----A---- C:\Windows\system32\xactengine2_5.dll
2016-12-12 10:30:03 ----A---- C:\Windows\system32\d3dx10.dll
2016-12-12 10:30:02 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2016-12-12 10:30:02 ----A---- C:\Windows\system32\d3dx9_32.dll
2016-12-12 10:30:01 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2016-12-12 10:30:01 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2016-12-12 10:30:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2016-12-12 10:30:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2016-12-12 10:30:00 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2016-12-12 10:30:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2016-12-12 10:29:59 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2016-12-12 10:29:59 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2016-12-12 10:29:59 ----A---- C:\Windows\system32\xinput1_2.dll
2016-12-12 10:29:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2016-12-12 10:29:58 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2016-12-12 10:29:58 ----A---- C:\Windows\system32\xactengine2_2.dll
2016-12-12 10:29:57 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2016-12-12 10:29:57 ----A---- C:\Windows\system32\xinput1_1.dll
2016-12-12 10:29:56 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2016-12-12 10:29:56 ----A---- C:\Windows\system32\xactengine2_1.dll
2016-12-12 10:29:54 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2016-12-12 10:29:54 ----A---- C:\Windows\system32\d3dx9_30.dll
2016-12-12 10:29:53 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\system32\xactengine2_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\system32\x3daudio1_0.dll
2016-12-12 10:29:52 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2016-12-12 10:29:52 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2016-12-12 10:29:52 ----A---- C:\Windows\system32\d3dx9_29.dll
2016-12-12 10:29:52 ----A---- C:\Windows\system32\d3dx9_28.dll
2016-12-12 10:29:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2016-12-12 10:29:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2016-12-12 10:29:50 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2016-12-12 10:29:50 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2016-12-12 10:29:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2016-12-12 10:29:50 ----A---- C:\Windows\system32\d3dx9_25.dll
2016-12-12 10:29:49 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2016-12-12 10:29:49 ----A---- C:\Windows\system32\d3dx9_24.dll
2016-12-12 10:26:03 ----HD---- C:\Windows\msdownld.tmp
2016-12-12 10:25:56 ----D---- C:\Windows\SYSWOW64\directx
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\CamShapes.ini
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\CamLayout.ini
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\Camdata.ini
2016-12-12 10:03:10 ----D---- C:\Users\Uzivatel\AppData\Roaming\PicPick
2016-12-12 10:03:10 ----D---- C:\ProgramData\PicPick

======List of files/folders modified in the last 1 month======

2017-01-04 12:25:12 ----D---- C:\Windows\Temp
2017-01-04 12:25:10 ----RD---- C:\Program Files
2017-01-04 11:05:24 ----A---- C:\Windows\BRRBCOM.INI
2017-01-04 09:56:40 ----D---- C:\Windows\system32\config
2017-01-02 09:15:53 ----SHD---- C:\System Volume Information
2017-01-02 09:02:25 ----RD---- C:\Dropbox
2017-01-02 09:02:08 ----D---- C:\Program Files (x86)\Dropbox
2017-01-02 09:02:07 ----D---- C:\Windows\system32\drivers
2017-01-02 09:02:07 ----D---- C:\Windows\System32
2017-01-02 08:55:33 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-02 08:55:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-12-21 11:30:27 ----D---- C:\Windows\Microsoft.NET
2016-12-21 11:01:03 ----RSD---- C:\Windows\assembly
2016-12-20 14:34:12 ----SHD---- C:\Windows\Installer
2016-12-20 08:31:39 ----RD---- C:\Program Files (x86)
2016-12-20 08:31:37 ----D---- C:\Windows\Tasks
2016-12-19 10:55:10 ----D---- C:\Windows\inf
2016-12-19 10:55:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-12-19 08:28:26 ----D---- C:\Windows\winsxs
2016-12-19 08:27:34 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-19 08:27:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-19 08:27:34 ----D---- C:\Windows\SysWOW64
2016-12-19 08:27:34 ----D---- C:\Windows\system32\en-US
2016-12-19 08:27:34 ----D---- C:\Windows\system32\cs-CZ
2016-12-19 08:27:34 ----D---- C:\Program Files\Internet Explorer
2016-12-19 08:27:34 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-19 08:27:33 ----D---- C:\Windows\system32\Boot
2016-12-19 08:27:33 ----D---- C:\Windows\AppPatch
2016-12-16 10:32:13 ----D---- C:\Windows\system32\MRT
2016-12-16 10:28:14 ----AC---- C:\Windows\system32\MRT.exe
2016-12-16 10:28:08 ----D---- C:\ProgramData\Microsoft Help
2016-12-16 10:25:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-12-14 08:26:36 ----D---- C:\Windows\system32\catroot2
2016-12-12 10:29:49 ----D---- C:\Windows
2016-12-12 10:25:55 ----D---- C:\Windows\Logs
2016-12-12 10:25:12 ----D---- C:\ProgramData\Package Cache
2016-12-12 10:13:22 ----D---- C:\Users\Uzivatel\AppData\Roaming\vlc
2016-12-12 10:03:10 ----HD---- C:\ProgramData
2016-12-12 09:35:02 ----SD---- C:\Users\Uzivatel\AppData\Roaming\Microsoft
2016-12-05 10:59:57 ----D---- C:\Windows\rescache
2016-12-05 09:47:46 ----D---- C:\Windows\system32\catroot
2016-12-05 09:47:34 ----D---- C:\Windows\SYSWOW64\migration
2016-12-05 09:47:34 ----D---- C:\Windows\system32\migration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2012-06-18 568600]
R0 iaStorF;iaStorF; C:\Windows\system32\drivers\iaStorF.sys [2012-03-15 24496]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hcs.sys [2012-06-18 16152]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-12-02 295000]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdcfltn.sys [2011-07-15 22128]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-08-31 31648]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-08-31 830624]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2016-08-31 56976]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-08-31 116248]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x64; C:\Windows\system32\DRIVERS\Apfiltr.sys [2012-06-18 416592]
R3 cvusbdrv;Dell ControlVault; C:\Windows\System32\Drivers\cvusbdrv.sys [2012-05-25 45672]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-06-18 358576]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-06-18 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-18 331264]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-05-25 60184]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-06-18 11471872]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-12-02 135928]
R3 O2MDRRDR;O2MDRRDR; C:\Windows\system32\DRIVERS\O2MDRw7x64.sys [2012-06-18 74984]
R3 O2SDJRDR;O2SDJRDR; C:\Windows\system32\DRIVERS\o2sdjw7x64.sys [2012-06-18 84712]
R3 ST_ACCEL;STMicroelectronics Accelerometer Service; C:\Windows\system32\DRIVERS\ST_ACCEL.sys [2012-05-25 68208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-07-05 521728]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2016-08-10 12288]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 atmeltpm;atmeltpm; C:\Windows\system32\drivers\atmeltpm64.sys [2012-05-25 19456]
S3 BCMTPM;BCMTPM; C:\Windows\system32\drivers\btpmwx64.sys [2012-05-25 32096]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-06-07 132648]
S3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-06-07 21160]
S3 d554gps;Dell Wireless HSPA Mini-Card GPS Port; C:\Windows\system32\drivers\d554gps64.sys [2012-06-18 102440]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 DIGITECH;DIGITECH; C:\Windows\system32\drivers\DIGITECH.sys [2011-06-08 25648]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 E1G60;Intel(R) PRO/1000 NDIS 6 – ovladač adaptéru; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]
S3 ecnssndis; Mobile Broadband Driver; C:\Windows\System32\Drivers\wwuss64.sys [2012-06-18 26664]
S3 ecnssndisfltr; Mobile Broadband Driver Filter; C:\Windows\System32\Drivers\wwussf64.sys [2012-06-18 29736]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver; C:\Windows\system32\drivers\FLxHCIc.sys [2012-03-02 221184]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver; C:\Windows\system32\drivers\FLxHCIh.sys [2012-03-02 65536]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2011-04-15 69320]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-04-15 84808]
S3 HBtnKey;DELL Tablet PC Key Buttons HID Driver; C:\Windows\system32\drivers\HBtnKey.sys [2011-07-19 20424]
S3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2012-05-25 60184]
S3 iaStorA;iaStorA; C:\Windows\system32\drivers\iaStorA.sys [2012-03-15 567216]
S3 iaStorS;iaStorS; C:\Windows\system32\drivers\iaStorS.sys [2012-06-15 639408]
S3 Impcd;Impcd; C:\Windows\system32\drivers\Impcd.sys [2012-07-04 158976]
S3 irstrtdv;Intel(R) Rapid Start Technology Driver; C:\Windows\system32\drivers\irstrtdv.sys [2011-06-16 26504]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\drivers\ISCTD64.sys [2012-05-25 44992]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hub.sys [2012-06-18 356120]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3xhc.sys [2012-06-18 788760]
S3 Mbm3CBus;Dell Wireless 5530 HSPA Mini-Card Device (WDM); C:\Windows\system32\drivers\Mbm3CBus.sys [2012-06-18 419400]
S3 Mbm3DevMt;Dell Wireless HSPA Mini-Card Device Management Driver (WDM); C:\Windows\system32\drivers\Mbm3DevMt.sys [2012-06-18 430664]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2012-07-04 80384]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2012-04-20 177152]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\Windows\system32\drivers\nvstusb.sys [2012-05-25 399168]
S3 NWADI;NWADI Bus Enumerator; C:\Windows\system32\drivers\NWADIenum.sys [2009-10-26 237568]
S3 nwdelgobi3kfilter;Dell Wireless Gobi 3000 USB Composite Device Filter Driver; C:\Windows\system32\drivers\nwdelgobi3kfilter.sys [2012-06-18 34304]
S3 NWDellPort;Dell Wireless Mobile Broadband Status Port Driver; C:\Windows\system32\drivers\nwdelser.sys [2012-06-18 222208]
S3 NWDellPort2;Dell Wireless Mobile Broadband Status2 Port Driver; C:\Windows\system32\drivers\nwdelser2.sys [2012-06-18 222208]
S3 nwdelserial;Dell Wireless Gobi 3000 USB Device for Legacy Serial Communication; C:\Windows\system32\drivers\nwdelserial.sys [2012-06-18 234112]
S3 O2MDFRDR;O2MDFRDR; C:\Windows\system32\drivers\O2MDFw7x64.sys [2012-06-18 72808]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 percsas2;percsas2; C:\Windows\system32\drivers\percsas2.sys [2012-06-15 53584]
S3 ptlser;ptlser; C:\Windows\system32\drivers\ptlser64.sys []
S3 QCFilterdl;Dell Wireless 5600 (EV-DO-HSPA) Mobile Broadband Mini-Card Composite Device Filter Driver; C:\Windows\system32\drivers\qcfilterdl.sys [2012-05-10 8832]
S3 qcfilterdl2k;Dell Wireless 5620 (EV-DO-HSPA) Mobile Broadband Mini-Card Composite Device Filter; C:\Windows\system32\drivers\qcfilterdl2k.sys [2012-07-05 6400]
S3 qcombusdl;Gobi 2000 USB Composite Device Driver(413C-8186); C:\Windows\system32\drivers\qcombusdl.sys [2012-07-05 137800]
S3 qcusbserdl;Dell USB Device for Legacy Serial Communication; C:\Windows\system32\drivers\qcusbserdl.sys [2012-05-10 127104]
S3 qcusbserdl2k;Gobi 2000 USB Device for Legacy Serial Communication(413C-8186); C:\Windows\system32\drivers\qcusbserdl2k.sys [2012-07-05 230784]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 rimmptsk;rimmptsk; C:\Windows\system32\drivers\rimmpx64.sys [2012-05-10 67584]
S3 rimspci;rimspci; C:\Windows\system32\drivers\rimspe64.sys [2012-05-10 60416]
S3 rimsptsk;rimsptsk; C:\Windows\system32\drivers\rimspx64.sys [2012-05-10 55296]
S3 risdpcie;risdpcie; C:\Windows\system32\drivers\risdpe64.sys [2012-05-10 80896]
S3 rismxdp;rismxdp; C:\Windows\system32\drivers\rixdpx64.sys [2012-05-10 57856]
S3 rixdpcie;rixdpcie; C:\Windows\system32\drivers\rixdpe64.sys [2012-05-10 55808]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2012-06-07 222720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\drivers\ser2pl64.sys [2011-04-15 97280]
S3 SNXPPAMD;SUNIX Parallel Port Driver; C:\Windows\system32\drivers\snxppamd.sys [2012-07-04 100728]
S3 SNXPSAMD;SUNIX Serial Port Driver; C:\Windows\system32\drivers\snxpsamd.sys [2012-07-04 97144]
S3 ST7007;ST7007; C:\Windows\system32\drivers\ST7007.sys [2011-06-20 67696]
S3 stmtpm;stmtpm; C:\Windows\system32\drivers\stm_tpm.sys [2012-05-25 29184]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 tcm;tcm; C:\Windows\system32\drivers\tcm.sys [2012-07-04 17048]
S3 terahid;PCoIP(R) HID Minidriver; C:\Windows\system32\drivers\terahid.sys [2012-06-14 7680]
S3 terahidmapper;PCoIP(R) HID Minidriver Service; C:\Windows\system32\drivers\terahidmapper.sys [2012-06-14 7680]
S3 teramouse;PCoIP(R) Mouse Service; C:\Windows\system32\drivers\teramouse.sys [2012-06-14 11264]
S3 terapcoip;PCoIP(R) Device Service; C:\Windows\system32\drivers\terapcoip.sys [2012-06-14 37376]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-10-02 29696]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-11-14 82128]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2012-07-05 89600]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-09-29 5817256]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2017-01-02 42096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 NovaPdfServer;novaPDF Server; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [2016-10-06 51112]
R2 O2FLASH;O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [2012-06-18 244328]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-07-05 297984]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-16 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-16 125112]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-06-20 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-25 107848]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2016-08-10 282112]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-09-29 2271928]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-06-18 276248]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-06-20 143144]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-25 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-12-14 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-01-02 172488]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-16 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]

-----------------EOF-----------------

Zdravím!
Tohle ale není typický projev keyloggeru. Ten obvykle vynechává diakritiku. Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Vkládám log, zatím řešíme počítač u kterého se to neobjevuje tak často ale který je důležitější.


# AdwCleaner v6.041 - Log vytvořen 05/01/2017 v 11:18:42
# Aktualizováno dne 16/12/2016 z Malwarebytes
# Databáze : 2017-01-03.1 [Server]
# Operační systém : Windows 7 Professional Service Pack 1 (X64)
# Uživatelské jméno : Uzivatel - POČÍTAČ
# Spuštěno z : C:\Users\Uzivatel\Downloads\adwcleaner_6.041.exe
# Mod: Skenování
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Složky ] *****

Nebyly nalezeny žádné škodlivé složky.


***** [ Soubory ] *****

Nebyly nalezeny žádné škodlivé soubory.


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupci ] *****

Žádný infikovaný zástupce nenalezen.


***** [ Naplánované úlohy ] *****

Žádná nebezpečná úloha nenalezena.


***** [ Registry ] *****

Nebyly nalezeny žádné škodlivé položky registru.


***** [ Internetové prohlížeče ] *****

Nebyly nalezeny žádné škodlivé položky prohlížeče Firefox.
Chromium nastavení nalezeno: [C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Web data] - winguard-pro.en.softonic.com

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [1309 Bajty] - [05/01/2017 11:18:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1382 Bajty] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uzivatel at 2017-01-06 10:07:52
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 175 GB (73%) free of 238 GB
Total RAM: 8073 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:07:55, on 6.1.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.seznam.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D8950D0E-FCE7-4AE4-9370-7E4CFBC04362} (FormApps Plug-in) - https://eportal.cssz.cz/fas/page/active ... bff_cs.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8232 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe"
C:\Windows\system32\DRIVERS\o2flash.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d94c331f-fa5e-4be5-8133-d9a505a13343 -SystemEventPortName:HostProcess-e19c7966-f1b9-4383-8798-1bc345c49c58 -IoCancelEventPortName:HostProcess-9811c12b-c152-48ee-8903-8b1089488474 -NonStateChangingEventPortName:HostProcess-f31b6b36-c80c-410d-90ff-97a13887ecdb -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8a77fe26-fda2-44c2-9307-6f8a0bf2599e -DeviceGroupId:
taskeng.exe {AAD241D7-0FCE-492B-9C68-559F8B95EB63}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"taskhost.exe"
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\DellTPad\HidFind.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "1339531494639022585-9687957442789413161302351903-999165390-19337894021159361784
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"taskhost.exe"
C:\Windows\system32\DbxSvc.exe
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /firstrunupdate 0 /DBData:eyJyZXF1ZXN0X3NlcXVlbmNlIjozMX0
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0x200
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="5204.0.1346551267\1642141578" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 5204 "\\.\pipe\gecko-crash-server-pipe.5204" tab
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=8524 --on-initialized-event-handle=668 --parent-handle=672 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,14,16,17,18,21,37,54,65 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2712 --gpu-driver-date=3-26-2012 --service-request-channel-token=2FDB3DD7D9322BD34F376B1B68BA7901 --mojo-platform-channel-handle=1428 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=1C1C875F99C73A2920A9D486B027F6EF --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=1C1C875F99C73A2920A9D486B027F6EF --mojo-platform-channel-handle=2384 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=E65A10AE37958B4F1BA87962E38721DF --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=E65A10AE37958B4F1BA87962E38721DF --mojo-platform-channel-handle=3256 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=DE490BDF666FD12CC220045104FD7107 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=DE490BDF666FD12CC220045104FD7107 --mojo-platform-channel-handle=3268 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=F7468490FF17F0AEE78698613F4B9857 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=F7468490FF17F0AEE78698613F4B9857 --mojo-platform-channel-handle=5596 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=0E35EA76F5260D0EC0BA8C39AB8CCA52 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=0E35EA76F5260D0EC0BA8C39AB8CCA52 --mojo-platform-channel-handle=2188 /prefetch:1
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde
"C:\Program Files\TightVNC\tvnviewer.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=D608CFD17C78822CBFC87238917C98D3 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=D608CFD17C78822CBFC87238917C98D3 --mojo-platform-channel-handle=5868 /prefetch:1

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=47D3A71247C4BF65C3EF9D705A7BD388 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=47D3A71247C4BF65C3EF9D705A7BD388 --mojo-platform-channel-handle=4000 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/*AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C487F50A8282D43DE83E8D9E32A64BBE --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C487F50A8282D43DE83E8D9E32A64BBE --mojo-platform-channel-handle=5164 /prefetch:1
"C:\Users\Uzivatel\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\c7z87krk.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL


C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\c7z87krk.default\extensions\
trash

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2012-06-18 626552]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-06-18 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-06-18 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-06-18 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-07-05 1128448]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-27 1610936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2017-01-02 25779624]
"ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2016-08-10 139776]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2016-08-10 4513792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-06-18 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-05 11:17:38 ----D---- C:\AdwCleaner
2017-01-04 12:53:29 ----D---- C:\KVRT_Data
2017-01-04 12:25:10 ----D---- C:\rsit
2017-01-04 12:25:10 ----D---- C:\Program Files\trend micro
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\DbxSvc.exe
2016-12-14 08:32:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-14 08:32:43 ----A---- C:\Windows\system32\mshtml.dll
2016-12-14 08:32:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-14 08:32:42 ----A---- C:\Windows\system32\jscript9.dll
2016-12-14 08:32:42 ----A---- C:\Windows\system32\ieframe.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\wintrust.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\winload.exe
2016-12-14 08:32:41 ----A---- C:\Windows\system32\wininet.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\win32k.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\usp10.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\user32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\msi.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\gdi32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\crypt32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\consent.exe
2016-12-14 08:32:41 ----A---- C:\Windows\system32\clfs.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\vbscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\urlmon.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-14 08:32:40 ----A---- C:\Windows\system32\ntdll.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\jscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\iertutil.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\hlink.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-14 08:32:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-14 08:32:40 ----A---- C:\Windows\system32\certcli.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\webcheck.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\smss.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\schannel.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\occache.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msrating.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msihnd.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msiexec.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\kernel32.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\kerberos.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\ieui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-14 08:32:39 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\authui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\appinfo.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\advapi32.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64win.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\winsrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wdigest.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\sspicli.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\srcore.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\srclient.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\secur32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\rstrui.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\msimsg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\lsass.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\inseng.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\iesetup.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\iernonce.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\credssp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\conhost.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\auditpol.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidapi.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\adtschema.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\tzres.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\msobjs.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\msaudite.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-12 10:32:02 ----D---- C:\Users\Uzivatel\AppData\Roaming\obs-studio
2016-12-12 10:31:24 ----D---- C:\Program Files (x86)\obs-studio
2016-12-12 10:30:51 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2016-12-12 10:30:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2016-12-12 10:30:51 ----A---- C:\Windows\system32\XAudio2_7.dll
2016-12-12 10:30:51 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2016-12-12 10:30:50 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2016-12-12 10:30:50 ----A---- C:\Windows\system32\xactengine3_7.dll
2016-12-12 10:30:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2016-12-12 10:30:49 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\system32\d3dx11_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\system32\d3dcsx_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\system32\D3DX9_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2016-12-12 10:30:46 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2016-12-12 10:30:46 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2016-12-12 10:30:46 ----A---- C:\Windows\system32\XAudio2_6.dll
2016-12-12 10:30:46 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2016-12-12 10:30:45 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2016-12-12 10:30:45 ----A---- C:\Windows\system32\xactengine3_6.dll
2016-12-12 10:30:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2016-12-12 10:30:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2016-12-12 10:30:43 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2016-12-12 10:30:43 ----A---- C:\Windows\system32\XAudio2_5.dll
2016-12-12 10:30:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2016-12-12 10:30:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2016-12-12 10:30:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2016-12-12 10:30:41 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\system32\d3dx11_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\system32\d3dcsx_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\system32\D3DX9_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\system32\d3dx10_42.dll
2016-12-12 10:30:38 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\system32\d3dx10_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2016-12-12 10:30:37 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2016-12-12 10:30:37 ----A---- C:\Windows\system32\D3DX9_41.dll
2016-12-12 10:30:36 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2016-12-12 10:30:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2016-12-12 10:30:36 ----A---- C:\Windows\system32\XAudio2_4.dll
2016-12-12 10:30:36 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2016-12-12 10:30:35 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2016-12-12 10:30:35 ----A---- C:\Windows\system32\xactengine3_4.dll
2016-12-12 10:30:34 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2016-12-12 10:30:34 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\D3DX9_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2016-12-12 10:30:31 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2016-12-12 10:30:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2016-12-12 10:30:31 ----A---- C:\Windows\system32\XAudio2_3.dll
2016-12-12 10:30:31 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2016-12-12 10:30:30 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2016-12-12 10:30:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2016-12-12 10:30:30 ----A---- C:\Windows\system32\xactengine3_3.dll
2016-12-12 10:30:30 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2016-12-12 10:30:29 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2016-12-12 10:30:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2016-12-12 10:30:29 ----A---- C:\Windows\system32\XAudio2_2.dll
2016-12-12 10:30:29 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2016-12-12 10:30:28 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2016-12-12 10:30:28 ----A---- C:\Windows\system32\xactengine3_2.dll
2016-12-12 10:30:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2016-12-12 10:30:26 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2016-12-12 10:30:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2016-12-12 10:30:25 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2016-12-12 10:30:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2016-12-12 10:30:25 ----A---- C:\Windows\system32\XAudio2_1.dll
2016-12-12 10:30:25 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2016-12-12 10:30:24 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2016-12-12 10:30:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2016-12-12 10:30:24 ----A---- C:\Windows\system32\xactengine3_1.dll
2016-12-12 10:30:24 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2016-12-12 10:30:23 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\system32\d3dx10_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2016-12-12 10:30:22 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2016-12-12 10:30:22 ----A---- C:\Windows\system32\D3DX9_38.dll
2016-12-12 10:30:21 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2016-12-12 10:30:21 ----A---- C:\Windows\system32\XAudio2_0.dll
2016-12-12 10:30:20 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2016-12-12 10:30:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2016-12-12 10:30:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2016-12-12 10:30:19 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\D3DX9_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\d3dx10_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2016-12-12 10:30:16 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2016-12-12 10:30:16 ----A---- C:\Windows\system32\xactengine2_10.dll
2016-12-12 10:30:15 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\system32\d3dx10_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2016-12-12 10:30:14 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2016-12-12 10:30:14 ----A---- C:\Windows\system32\d3dx9_36.dll
2016-12-12 10:30:13 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2016-12-12 10:30:13 ----A---- C:\Windows\system32\xactengine2_9.dll
2016-12-12 10:30:12 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\system32\d3dx10_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2016-12-12 10:30:11 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2016-12-12 10:30:11 ----A---- C:\Windows\system32\d3dx9_35.dll
2016-12-12 10:30:10 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2016-12-12 10:30:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2016-12-12 10:30:10 ----A---- C:\Windows\system32\xactengine2_8.dll
2016-12-12 10:30:10 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\d3dx9_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\d3dx10_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2016-12-12 10:30:08 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2016-12-12 10:30:08 ----A---- C:\Windows\system32\xinput1_3.dll
2016-12-12 10:30:07 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2016-12-12 10:30:07 ----A---- C:\Windows\system32\xactengine2_7.dll
2016-12-12 10:30:06 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\system32\d3dx10_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2016-12-12 10:30:05 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2016-12-12 10:30:05 ----A---- C:\Windows\system32\d3dx9_33.dll
2016-12-12 10:30:04 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2016-12-12 10:30:04 ----A---- C:\Windows\system32\xactengine2_6.dll
2016-12-12 10:30:03 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2016-12-12 10:30:03 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2016-12-12 10:30:03 ----A---- C:\Windows\system32\xactengine2_5.dll
2016-12-12 10:30:03 ----A---- C:\Windows\system32\d3dx10.dll
2016-12-12 10:30:02 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2016-12-12 10:30:02 ----A---- C:\Windows\system32\d3dx9_32.dll
2016-12-12 10:30:01 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2016-12-12 10:30:01 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2016-12-12 10:30:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2016-12-12 10:30:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2016-12-12 10:30:00 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2016-12-12 10:30:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2016-12-12 10:29:59 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2016-12-12 10:29:59 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2016-12-12 10:29:59 ----A---- C:\Windows\system32\xinput1_2.dll
2016-12-12 10:29:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2016-12-12 10:29:58 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2016-12-12 10:29:58 ----A---- C:\Windows\system32\xactengine2_2.dll
2016-12-12 10:29:57 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2016-12-12 10:29:57 ----A---- C:\Windows\system32\xinput1_1.dll
2016-12-12 10:29:56 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2016-12-12 10:29:56 ----A---- C:\Windows\system32\xactengine2_1.dll
2016-12-12 10:29:54 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2016-12-12 10:29:54 ----A---- C:\Windows\system32\d3dx9_30.dll
2016-12-12 10:29:53 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\system32\xactengine2_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\system32\x3daudio1_0.dll
2016-12-12 10:29:52 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2016-12-12 10:29:52 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2016-12-12 10:29:52 ----A---- C:\Windows\system32\d3dx9_29.dll
2016-12-12 10:29:52 ----A---- C:\Windows\system32\d3dx9_28.dll
2016-12-12 10:29:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2016-12-12 10:29:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2016-12-12 10:29:50 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2016-12-12 10:29:50 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2016-12-12 10:29:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2016-12-12 10:29:50 ----A---- C:\Windows\system32\d3dx9_25.dll
2016-12-12 10:29:49 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2016-12-12 10:29:49 ----A---- C:\Windows\system32\d3dx9_24.dll
2016-12-12 10:26:03 ----HD---- C:\Windows\msdownld.tmp
2016-12-12 10:25:56 ----D---- C:\Windows\SYSWOW64\directx
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\CamShapes.ini
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\CamLayout.ini
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\Camdata.ini
2016-12-12 10:03:10 ----D---- C:\Users\Uzivatel\AppData\Roaming\PicPick
2016-12-12 10:03:10 ----D---- C:\ProgramData\PicPick

======List of files/folders modified in the last 1 month======

2017-01-06 10:07:47 ----D---- C:\Windows\Temp
2017-01-06 09:57:41 ----A---- C:\Windows\BRRBCOM.INI
2017-01-06 09:53:50 ----D---- C:\Windows\system32\config
2017-01-05 14:11:45 ----SHD---- C:\System Volume Information
2017-01-05 11:15:34 ----D---- C:\Windows\System32
2017-01-05 11:15:34 ----D---- C:\Windows\inf
2017-01-05 11:15:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-01-04 13:24:28 ----D---- C:\Windows\system32\drivers
2017-01-04 12:25:10 ----RD---- C:\Program Files
2017-01-02 09:02:25 ----RD---- C:\Dropbox
2017-01-02 09:02:08 ----D---- C:\Program Files (x86)\Dropbox
2017-01-02 08:55:33 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-02 08:55:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-12-21 11:30:27 ----D---- C:\Windows\Microsoft.NET
2016-12-21 11:01:03 ----RSD---- C:\Windows\assembly
2016-12-20 14:34:12 ----SHD---- C:\Windows\Installer
2016-12-20 08:31:39 ----RD---- C:\Program Files (x86)
2016-12-20 08:31:37 ----D---- C:\Windows\Tasks
2016-12-19 08:28:26 ----D---- C:\Windows\winsxs
2016-12-19 08:27:34 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-19 08:27:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-19 08:27:34 ----D---- C:\Windows\SysWOW64
2016-12-19 08:27:34 ----D---- C:\Windows\system32\en-US
2016-12-19 08:27:34 ----D---- C:\Windows\system32\cs-CZ
2016-12-19 08:27:34 ----D---- C:\Program Files\Internet Explorer
2016-12-19 08:27:34 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-19 08:27:33 ----D---- C:\Windows\system32\Boot
2016-12-19 08:27:33 ----D---- C:\Windows\AppPatch
2016-12-16 10:32:13 ----D---- C:\Windows\system32\MRT
2016-12-16 10:28:14 ----AC---- C:\Windows\system32\MRT.exe
2016-12-16 10:28:08 ----D---- C:\ProgramData\Microsoft Help
2016-12-16 10:25:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-12-14 08:26:36 ----D---- C:\Windows\system32\catroot2
2016-12-12 10:29:49 ----D---- C:\Windows
2016-12-12 10:25:55 ----D---- C:\Windows\Logs
2016-12-12 10:25:12 ----D---- C:\ProgramData\Package Cache
2016-12-12 10:13:22 ----D---- C:\Users\Uzivatel\AppData\Roaming\vlc
2016-12-12 10:03:10 ----HD---- C:\ProgramData
2016-12-12 09:35:02 ----SD---- C:\Users\Uzivatel\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2012-06-18 568600]
R0 iaStorF;iaStorF; C:\Windows\system32\drivers\iaStorF.sys [2012-03-15 24496]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hcs.sys [2012-06-18 16152]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-12-02 295000]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdcfltn.sys [2011-07-15 22128]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-08-31 31648]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-08-31 830624]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2016-08-31 56976]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-08-31 116248]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x64; C:\Windows\system32\DRIVERS\Apfiltr.sys [2012-06-18 416592]
R3 cvusbdrv;Dell ControlVault; C:\Windows\System32\Drivers\cvusbdrv.sys [2012-05-25 45672]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-06-18 358576]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-06-18 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-18 331264]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-05-25 60184]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-06-18 11471872]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-12-02 135928]
R3 O2MDRRDR;O2MDRRDR; C:\Windows\system32\DRIVERS\O2MDRw7x64.sys [2012-06-18 74984]
R3 O2SDJRDR;O2SDJRDR; C:\Windows\system32\DRIVERS\o2sdjw7x64.sys [2012-06-18 84712]
R3 ST_ACCEL;STMicroelectronics Accelerometer Service; C:\Windows\system32\DRIVERS\ST_ACCEL.sys [2012-05-25 68208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-07-05 521728]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2016-08-10 12288]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 atmeltpm;atmeltpm; C:\Windows\system32\drivers\atmeltpm64.sys [2012-05-25 19456]
S3 BCMTPM;BCMTPM; C:\Windows\system32\drivers\btpmwx64.sys [2012-05-25 32096]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-06-07 132648]
S3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-06-07 21160]
S3 d554gps;Dell Wireless HSPA Mini-Card GPS Port; C:\Windows\system32\drivers\d554gps64.sys [2012-06-18 102440]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 DIGITECH;DIGITECH; C:\Windows\system32\drivers\DIGITECH.sys [2011-06-08 25648]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 E1G60;Intel(R) PRO/1000 NDIS 6 – ovladač adaptéru; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]
S3 ecnssndis; Mobile Broadband Driver; C:\Windows\System32\Drivers\wwuss64.sys [2012-06-18 26664]
S3 ecnssndisfltr; Mobile Broadband Driver Filter; C:\Windows\System32\Drivers\wwussf64.sys [2012-06-18 29736]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver; C:\Windows\system32\drivers\FLxHCIc.sys [2012-03-02 221184]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver; C:\Windows\system32\drivers\FLxHCIh.sys [2012-03-02 65536]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2011-04-15 69320]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-04-15 84808]
S3 HBtnKey;DELL Tablet PC Key Buttons HID Driver; C:\Windows\system32\drivers\HBtnKey.sys [2011-07-19 20424]
S3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2012-05-25 60184]
S3 iaStorA;iaStorA; C:\Windows\system32\drivers\iaStorA.sys [2012-03-15 567216]
S3 iaStorS;iaStorS; C:\Windows\system32\drivers\iaStorS.sys [2012-06-15 639408]
S3 Impcd;Impcd; C:\Windows\system32\drivers\Impcd.sys [2012-07-04 158976]
S3 irstrtdv;Intel(R) Rapid Start Technology Driver; C:\Windows\system32\drivers\irstrtdv.sys [2011-06-16 26504]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\drivers\ISCTD64.sys [2012-05-25 44992]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hub.sys [2012-06-18 356120]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3xhc.sys [2012-06-18 788760]
S3 Mbm3CBus;Dell Wireless 5530 HSPA Mini-Card Device (WDM); C:\Windows\system32\drivers\Mbm3CBus.sys [2012-06-18 419400]
S3 Mbm3DevMt;Dell Wireless HSPA Mini-Card Device Management Driver (WDM); C:\Windows\system32\drivers\Mbm3DevMt.sys [2012-06-18 430664]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2012-07-04 80384]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2012-04-20 177152]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\Windows\system32\drivers\nvstusb.sys [2012-05-25 399168]
S3 NWADI;NWADI Bus Enumerator; C:\Windows\system32\drivers\NWADIenum.sys [2009-10-26 237568]
S3 nwdelgobi3kfilter;Dell Wireless Gobi 3000 USB Composite Device Filter Driver; C:\Windows\system32\drivers\nwdelgobi3kfilter.sys [2012-06-18 34304]
S3 NWDellPort;Dell Wireless Mobile Broadband Status Port Driver; C:\Windows\system32\drivers\nwdelser.sys [2012-06-18 222208]
S3 NWDellPort2;Dell Wireless Mobile Broadband Status2 Port Driver; C:\Windows\system32\drivers\nwdelser2.sys [2012-06-18 222208]
S3 nwdelserial;Dell Wireless Gobi 3000 USB Device for Legacy Serial Communication; C:\Windows\system32\drivers\nwdelserial.sys [2012-06-18 234112]
S3 O2MDFRDR;O2MDFRDR; C:\Windows\system32\drivers\O2MDFw7x64.sys [2012-06-18 72808]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 percsas2;percsas2; C:\Windows\system32\drivers\percsas2.sys [2012-06-15 53584]
S3 ptlser;ptlser; C:\Windows\system32\drivers\ptlser64.sys []
S3 QCFilterdl;Dell Wireless 5600 (EV-DO-HSPA) Mobile Broadband Mini-Card Composite Device Filter Driver; C:\Windows\system32\drivers\qcfilterdl.sys [2012-05-10 8832]
S3 qcfilterdl2k;Dell Wireless 5620 (EV-DO-HSPA) Mobile Broadband Mini-Card Composite Device Filter; C:\Windows\system32\drivers\qcfilterdl2k.sys [2012-07-05 6400]
S3 qcombusdl;Gobi 2000 USB Composite Device Driver(413C-8186); C:\Windows\system32\drivers\qcombusdl.sys [2012-07-05 137800]
S3 qcusbserdl;Dell USB Device for Legacy Serial Communication; C:\Windows\system32\drivers\qcusbserdl.sys [2012-05-10 127104]
S3 qcusbserdl2k;Gobi 2000 USB Device for Legacy Serial Communication(413C-8186); C:\Windows\system32\drivers\qcusbserdl2k.sys [2012-07-05 230784]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 rimmptsk;rimmptsk; C:\Windows\system32\drivers\rimmpx64.sys [2012-05-10 67584]
S3 rimspci;rimspci; C:\Windows\system32\drivers\rimspe64.sys [2012-05-10 60416]
S3 rimsptsk;rimsptsk; C:\Windows\system32\drivers\rimspx64.sys [2012-05-10 55296]
S3 risdpcie;risdpcie; C:\Windows\system32\drivers\risdpe64.sys [2012-05-10 80896]
S3 rismxdp;rismxdp; C:\Windows\system32\drivers\rixdpx64.sys [2012-05-10 57856]
S3 rixdpcie;rixdpcie; C:\Windows\system32\drivers\rixdpe64.sys [2012-05-10 55808]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2012-06-07 222720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\drivers\ser2pl64.sys [2011-04-15 97280]
S3 SNXPPAMD;SUNIX Parallel Port Driver; C:\Windows\system32\drivers\snxppamd.sys [2012-07-04 100728]
S3 SNXPSAMD;SUNIX Serial Port Driver; C:\Windows\system32\drivers\snxpsamd.sys [2012-07-04 97144]
S3 ST7007;ST7007; C:\Windows\system32\drivers\ST7007.sys [2011-06-20 67696]
S3 stmtpm;stmtpm; C:\Windows\system32\drivers\stm_tpm.sys [2012-05-25 29184]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 tcm;tcm; C:\Windows\system32\drivers\tcm.sys [2012-07-04 17048]
S3 terahid;PCoIP(R) HID Minidriver; C:\Windows\system32\drivers\terahid.sys [2012-06-14 7680]
S3 terahidmapper;PCoIP(R) HID Minidriver Service; C:\Windows\system32\drivers\terahidmapper.sys [2012-06-14 7680]
S3 teramouse;PCoIP(R) Mouse Service; C:\Windows\system32\drivers\teramouse.sys [2012-06-14 11264]
S3 terapcoip;PCoIP(R) Device Service; C:\Windows\system32\drivers\terapcoip.sys [2012-06-14 37376]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-10-02 29696]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-11-14 82128]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2012-07-05 89600]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-09-29 5817256]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2017-01-02 42096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 NovaPdfServer;novaPDF Server; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [2016-10-06 51112]
R2 O2FLASH;O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [2012-06-18 244328]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-07-05 297984]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-16 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-16 125112]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-06-20 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-25 107848]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2016-08-10 282112]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-09-29 2271928]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-06-18 276248]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-06-20 143144]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-25 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-12-14 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-01-02 172488]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-16 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uzivatel at 2017-01-08 10:43:45
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 175 GB (74%) free of 238 GB
Total RAM: 8073 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:43:47, on 8.1.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
C:\Program Files\trend micro\Uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.seznam.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D8950D0E-FCE7-4AE4-9370-7E4CFBC04362} (FormApps Plug-in) - https://eportal.cssz.cz/fas/page/active ... bff_cs.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8235 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\Windows\system32\svchost.exe -k GPSvcGroup
taskeng.exe {CBBDF0E6-90EB-430E-AEE3-0C1CDB45CE05}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {39F9623E-8B52-4A4F-8774-F6A5140D69C1}
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\PrintIsolationHost.exe -Embedding
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
C:\Windows\system32\DbxSvc.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe"
C:\Windows\system32\DRIVERS\o2flash.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ec0384ed-f065-45a4-a4e1-0129e277719d -SystemEventPortName:HostProcess-9844bf05-31b1-48cf-a54e-a3dd6b0e1571 -IoCancelEventPortName:HostProcess-4f7f7c5c-9d71-4eae-a64c-a0206530c4ab -NonStateChangingEventPortName:HostProcess-f2432f08-a520-481c-9fae-89dbd8eb5346 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:995dc14e-e1cc-4129-a37b-417c61b43506 -DeviceGroupId:
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 876 880 888 65536 884
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\DellTPad\HidFind.exe"
-BootProc
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "234291226-1747943146-1951995879-16768076571195912632483843-1283826955129053956
-BootProc
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3412621285-2553977510-3155348915-10012_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3412621285-2553977510-3155348915-10012 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=55.0.2883.87 --handshake-handle=0x200
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=5188 --on-initialized-event-handle=668 --parent-handle=672 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=6,14,16,17,18,21,37,54,65 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2712 --gpu-driver-date=3-26-2012 --service-request-channel-token=C740D0378436DF6759A0EDAC0CBCB63B --mojo-platform-channel-handle=1436 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/*InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=FE091D30776CD67A9C2CCE0F293C54F1 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=FE091D30776CD67A9C2CCE0F293C54F1 --mojo-platform-channel-handle=2248 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/*InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=5D42CEAA34DED3A2825EB52E981F6B0F --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=5D42CEAA34DED3A2825EB52E981F6B0F --mojo-platform-channel-handle=2460 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/*InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/WebFontsInterventionV2/Default/ --primordial-pipe-token=C1E00F2CA6F5A905613D198BA74FF744 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C1E00F2CA6F5A905613D198BA74FF744 --mojo-platform-channel-handle=2252 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/Html5ByDefault/Default/*InstanceID/Enabled/MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=B031DC1FA235F124A655AA2F48FD3C5B --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=B031DC1FA235F124A655AA2F48FD3C5B --mojo-platform-channel-handle=3076 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=D1D54CB0CCE775F2188B9FE25AAC9747 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=D1D54CB0CCE775F2188B9FE25AAC9747 --mojo-platform-channel-handle=3952 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=C111367ECA5C85FF6B7A7BAE8D2C7004 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=C111367ECA5C85FF6B7A7BAE8D2C7004 --mojo-platform-channel-handle=6060 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=878903C7E230FDE92E6FB130BA54C901 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=878903C7E230FDE92E6FB130BA54C901 --mojo-platform-channel-handle=6444 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=7CA87A3CF0D6DE09DBF3E093E2AB2F0E --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=7CA87A3CF0D6DE09DBF3E093E2AB2F0E --mojo-platform-channel-handle=6444 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features="*AutofillCreditCardSigninPromo<AutofillCreditCardSigninPromo,AutofillProfileCleanup<AutofillProfileCleanup,BlockSmallPluginContent<PluginPowerSaverTiny,*DisableFirstRunAutoImport<DisableFirstRunAutoImport,*ExperimentalSwReporterEngine<SRTExperimentalEngineTrial,*MediaFoundationH264Encoding<MediaFoundationH264Encoding,*OverrideYouTubeFlashEmbed<Override YouTube Flash emed,PersistentHistograms<PersistentHistograms,*PointerEvent<PointerEvent,*PreconnectMore<PreconnectMore,*PreferHtmlOverPlugins<Html5ByDefault,SecurityChip<SecurityChip,SubresourceFilter<SubresourceFilter,*TranslateUI2016Q2<TranslateUI2016Q2" --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,MetricsReporting<MetricsAndCrashSampling,ParseHTMLOnMainThread<ParseHTMLOnMainThread,SSLPostQuantumExperiment<SSLPostQuantum,SecurityWarningIconUpdate<SecurityWarningIconUpdate,SwReporterExtendedSafeBrowsingFeature<SwReporterExtendedSafeBrowsingFeature,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=*AppBannerTriggering/site-engagement-eager/AutofillCreditCardSigninPromo/Default/*AutofillProfileCleanup/Enabled/CaptivePortalInterstitial/Enabled/*ChromeChannelStable/Enabled/*ChromeSuggestionsTuning/Default/*ClientSideDetectionModel/Model0/*DataReductionProxyUseQuic/Control6/DefaultBrowserPromptStyle/ColoredIconOnWhiteInfoBar3/DisableFirstRunAutoImport/Default/*DisallowFetchForDocWrittenScriptsInMainFrame/Control_20161208_Launch/EnableWin32kLockDownMimeTypes/PPAPILockdown_Enabled/*EnforceCTForProblematicRoots/disabled/ExtensionDeveloperModeWarning/Enabled/*Html5ByDefault/Default/*InstanceID/Enabled/*MediaFoundationH264Encoding/Default/MetricsAndCrashSampling/OutOfReportingSample/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Command-Line-Enabled/*OmniboxBundledExperimentV1/StandardR7/*ParseHTMLOnMainThread/Default/PasswordBranding/SmartLockBrandingSavePromptOnly/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Enable/*PersistentHistograms/EnabledOnDisk/PluginPowerSaverTiny/Enabled2/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/SRTExperimentalEngineTrial/Default/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SSLPostQuantum/disabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SecurityChip/Enabled/SecurityWarningIconUpdate/Control/SignInPasswordPromo/Enable3/*SiteIsolationExtensions/Control/*StrictSecureCookies/Default/*SubresourceFilter/EnabledForPhishingSites/*SwReporterExtendedSafeBrowsingFeature/Control/TranslateServerStudy/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_82/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_05/*UMA-Uniformity-Trial-50-Percent/default/WebBluetoothBlacklist/BlacklistUpdate1/*WebFontsInterventionV2/Default/ --primordial-pipe-token=F0F8F8CA3A0E27869ED756121B2E1BFA --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=false --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=F0F8F8CA3A0E27869ED756121B2E1BFA --mojo-platform-channel-handle=7172 /prefetch:1
"C:\Users\Uzivatel\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\c7z87krk.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL


C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\c7z87krk.default\extensions\
trash

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2012-06-18 626552]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-06-18 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-06-18 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-06-18 439064]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-07-05 1128448]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-27 1610936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2017-01-02 25779624]
"ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2016-08-10 139776]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2016-08-10 4513792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-06-18 434688]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-08 10:36:21 ----D---- C:\_OTM
2017-01-05 11:17:38 ----D---- C:\AdwCleaner
2017-01-04 12:53:29 ----D---- C:\KVRT_Data
2017-01-04 12:25:10 ----D---- C:\rsit
2017-01-04 12:25:10 ----D---- C:\Program Files\trend micro
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\DbxSvc.exe
2016-12-14 08:32:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-14 08:32:43 ----A---- C:\Windows\system32\mshtml.dll
2016-12-14 08:32:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-14 08:32:42 ----A---- C:\Windows\system32\jscript9.dll
2016-12-14 08:32:42 ----A---- C:\Windows\system32\ieframe.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\wintrust.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\winload.exe
2016-12-14 08:32:41 ----A---- C:\Windows\system32\wininet.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\win32k.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\usp10.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\user32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\msi.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\gdi32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\crypt32.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\consent.exe
2016-12-14 08:32:41 ----A---- C:\Windows\system32\clfs.sys
2016-12-14 08:32:41 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-14 08:32:41 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-14 08:32:40 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\vbscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\urlmon.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-14 08:32:40 ----A---- C:\Windows\system32\ntdll.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\jscript.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\iertutil.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\hlink.dll
2016-12-14 08:32:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-14 08:32:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-14 08:32:40 ----A---- C:\Windows\system32\certcli.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-14 08:32:39 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\webcheck.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\smss.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\schannel.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\occache.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msrating.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msihnd.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\msiexec.exe
2016-12-14 08:32:39 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\kernel32.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\kerberos.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\ieui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-14 08:32:39 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\authui.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\appinfo.dll
2016-12-14 08:32:39 ----A---- C:\Windows\system32\advapi32.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 08:32:38 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64win.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wow64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\winsrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\wdigest.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\sspicli.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\srcore.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\srclient.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\secur32.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\rstrui.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\msimsg.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\lsass.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\inseng.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\iesetup.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\iernonce.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-14 08:32:38 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\credssp.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\conhost.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\auditpol.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-14 08:32:38 ----A---- C:\Windows\system32\appidapi.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-14 08:32:38 ----A---- C:\Windows\system32\adtschema.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-14 08:32:37 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\tzres.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\msobjs.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\msaudite.dll
2016-12-14 08:32:37 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-12 10:32:02 ----D---- C:\Users\Uzivatel\AppData\Roaming\obs-studio
2016-12-12 10:31:24 ----D---- C:\Program Files (x86)\obs-studio
2016-12-12 10:30:51 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2016-12-12 10:30:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2016-12-12 10:30:51 ----A---- C:\Windows\system32\XAudio2_7.dll
2016-12-12 10:30:51 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2016-12-12 10:30:50 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2016-12-12 10:30:50 ----A---- C:\Windows\system32\xactengine3_7.dll
2016-12-12 10:30:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2016-12-12 10:30:49 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\system32\d3dx11_43.dll
2016-12-12 10:30:48 ----A---- C:\Windows\system32\d3dcsx_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\system32\D3DX9_43.dll
2016-12-12 10:30:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2016-12-12 10:30:46 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2016-12-12 10:30:46 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2016-12-12 10:30:46 ----A---- C:\Windows\system32\XAudio2_6.dll
2016-12-12 10:30:46 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2016-12-12 10:30:45 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2016-12-12 10:30:45 ----A---- C:\Windows\system32\xactengine3_6.dll
2016-12-12 10:30:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2016-12-12 10:30:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2016-12-12 10:30:43 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2016-12-12 10:30:43 ----A---- C:\Windows\system32\XAudio2_5.dll
2016-12-12 10:30:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2016-12-12 10:30:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2016-12-12 10:30:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2016-12-12 10:30:41 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\system32\d3dx11_42.dll
2016-12-12 10:30:40 ----A---- C:\Windows\system32\d3dcsx_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\system32\D3DX9_42.dll
2016-12-12 10:30:39 ----A---- C:\Windows\system32\d3dx10_42.dll
2016-12-12 10:30:38 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\system32\d3dx10_41.dll
2016-12-12 10:30:38 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2016-12-12 10:30:37 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2016-12-12 10:30:37 ----A---- C:\Windows\system32\D3DX9_41.dll
2016-12-12 10:30:36 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2016-12-12 10:30:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2016-12-12 10:30:36 ----A---- C:\Windows\system32\XAudio2_4.dll
2016-12-12 10:30:36 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2016-12-12 10:30:35 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2016-12-12 10:30:35 ----A---- C:\Windows\system32\xactengine3_4.dll
2016-12-12 10:30:34 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2016-12-12 10:30:34 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\D3DX9_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2016-12-12 10:30:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2016-12-12 10:30:31 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2016-12-12 10:30:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2016-12-12 10:30:31 ----A---- C:\Windows\system32\XAudio2_3.dll
2016-12-12 10:30:31 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2016-12-12 10:30:30 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2016-12-12 10:30:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2016-12-12 10:30:30 ----A---- C:\Windows\system32\xactengine3_3.dll
2016-12-12 10:30:30 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2016-12-12 10:30:29 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2016-12-12 10:30:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2016-12-12 10:30:29 ----A---- C:\Windows\system32\XAudio2_2.dll
2016-12-12 10:30:29 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2016-12-12 10:30:28 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2016-12-12 10:30:28 ----A---- C:\Windows\system32\xactengine3_2.dll
2016-12-12 10:30:27 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\system32\d3dx10_39.dll
2016-12-12 10:30:27 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2016-12-12 10:30:26 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2016-12-12 10:30:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2016-12-12 10:30:25 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2016-12-12 10:30:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2016-12-12 10:30:25 ----A---- C:\Windows\system32\XAudio2_1.dll
2016-12-12 10:30:25 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2016-12-12 10:30:24 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2016-12-12 10:30:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2016-12-12 10:30:24 ----A---- C:\Windows\system32\xactengine3_1.dll
2016-12-12 10:30:24 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2016-12-12 10:30:23 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\system32\d3dx10_38.dll
2016-12-12 10:30:23 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2016-12-12 10:30:22 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2016-12-12 10:30:22 ----A---- C:\Windows\system32\D3DX9_38.dll
2016-12-12 10:30:21 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2016-12-12 10:30:21 ----A---- C:\Windows\system32\XAudio2_0.dll
2016-12-12 10:30:20 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2016-12-12 10:30:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2016-12-12 10:30:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2016-12-12 10:30:19 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\D3DX9_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\d3dx10_37.dll
2016-12-12 10:30:18 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2016-12-12 10:30:16 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2016-12-12 10:30:16 ----A---- C:\Windows\system32\xactengine2_10.dll
2016-12-12 10:30:15 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\system32\d3dx10_36.dll
2016-12-12 10:30:15 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2016-12-12 10:30:14 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2016-12-12 10:30:14 ----A---- C:\Windows\system32\d3dx9_36.dll
2016-12-12 10:30:13 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2016-12-12 10:30:13 ----A---- C:\Windows\system32\xactengine2_9.dll
2016-12-12 10:30:12 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\system32\d3dx10_35.dll
2016-12-12 10:30:12 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2016-12-12 10:30:11 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2016-12-12 10:30:11 ----A---- C:\Windows\system32\d3dx9_35.dll
2016-12-12 10:30:10 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2016-12-12 10:30:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2016-12-12 10:30:10 ----A---- C:\Windows\system32\xactengine2_8.dll
2016-12-12 10:30:10 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\d3dx9_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\d3dx10_34.dll
2016-12-12 10:30:09 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2016-12-12 10:30:08 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2016-12-12 10:30:08 ----A---- C:\Windows\system32\xinput1_3.dll
2016-12-12 10:30:07 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2016-12-12 10:30:07 ----A---- C:\Windows\system32\xactengine2_7.dll
2016-12-12 10:30:06 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\system32\d3dx10_33.dll
2016-12-12 10:30:06 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2016-12-12 10:30:05 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2016-12-12 10:30:05 ----A---- C:\Windows\system32\d3dx9_33.dll
2016-12-12 10:30:04 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2016-12-12 10:30:04 ----A---- C:\Windows\system32\xactengine2_6.dll
2016-12-12 10:30:03 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2016-12-12 10:30:03 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2016-12-12 10:30:03 ----A---- C:\Windows\system32\xactengine2_5.dll
2016-12-12 10:30:03 ----A---- C:\Windows\system32\d3dx10.dll
2016-12-12 10:30:02 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2016-12-12 10:30:02 ----A---- C:\Windows\system32\d3dx9_32.dll
2016-12-12 10:30:01 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2016-12-12 10:30:01 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2016-12-12 10:30:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2016-12-12 10:30:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2016-12-12 10:30:00 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2016-12-12 10:30:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2016-12-12 10:29:59 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2016-12-12 10:29:59 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2016-12-12 10:29:59 ----A---- C:\Windows\system32\xinput1_2.dll
2016-12-12 10:29:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2016-12-12 10:29:58 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2016-12-12 10:29:58 ----A---- C:\Windows\system32\xactengine2_2.dll
2016-12-12 10:29:57 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2016-12-12 10:29:57 ----A---- C:\Windows\system32\xinput1_1.dll
2016-12-12 10:29:56 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2016-12-12 10:29:56 ----A---- C:\Windows\system32\xactengine2_1.dll
2016-12-12 10:29:54 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2016-12-12 10:29:54 ----A---- C:\Windows\system32\d3dx9_30.dll
2016-12-12 10:29:53 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\system32\xactengine2_0.dll
2016-12-12 10:29:53 ----A---- C:\Windows\system32\x3daudio1_0.dll
2016-12-12 10:29:52 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2016-12-12 10:29:52 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2016-12-12 10:29:52 ----A---- C:\Windows\system32\d3dx9_29.dll
2016-12-12 10:29:52 ----A---- C:\Windows\system32\d3dx9_28.dll
2016-12-12 10:29:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2016-12-12 10:29:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2016-12-12 10:29:50 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2016-12-12 10:29:50 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2016-12-12 10:29:50 ----A---- C:\Windows\system32\d3dx9_26.dll
2016-12-12 10:29:50 ----A---- C:\Windows\system32\d3dx9_25.dll
2016-12-12 10:29:49 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2016-12-12 10:29:49 ----A---- C:\Windows\system32\d3dx9_24.dll
2016-12-12 10:25:56 ----D---- C:\Windows\SYSWOW64\directx
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\CamShapes.ini
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\CamLayout.ini
2016-12-12 10:19:43 ----A---- C:\Users\Uzivatel\AppData\Roaming\Camdata.ini
2016-12-12 10:03:10 ----D---- C:\Users\Uzivatel\AppData\Roaming\PicPick
2016-12-12 10:03:10 ----D---- C:\ProgramData\PicPick

======List of files/folders modified in the last 1 month======

2017-01-08 10:43:46 ----D---- C:\Windows\Temp
2017-01-08 10:43:23 ----RD---- C:\Dropbox
2017-01-08 10:42:38 ----D---- C:\Windows\system32\config
2017-01-08 10:42:22 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-08 10:42:22 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-01-08 10:40:08 ----D---- C:\Windows
2017-01-06 09:57:41 ----A---- C:\Windows\BRRBCOM.INI
2017-01-05 14:11:45 ----SHD---- C:\System Volume Information
2017-01-05 11:15:34 ----D---- C:\Windows\System32
2017-01-05 11:15:34 ----D---- C:\Windows\inf
2017-01-05 11:15:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-01-04 13:24:28 ----D---- C:\Windows\system32\drivers
2017-01-04 12:25:10 ----RD---- C:\Program Files
2017-01-02 09:02:08 ----D---- C:\Program Files (x86)\Dropbox
2016-12-21 11:30:27 ----D---- C:\Windows\Microsoft.NET
2016-12-21 11:01:03 ----RSD---- C:\Windows\assembly
2016-12-20 14:34:12 ----SHD---- C:\Windows\Installer
2016-12-20 08:31:39 ----RD---- C:\Program Files (x86)
2016-12-20 08:31:37 ----D---- C:\Windows\Tasks
2016-12-19 08:28:26 ----D---- C:\Windows\winsxs
2016-12-19 08:27:34 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-19 08:27:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-19 08:27:34 ----D---- C:\Windows\SysWOW64
2016-12-19 08:27:34 ----D---- C:\Windows\system32\en-US
2016-12-19 08:27:34 ----D---- C:\Windows\system32\cs-CZ
2016-12-19 08:27:34 ----D---- C:\Program Files\Internet Explorer
2016-12-19 08:27:34 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-19 08:27:33 ----D---- C:\Windows\system32\Boot
2016-12-19 08:27:33 ----D---- C:\Windows\AppPatch
2016-12-16 10:32:13 ----D---- C:\Windows\system32\MRT
2016-12-16 10:28:14 ----AC---- C:\Windows\system32\MRT.exe
2016-12-16 10:28:08 ----D---- C:\ProgramData\Microsoft Help
2016-12-16 10:25:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-12-14 08:26:36 ----D---- C:\Windows\system32\catroot2
2016-12-12 10:25:55 ----D---- C:\Windows\Logs
2016-12-12 10:25:12 ----D---- C:\ProgramData\Package Cache
2016-12-12 10:13:22 ----D---- C:\Users\Uzivatel\AppData\Roaming\vlc
2016-12-12 10:03:10 ----HD---- C:\ProgramData
2016-12-12 09:35:02 ----SD---- C:\Users\Uzivatel\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2012-06-18 568600]
R0 iaStorF;iaStorF; C:\Windows\system32\drivers\iaStorF.sys [2012-03-15 24496]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hcs.sys [2012-06-18 16152]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-12-02 295000]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdcfltn.sys [2011-07-15 22128]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-08-31 31648]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-08-31 830624]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2016-08-31 56976]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-08-31 116248]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x64; C:\Windows\system32\DRIVERS\Apfiltr.sys [2012-06-18 416592]
R3 cvusbdrv;Dell ControlVault; C:\Windows\System32\Drivers\cvusbdrv.sys [2012-05-25 45672]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2012-06-18 358576]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-06-18 14748416]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-18 331264]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-05-25 60184]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-06-18 11471872]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-12-02 135928]
R3 O2MDRRDR;O2MDRRDR; C:\Windows\system32\DRIVERS\O2MDRw7x64.sys [2012-06-18 74984]
R3 O2SDJRDR;O2SDJRDR; C:\Windows\system32\DRIVERS\o2sdjw7x64.sys [2012-06-18 84712]
R3 ST_ACCEL;STMicroelectronics Accelerometer Service; C:\Windows\system32\DRIVERS\ST_ACCEL.sys [2012-05-25 68208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-07-05 521728]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2016-08-10 12288]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 atmeltpm;atmeltpm; C:\Windows\system32\drivers\atmeltpm64.sys [2012-05-25 19456]
S3 BCMTPM;BCMTPM; C:\Windows\system32\drivers\btpmwx64.sys [2012-05-25 32096]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-06-07 132648]
S3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-06-07 21160]
S3 d554gps;Dell Wireless HSPA Mini-Card GPS Port; C:\Windows\system32\drivers\d554gps64.sys [2012-06-18 102440]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 DIGITECH;DIGITECH; C:\Windows\system32\drivers\DIGITECH.sys [2011-06-08 25648]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 E1G60;Intel(R) PRO/1000 NDIS 6 – ovladač adaptéru; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]
S3 ecnssndis; Mobile Broadband Driver; C:\Windows\System32\Drivers\wwuss64.sys [2012-06-18 26664]
S3 ecnssndisfltr; Mobile Broadband Driver Filter; C:\Windows\System32\Drivers\wwussf64.sys [2012-06-18 29736]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver; C:\Windows\system32\drivers\FLxHCIc.sys [2012-03-02 221184]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver; C:\Windows\system32\drivers\FLxHCIh.sys [2012-03-02 65536]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2011-04-15 69320]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2011-04-15 84808]
S3 HBtnKey;DELL Tablet PC Key Buttons HID Driver; C:\Windows\system32\drivers\HBtnKey.sys [2011-07-19 20424]
S3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2012-05-25 60184]
S3 iaStorA;iaStorA; C:\Windows\system32\drivers\iaStorA.sys [2012-03-15 567216]
S3 iaStorS;iaStorS; C:\Windows\system32\drivers\iaStorS.sys [2012-06-15 639408]
S3 Impcd;Impcd; C:\Windows\system32\drivers\Impcd.sys [2012-07-04 158976]
S3 irstrtdv;Intel(R) Rapid Start Technology Driver; C:\Windows\system32\drivers\irstrtdv.sys [2011-06-16 26504]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\drivers\ISCTD64.sys [2012-05-25 44992]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3hub.sys [2012-06-18 356120]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\drivers\iusb3xhc.sys [2012-06-18 788760]
S3 Mbm3CBus;Dell Wireless 5530 HSPA Mini-Card Device (WDM); C:\Windows\system32\drivers\Mbm3CBus.sys [2012-06-18 419400]
S3 Mbm3DevMt;Dell Wireless HSPA Mini-Card Device Management Driver (WDM); C:\Windows\system32\drivers\Mbm3DevMt.sys [2012-06-18 430664]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2012-07-04 80384]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2012-04-20 177152]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\Windows\system32\drivers\nvstusb.sys [2012-05-25 399168]
S3 NWADI;NWADI Bus Enumerator; C:\Windows\system32\drivers\NWADIenum.sys [2009-10-26 237568]
S3 nwdelgobi3kfilter;Dell Wireless Gobi 3000 USB Composite Device Filter Driver; C:\Windows\system32\drivers\nwdelgobi3kfilter.sys [2012-06-18 34304]
S3 NWDellPort;Dell Wireless Mobile Broadband Status Port Driver; C:\Windows\system32\drivers\nwdelser.sys [2012-06-18 222208]
S3 NWDellPort2;Dell Wireless Mobile Broadband Status2 Port Driver; C:\Windows\system32\drivers\nwdelser2.sys [2012-06-18 222208]
S3 nwdelserial;Dell Wireless Gobi 3000 USB Device for Legacy Serial Communication; C:\Windows\system32\drivers\nwdelserial.sys [2012-06-18 234112]
S3 O2MDFRDR;O2MDFRDR; C:\Windows\system32\drivers\O2MDFw7x64.sys [2012-06-18 72808]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 percsas2;percsas2; C:\Windows\system32\drivers\percsas2.sys [2012-06-15 53584]
S3 ptlser;ptlser; C:\Windows\system32\drivers\ptlser64.sys []
S3 QCFilterdl;Dell Wireless 5600 (EV-DO-HSPA) Mobile Broadband Mini-Card Composite Device Filter Driver; C:\Windows\system32\drivers\qcfilterdl.sys [2012-05-10 8832]
S3 qcfilterdl2k;Dell Wireless 5620 (EV-DO-HSPA) Mobile Broadband Mini-Card Composite Device Filter; C:\Windows\system32\drivers\qcfilterdl2k.sys [2012-07-05 6400]
S3 qcombusdl;Gobi 2000 USB Composite Device Driver(413C-8186); C:\Windows\system32\drivers\qcombusdl.sys [2012-07-05 137800]
S3 qcusbserdl;Dell USB Device for Legacy Serial Communication; C:\Windows\system32\drivers\qcusbserdl.sys [2012-05-10 127104]
S3 qcusbserdl2k;Gobi 2000 USB Device for Legacy Serial Communication(413C-8186); C:\Windows\system32\drivers\qcusbserdl2k.sys [2012-07-05 230784]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 rimmptsk;rimmptsk; C:\Windows\system32\drivers\rimmpx64.sys [2012-05-10 67584]
S3 rimspci;rimspci; C:\Windows\system32\drivers\rimspe64.sys [2012-05-10 60416]
S3 rimsptsk;rimsptsk; C:\Windows\system32\drivers\rimspx64.sys [2012-05-10 55296]
S3 risdpcie;risdpcie; C:\Windows\system32\drivers\risdpe64.sys [2012-05-10 80896]
S3 rismxdp;rismxdp; C:\Windows\system32\drivers\rixdpx64.sys [2012-05-10 57856]
S3 rixdpcie;rixdpcie; C:\Windows\system32\drivers\rixdpe64.sys [2012-05-10 55808]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2012-06-07 222720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\drivers\ser2pl64.sys [2011-04-15 97280]
S3 SNXPPAMD;SUNIX Parallel Port Driver; C:\Windows\system32\drivers\snxppamd.sys [2012-07-04 100728]
S3 SNXPSAMD;SUNIX Serial Port Driver; C:\Windows\system32\drivers\snxpsamd.sys [2012-07-04 97144]
S3 ST7007;ST7007; C:\Windows\system32\drivers\ST7007.sys [2011-06-20 67696]
S3 stmtpm;stmtpm; C:\Windows\system32\drivers\stm_tpm.sys [2012-05-25 29184]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 tcm;tcm; C:\Windows\system32\drivers\tcm.sys [2012-07-04 17048]
S3 terahid;PCoIP(R) HID Minidriver; C:\Windows\system32\drivers\terahid.sys [2012-06-14 7680]
S3 terahidmapper;PCoIP(R) HID Minidriver Service; C:\Windows\system32\drivers\terahidmapper.sys [2012-06-14 7680]
S3 teramouse;PCoIP(R) Mouse Service; C:\Windows\system32\drivers\teramouse.sys [2012-06-14 11264]
S3 terapcoip;PCoIP(R) Device Service; C:\Windows\system32\drivers\terapcoip.sys [2012-06-14 37376]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-10-02 29696]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-11-14 82128]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2012-07-05 89600]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-09-29 5817256]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2017-01-02 42096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R2 NovaPdfServer;novaPDF Server; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [2016-10-06 51112]
R2 O2FLASH;O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [2012-06-18 244328]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-07-05 297984]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-16 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-16 125112]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-06-20 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-25 107848]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2016-08-10 282112]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-09-29 2271928]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-06-18 276248]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-06-20 143144]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-25 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-12-14 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-01-02 172488]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-16 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-16 135848]

-----------------EOF-----------------

Smazáno, log je již OK.

Dobrý den, rád bych se zeptal byla tam nějaká infekce? A mohu vložit log druhého počítače nebo mám založit samostatný topic? Díky.

Infekce prakticky žádná, jen zbytečnosti. Log můžete dát sem.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Haswell at 2017-01-08 17:45:27
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 62 GB (51%) free of 122 GB
Total RAM: 8131 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:45:28, on 8.1.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
D:\Steam\Steam.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\ProgramData\Battle.net\Agent\Agent.5342\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net.exe
C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net Helper.exe
C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net Helper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Haswell.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [uTorrent] "G:\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [EADM] "D:\Origin\Origin.exe" -AutoStart
O4 - Startup: Poslat do aplikace OneNote.lnk = C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.hola.org
O17 - HKLM\System\CCS\Services\Tcpip\..\{677885F4-F7EF-437C-A424-151D8DAEEC4D}: NameServer = 8.8.8.8,8.8.8.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{677885F4-F7EF-437C-A424-151D8DAEEC4D}: NameServer = 8.8.8.8,8.8.8.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{677885F4-F7EF-437C-A424-151D8DAEEC4D}: NameServer = 8.8.8.8,8.8.8.1
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - D:\Origin\OriginWebHelperService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9704 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\Windows\system32\DbxSvc.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"taskhost.exe"
taskeng.exe {132EA474-1E31-4AF3-86D4-63C698BDA5AE}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"D:\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
D:\Steam\bin\cef\cef.win7\steamwebhelper.exe "-cachedir=C:\Users\Haswell\AppData\Local\Steam\htmlcache" "-steampid=2796" "-buildid=1482202200" "-steamid=0" --disable-gpu-compositing --disable-gpu --process-per-tab --disable-spell-checking --disable-out-of-process-pac --disable-smooth-scrolling --enable-direct-write
D:\Steam\bin\cef\cef.win7\steamwebhelper.exe --type=crashpad-handler /prefetch:7 "--database=C:\Users\Haswell\AppData\Local\Chromium\User Data\Crashpad" "--metrics-dir=C:\Users\Haswell\AppData\Local\Chromium\User Data" --annotation=channel= --annotation=plat=Win32 --annotation=prod= --annotation=ver=01.00.00.01-devel --handshake-handle=0x2e8
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"D:\Origin\OriginWebHelperService.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI

"D:\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --disable-smooth-scrolling --enable-pinch --primordial-pipe-token=6EFF0D71457F89C7B58D7DA18BE962D2 --lang=en-US --lang=en-US --log-file="D:\Steam\bin\cef\cef.win7\debug.log" --product-version="Valve Steam Client" --disable-spell-checking --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --service-request-channel-token=6EFF0D71457F89C7B58D7DA18BE962D2 --mojo-platform-channel-handle=1692 /prefetch:1
C:\Windows\system32\wbem\wmiprvse.exe
"C:\ProgramData\Battle.net\Agent\Agent.5342\Agent.exe" --locale=enUS --session=6653031977042964516
\??\C:\Windows\system32\conhost.exe "1003831358-1301271493-1535398463-643703526-10137529661815328174-824576053-972729684
"C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net.exe"
"Battle.net Helper.exe" --type=gpu-process --channel="2552.0.1868459493\1011950992" --no-sandbox --lang=en-US --log-file="C:\Users\Haswell\AppData\Local\Battle.net\Logs\libcef-20170107T093921.181448.log" --log-severity=error --product-version=Battle.net/1.5.2.8180 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,38,46 --gpu-vendor-id=0x10de --gpu-device-id=0x1187 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.7290 --lang=en-US --log-file="C:\Users\Haswell\AppData\Local\Battle.net\Logs\libcef-20170107T093921.181448.log" --log-severity=error --product-version=Battle.net/1.5.2.8180 /prefetch:822062411
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-952708145-334894759-1599224314-58100641923071519-167443812614629247591701344355
"Battle.net Helper.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --log-file="C:\Users\Haswell\AppData\Local\Battle.net\Logs\libcef-20170107T093921.181448.log" --log-severity=error --product-version=Battle.net/1.5.2.8180 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="2552.10.90177414\1040579430" /prefetch:673131151
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Program Files\TightVNC\tvnviewer.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Haswell\Desktop\junk\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Haswell\AppData\Roaming\Mozilla\Firefox\Profiles\xi4h5w5l.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.186 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.186 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-10-30 214216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-10-30 683808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-30 2850608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-10-30 438048]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2016-09-27 1610936]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-10-02 2398776]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-06-15 1767760]
"Malwarebytes TrayApp"=C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2016-12-31 2776528]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=D:\Steam\steam.exe [2016-12-20 2876704]
"uTorrent"=G:\uTorrent\uTorrent.exe [2015-08-23 328568]
"EADM"=D:\Origin\Origin.exe [2016-12-06 3044848]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-12-22 25779624]

C:\Users\Haswell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Poslat do aplikace OneNote.lnk - C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x00000000
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2017-01-08 17:40:34 ----D---- C:\rsit
2017-01-08 17:40:34 ----D---- C:\Program Files\trend micro
2017-01-04 20:38:35 ----SHD---- C:\$RECYCLE.BIN
2017-01-04 20:38:26 ----A---- C:\ComboFix.txt
2017-01-04 20:27:04 ----A---- C:\Windows\zip.exe
2017-01-04 20:27:04 ----A---- C:\Windows\SWSC.exe
2017-01-04 20:27:04 ----A---- C:\Windows\SWREG.exe
2017-01-04 20:27:04 ----A---- C:\Windows\sed.exe
2017-01-04 20:27:04 ----A---- C:\Windows\PEV.exe
2017-01-04 20:27:04 ----A---- C:\Windows\NIRCMD.exe
2017-01-04 20:27:04 ----A---- C:\Windows\MBR.exe
2017-01-04 20:27:04 ----A---- C:\Windows\grep.exe
2017-01-04 20:25:04 ----D---- C:\Qoobox
2017-01-04 20:24:31 ----D---- C:\Windows\erdnt
2017-01-04 20:11:15 ----D---- C:\FRST
2017-01-04 19:56:15 ----D---- C:\AdwCleaner
2017-01-04 14:58:51 ----D---- C:\KVRT_Data
2016-12-31 10:52:58 ----A---- C:\Windows\system32\drivers\MBAMChameleon.sys
2016-12-31 10:52:42 ----A---- C:\Windows\system32\drivers\mwac.sys
2016-12-31 10:52:42 ----A---- C:\Windows\system32\drivers\farflt.sys
2016-12-31 10:52:40 ----A---- C:\Windows\system32\drivers\mbam.sys
2016-12-31 10:52:32 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2016-12-31 10:52:27 ----A---- C:\Windows\system32\drivers\mbae64.sys
2016-12-31 10:52:25 ----D---- C:\Program Files\Malwarebytes
2016-12-27 10:34:31 ----D---- C:\Users\Haswell\AppData\Roaming\NVIDIA
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\drivers\dbx-canary.sys
2016-12-21 19:15:36 ----A---- C:\Windows\system32\DbxSvc.exe
2016-12-14 23:08:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-12-14 23:08:31 ----A---- C:\Windows\system32\mshtml.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2016-12-14 23:08:30 ----A---- C:\Windows\SYSWOW64\bcrypt.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\wintrust.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\winload.exe
2016-12-14 23:08:30 ----A---- C:\Windows\system32\wininet.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\win32k.sys
2016-12-14 23:08:30 ----A---- C:\Windows\system32\usp10.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\user32.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-12-14 23:08:30 ----A---- C:\Windows\system32\msi.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\jscript9.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\ieframe.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\iedkcs32.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\gdi32.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\drivers\cng.sys
2016-12-14 23:08:30 ----A---- C:\Windows\system32\crypt32.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\consent.exe
2016-12-14 23:08:30 ----A---- C:\Windows\system32\clfs.sys
2016-12-14 23:08:30 ----A---- C:\Windows\system32\bcrypt.dll
2016-12-14 23:08:30 ----A---- C:\Windows\system32\bcdedit.exe
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\usp10.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\user32.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-12-14 23:08:29 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\wow64win.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\winsrv.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\webcheck.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\vbscript.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\urlmon.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\TSpkg.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\srcore.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\smss.exe
2016-12-14 23:08:29 ----A---- C:\Windows\system32\schannel.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\rpcrt4.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\occache.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\ntdll.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\nlsbres.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\ncrypt.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\msv1_0.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-14 23:08:29 ----A---- C:\Windows\system32\msrating.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\msihnd.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\msiexec.exe
2016-12-14 23:08:29 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\msfeeds.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\lsasrv.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\KernelBase.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\kernel32.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\kerberos.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\jsproxy.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\jscript9diag.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\jscript.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\inseng.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\ieUnatt.exe
2016-12-14 23:08:29 ----A---- C:\Windows\system32\ieui.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\iesetup.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\iertutil.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\ieapfltr.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\hlink.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\dxtrans.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\dxtmsft.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-12-14 23:08:29 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-12-14 23:08:29 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-12-14 23:08:29 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-12-14 23:08:29 ----A---- C:\Windows\system32\cryptsvc.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\cryptnet.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\certcli.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\authui.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\appinfo.dll
2016-12-14 23:08:29 ----A---- C:\Windows\system32\advapi32.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 23:08:28 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\user.exe
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-12-14 23:08:28 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\wow64cpu.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\wow64.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\wdigest.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\tzres.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\sspisrv.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\sspicli.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\srclient.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\secur32.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\rstrui.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\rpchttp.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\ntvdm64.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\msobjs.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\msimsg.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\msaudite.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\lsass.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\iernonce.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\ie4uinit.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-12-14 23:08:28 ----A---- C:\Windows\system32\drivers\appid.sys
2016-12-14 23:08:28 ----A---- C:\Windows\system32\csrsrv.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\cryptbase.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\credssp.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\conhost.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\auditpol.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\appidsvc.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-12-14 23:08:28 ----A---- C:\Windows\system32\appidapi.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\apisetschema.dll
2016-12-14 23:08:28 ----A---- C:\Windows\system32\adtschema.dll
2016-12-11 19:47:34 ----D---- C:\Program Files\7-Zip

======List of files/folders modified in the last 1 month======

2017-01-08 17:45:27 ----D---- C:\Windows\Temp
2017-01-08 17:42:19 ----D---- C:\Users\Haswell\AppData\Roaming\Origin
2017-01-08 17:42:19 ----D---- C:\ProgramData\Origin
2017-01-08 17:40:34 ----RD---- C:\Program Files
2017-01-08 17:16:54 ----D---- C:\Users\Haswell\AppData\Roaming\TS3Client
2017-01-08 11:39:27 ----D---- C:\Windows\system32\config
2017-01-07 10:39:21 ----D---- C:\Program Files (x86)\Battle.net
2017-01-07 08:59:40 ----D---- C:\Windows\System32
2017-01-07 08:59:40 ----D---- C:\Windows\inf
2017-01-07 08:59:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-01-07 08:12:13 ----D---- C:\Users\Haswell\AppData\Roaming\uTorrent
2017-01-06 17:08:28 ----SHD---- C:\System Volume Information
2017-01-05 15:27:37 ----D---- C:\KMPlayer
2017-01-05 15:03:08 ----D---- C:\Users\Haswell\AppData\Roaming\avidemux
2017-01-04 20:35:48 ----D---- C:\Windows
2017-01-04 20:35:48 ----A---- C:\Windows\system.ini
2017-01-04 20:31:54 ----D---- C:\Windows\SYSWOW64\drivers
2017-01-04 20:31:54 ----D---- C:\Windows\SysWOW64
2017-01-04 20:31:54 ----D---- C:\Windows\AppPatch
2017-01-04 20:31:53 ----D---- C:\Program Files (x86)\Common Files
2017-01-04 20:25:06 ----D---- C:\Windows\system32\drivers
2017-01-04 20:24:26 ----A---- C:\Windows\SWXCACLS.exe
2017-01-04 20:02:10 ----RD---- C:\Program Files (x86)
2017-01-03 13:49:27 ----D---- C:\ProgramData\NVIDIA Corporation
2016-12-31 10:52:25 ----D---- C:\ProgramData\Malwarebytes
2016-12-22 07:04:17 ----D---- C:\Program Files (x86)\Dropbox
2016-12-21 20:25:29 ----D---- C:\Windows\system32\NDF
2016-12-16 23:09:19 ----SHD---- C:\Windows\Installer
2016-12-16 23:04:01 ----D---- C:\Windows\Tasks
2016-12-15 16:28:34 ----D---- C:\Windows\rescache
2016-12-15 15:58:56 ----D---- C:\Windows\Microsoft.NET
2016-12-15 15:58:06 ----RSD---- C:\Windows\assembly
2016-12-15 07:40:59 ----D---- C:\Windows\winsxs
2016-12-15 07:40:12 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-15 07:40:12 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-12-14 23:30:40 ----D---- C:\Windows\SYSWOW64\en-US
2016-12-14 23:30:40 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-12-14 23:30:40 ----D---- C:\Windows\system32\en-US
2016-12-14 23:30:40 ----D---- C:\Windows\system32\cs-CZ
2016-12-14 23:30:40 ----D---- C:\Program Files\Internet Explorer
2016-12-14 23:30:40 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-14 23:30:39 ----D---- C:\Windows\system32\Boot
2016-12-14 23:12:53 ----D---- C:\Windows\system32\MRT
2016-12-14 23:12:00 ----AC---- C:\Windows\system32\MRT.exe
2016-12-14 23:11:08 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-12-14 22:13:53 ----D---- C:\Windows\system32\catroot2
2016-12-13 21:32:36 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-12-13 21:32:34 ----D---- C:\Windows\system32\Macromed
2016-12-13 21:32:33 ----D---- C:\Windows\SYSWOW64\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-08-31 31648]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-08-31 830624]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2016-08-31 56976]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-08-31 116248]
R2 MBAMChameleon;MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [2016-12-31 176064]
R3 e1dexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver D; C:\Windows\system32\DRIVERS\e1d62x64.sys [2013-02-27 496400]
R3 MBAMFarflt;MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [2017-01-07 102856]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2017-01-07 250816]
R3 MBAMWebProtection;MBAMWebProtection; \??\C:\Windows\system32\drivers\mwac.sys [2017-01-08 81696]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-10-02 149968]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-06-15 28216]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-10-02 56384]
S1 VBoxNetAdp;VirtualBox NDIS 6.0 Miniport Service; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [2015-12-16 117768]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 MBAMProtection;MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [2017-01-07 43968]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2016-11-22 3294912]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-09-30 5817256]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2016-12-22 42096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-09-17 1165368]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2013-01-03 183200]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2016-12-31 4317648]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-09-17 1881144]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-09-17 2522680]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-10-02 1364024]
R2 Origin Web Helper Service;Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2016-12-06 2180624]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-08-24 76152]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-09-17 3634232]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-12-20 1467168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-12-14 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2016-12-14 125112]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-20 143144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-28 154440]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13 270936]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-09-30 2271928]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-20 143144]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-28 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-12-14 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-14 172488]
S3 Origin Client Service;Origin Client Service; D:\Origin\OriginClientService.exe [2016-12-06 2119688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2016-11-22 209104]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2016-03-28 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-21 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-12-14 51384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-14 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-14 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2016-12-14 135848]

-----------------EOF-----------------