Logfile of random's system information tool 1.14 (written by random/random)
Run by Krystof at 2017-01-13 23:31:39
Microsoft Windows 8.1 Pro
System drive C: has 185 GB (61%) free of 305 GB
Total RAM: 4094 MB (67% free)
X64
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:31:44, on 13. 1. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal
Running processes:
C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroTray.exe
C:\Program Files\trend micro\Krystof_RSITx64.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~2\IDM\QUICKF~1\PlugIns\IEHelp.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - HKCU\..\Run: [f.lux] "C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Dropbox.lnk = Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10471 bytes
======Enumerating Processes======
C:\WINDOWS\system32\wininit.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\dashost.exe
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\dwm.exe
C:\WINDOWS\system32\taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE"
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNABISWD.EXE !auto LBP6230dw
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
"C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroTray.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\taskeng.exe
"E:\software\RSITx64.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core.job - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA.job - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core.job - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA.job - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\Adobe Flash Player Updater - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\system32\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GarminUpdaterTask - C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Opera scheduled Autoupdate 1449509864 - C:\Program Files (x86)\Opera\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\SafeZone scheduled Autoupdate 1469290103 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs
=========Mozilla firefox=========
ProfilePath - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default
prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.google.com/"
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.194 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.194 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\
cs@dictionaries.addons.mozilla.org
marcoagpinto@mail.telepac.pt
C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\addons.json
Český slovník pro kontrolu pravopisu - dictionary - cs@dictionaries.addons.mozilla.org
Session Manager - extension - {1280606b-2510-4fe0-97ef-9b5a22eafe30}
Greasemonkey - extension - {e4a8a97b-f2ed-450b-b12d-ee082ba24781}
Wikiwand: Wikipedia Modernized - extension - jid1-D7momAzRw417Ag@jetpack
Tab Auto Reload - extension - TabAutoReload@schuzak.jp
British English Dictionary (Marco Pinto) - dictionary - marcoagpinto@mail.telepac.pt
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
DownThemAll! - extension - {DDC359D1-844A-42a7-9AA1-88A850A938A8}
C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions.json
Tab Auto Reload - extension - TabAutoReload@schuzak.jp - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\TabAutoReload@schuzak.jp.xpi
Session Manager - extension - {1280606b-2510-4fe0-97ef-9b5a22eafe30} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
Český slovník pro kontrolu pravopisu - dictionary - cs@dictionaries.addons.mozilla.org - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\cs@dictionaries.addons.mozilla.org
Greasemonkey - extension - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Avast Online Security - extension - wrc@avast.com - C:\Program Files\AVAST Software\Avast\WebRep\FF
Avast SafePrice - extension - sp@avast.com - C:\Program Files\AVAST Software\Avast\SafePrice\FF
DownThemAll! - extension - {DDC359D1-844A-42a7-9AA1-88A850A938A8} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
Wikiwand: Wikipedia Modernized - extension - jid1-D7momAzRw417Ag@jetpack - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\jid1-D7momAzRw417Ag@jetpack.xpi
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Application Update Service Helper - extension - aushelper@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
British English Dictionary (Marco Pinto) - dictionary - marcoagpinto@mail.telepac.pt - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\marcoagpinto@mail.telepac.pt
Zotero - extension - zotero@chnm.gmu.edu - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\zotero@chnm.gmu.edu.xpi
Adobe Acrobat DC - Create PDF - extension - web2pdfextension.15@web2pdf.adobedotcom - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\pluginreg.dat
Plugin - AdobeAAMDetect - 1.0.0.0 - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
Plugin - Adobe Acrobat - 15.23.20053.15062 - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
Plugin - Adobe Acrobat - 15.23.20053.15062 - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll
Plugin - VLC Web Plugin - 2.2.4.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
Plugin - Google Update - 1.3.32.7 - C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll
Plugin - Microsoft Office 2010 - 14.0.4730.1010 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
Plugin - Microsoft Office 2010 - 14.0.4761.1000 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
Plugin - Java(TM) Platform SE 8 U40 - 11.40.2.26 - C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.400.26 - 11.40.2.26 - C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npdeployJava1.dll
Plugin - iTunes Application Detector - 1.0.1.1 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
Plugin - Shockwave for Director - 12.1.9.160 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll
Plugin - Shockwave Flash - 24.0.0.194 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll
Plugin - Google Update - 1.3.30.3 - C:\Users\Krystof\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll
Plugin - Google Talk Plugin - 5.41.3.0 - C:\Users\Krystof\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
Plugin - Google Talk Plugin Video Renderer - 5.41.3.0 - C:\Users\Krystof\AppData\Roaming\Mozilla\plugins\npo1d.dll
=========Google Chrome=========
C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Google Slides 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Web Store 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Google Docs 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Google Drive 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Google Search 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat - Create PDF 15.0.0.0
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension eofcbnmajmjmplflapaojjnihcjkigck 0 Avast SafePrice 12.0.155
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Google Sheets 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Google Docs Offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.6.0
Extension gomekmidlodglbbmalcneegieacbdmki 0 Avast Online Security 12.0.124
Extension immhpnclomdloikkpcefncmfgjbkojmh 1 Emoji Input by EmojiStuff.com 3.0.8
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension nbpagnldghgfoolbancepceaanlmhfmd 1 Hotword triggering 0.0.1.4
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Chrome Web Store Payments 1.0.0.0
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh 1 Google Now 1.2.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5416.905.0.6
Homepage:
default_search_provider.search_url:
C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24 790552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-24 460712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24 664848]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object - C:\PROGRA~2\IDM\QUICKF~1\PlugIns\IEHelp.dll [2007-02-16 457216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-24 172968]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]
"CNAP3 Launcher"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [2012-06-14 228520]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe [2015-04-16 107848]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2016-04-08 1399208]
"Dropbox Update"=C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-16 143144]
"Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [2016-12-23 886352]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2016-07-14 255224]
"f.lux"=C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-11-15 9080768]
"Cisco AnyConnect Secure Mobility Agent for Windows"=C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2012-01-13 527312]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-03-07 335232]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2016-12-23 1870928]
""= []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"Family Tree Builder Update"=C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2016-05-17 14118064]
C:\Users\Krystof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Dropbox.lnk - C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2017-01-09 21:38:57 ----D---- C:\Users\Krystof\AppData\Roaming\Zotero
2017-01-09 21:38:47 ----D---- C:\Program Files (x86)\Zotero Standalone
2017-01-09 19:25:10 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-01-09 19:25:10 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-01-09 19:25:10 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\msiexec.exe
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\consent.exe
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-01-09 19:25:03 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\jscript.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-01-09 19:25:01 ----A---- C:\WINDOWS\system32\win32k.sys
2017-01-09 19:25:01 ----A---- C:\WINDOWS\system32\msctf.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\wininet.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\ole32.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\msi.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\crypt32.dll
2017-01-09 19:24:58 ----A---- C:\WINDOWS\system32\UtcResources.dll
2017-01-09 19:24:58 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-01-09 19:24:57 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\system32\certcli.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\system32\authui.dll
2017-01-09 19:24:55 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-01-09 19:24:54 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\SessEnv.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\wintrust.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\gdi32.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\user32.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\pdh.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\input.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmi.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\shsetup.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\localspl.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\iscsiwmi.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\iscsiexe.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\asycfilt.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\apisetschema.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\iscsidsc.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\xolehlp.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\iscsidsc.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\dab.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-12-18 15:06:59 ----D---- C:\Program Files (x86)\Microsoft Keyboard Layout Creator 1.4
======List of files/folders modified in the last 1 month======
2017-01-13 23:31:43 ----D---- C:\Program Files\trend micro
2017-01-13 23:31:06 ----SHD---- C:\WINDOWS\Installer
2017-01-13 23:31:06 ----D---- C:\WINDOWS\Temp
2017-01-13 23:27:05 ----D---- C:\WINDOWS\Prefetch
2017-01-13 23:00:00 ----D---- C:\WINDOWS\system32\sru
2017-01-13 17:06:22 ----D---- C:\WINDOWS\system32\drivers
2017-01-13 12:34:32 ----D---- C:\WINDOWS\Microsoft.NET
2017-01-12 20:26:16 ----D---- C:\WINDOWS\Inf
2017-01-12 17:59:03 ----D---- C:\Users\Krystof\AppData\Roaming\vlc
2017-01-11 23:40:24 ----D---- C:\Users\Krystof\AppData\Roaming\Dropbox
2017-01-11 15:00:05 ----D---- C:\Users\Krystof\AppData\Roaming\Adobe
2017-01-11 13:50:16 ----D---- C:\WINDOWS\SysWOW64
2017-01-11 12:45:51 ----D---- C:\Users\Krystof\AppData\Roaming\Spotify
2017-01-11 00:23:04 ----D---- C:\Users\Krystof\AppData\Roaming\uTorrent
2017-01-11 00:05:46 ----D---- C:\WINDOWS\system32\Tasks
2017-01-10 22:40:57 ----D---- C:\WINDOWS\SoftwareDistribution
2017-01-10 21:58:16 ----D---- C:\WINDOWS\debug
2017-01-10 21:58:16 ----D---- C:\Windows
2017-01-10 19:06:09 ----HD---- C:\ProgramData
2017-01-10 17:27:25 ----D---- C:\WINDOWS\rescache
2017-01-10 17:13:28 ----SHD---- C:\System Volume Information
2017-01-10 17:04:27 ----D---- C:\WINDOWS\system32\Macromed
2017-01-10 17:04:24 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2017-01-10 17:02:16 ----D---- C:\WINDOWS\system32\config
2017-01-09 21:38:47 ----RD---- C:\Program Files (x86)
2017-01-09 21:26:56 ----D---- C:\WINDOWS\system32\catroot2
2017-01-09 19:50:20 ----D---- C:\WINDOWS\WinSxS
2017-01-09 19:48:07 ----D---- C:\WINDOWS\system32\DriverStore
2017-01-09 19:42:59 ----RD---- C:\WINDOWS\ToastData
2017-01-09 19:42:55 ----D---- C:\Program Files\Internet Explorer
2017-01-09 19:42:55 ----D---- C:\Program Files (x86)\Internet Explorer
2017-01-09 19:42:54 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-01-09 19:42:54 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\wbem
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\migration
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\drivers\en-US
2017-01-09 19:42:52 ----RD---- C:\WINDOWS\System32
2017-01-09 19:42:52 ----D---- C:\WINDOWS\system32\oobe
2017-01-09 19:42:52 ----D---- C:\WINDOWS\system32\en-US
2017-01-09 19:42:46 ----SD---- C:\ProgramData\Microsoft
2017-01-09 19:35:59 ----D---- C:\ProgramData\Microsoft Help
2017-01-09 19:33:20 ----D---- C:\WINDOWS\CbsTemp
2017-01-09 19:28:34 ----D---- C:\WINDOWS\system32\MRT
2017-01-09 19:28:27 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-01-09 15:25:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-31 13:42:29 ----D---- C:\Users\Krystof\AppData\Roaming\Atom
2016-12-28 01:15:44 ----D---- C:\Program Files (x86)\Steam
2016-12-18 15:39:24 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-18 15:39:24 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-12-16 22:25:17 ----D---- C:\WINDOWS\Tasks
File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-09-10 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2009-02-03 75384]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2006-06-14 14192]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2007-02-08 107384]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-09-10 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-09-10 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-09-24 513632]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2016-08-13 71680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-09-10 108816]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-09-10 163416]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-11-16 11922944]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-11-16 359936]
R3 athur;@oem4.inf,%ATHR.Service.DispName%;Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtHDMIVX.sys [2012-06-05 237968]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 acsock;acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [2012-01-13 106408]
S3 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-09-10 37656]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 rt61x64;@oem2.inf,%General.Service.DispName%;RT61 Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr6164.sys [2010-04-08 446304]
S3 ssudmdm;@oem24.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 USBAAPL64;@oem12.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-06-10 54784]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-09-24 121088]
S3 vpnva;@oem6.inf,%vpnva_Desc%;Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64; C:\WINDOWS\system32\DRIVERS\vpnva64.sys [2012-01-13 26536]
S3 WDC_SAM;@oem32.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2015-11-12 26880]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-09-26 2207960]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2012-11-16 238080]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-10 197128]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2016-07-14 100088]
R2 vpnagent;Cisco AnyConnect Secure Mobility Agent; C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2012-01-13 476112]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-09-20 324224]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-08-24 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10 270936]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll"=%SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2015-06-16 238376]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2016-04-08 792592]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05 107848]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-17 172488]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-12-09 1467168]
-----------------EOF-----------------
Přispějete na provoz fóra?