VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu

https://forum.viry.cz:443/viewtopic.php?t=151129

Stránka 1 z 1

Prosím o kontrolu

Napsal: 13 led 2017 23:38
od kherold
Svchost.exe si bere hodně procent CPU, ale nevím, jestli je to přímo problém. Děkuji předem za kontrolu. :)

Logfile of random's system information tool 1.14 (written by random/random)
Run by Krystof at 2017-01-13 23:31:39
Microsoft Windows 8.1 Pro
System drive C: has 185 GB (61%) free of 305 GB
Total RAM: 4094 MB (67% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:31:44, on 13. 1. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroTray.exe
C:\Program Files\trend micro\Krystof_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~2\IDM\QUICKF~1\PlugIns\IEHelp.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - HKCU\..\Run: [f.lux] "C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Dropbox.lnk = Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10471 bytes

======Enumerating Processes======

C:\WINDOWS\system32\wininit.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\dashost.exe
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\dwm.exe
C:\WINDOWS\system32\taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE"
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNABISWD.EXE !auto LBP6230dw
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
"C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroTray.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\taskeng.exe
"E:\software\RSITx64.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core.job - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA.job - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core.job - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA.job - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\Adobe Flash Player Updater - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\system32\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GarminUpdaterTask - C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Opera scheduled Autoupdate 1449509864 - C:\Program Files (x86)\Opera\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\SafeZone scheduled Autoupdate 1469290103 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Mozilla firefox=========

ProfilePath - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.google.com/"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.194 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.194 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\
cs@dictionaries.addons.mozilla.org
marcoagpinto@mail.telepac.pt

C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\addons.json
Český slovník pro kontrolu pravopisu - dictionary - cs@dictionaries.addons.mozilla.org
Session Manager - extension - {1280606b-2510-4fe0-97ef-9b5a22eafe30}
Greasemonkey - extension - {e4a8a97b-f2ed-450b-b12d-ee082ba24781}
Wikiwand: Wikipedia Modernized - extension - jid1-D7momAzRw417Ag@jetpack
Tab Auto Reload - extension - TabAutoReload@schuzak.jp
British English Dictionary (Marco Pinto) - dictionary - marcoagpinto@mail.telepac.pt
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
DownThemAll! - extension - {DDC359D1-844A-42a7-9AA1-88A850A938A8}

C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions.json
Tab Auto Reload - extension - TabAutoReload@schuzak.jp - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\TabAutoReload@schuzak.jp.xpi
Session Manager - extension - {1280606b-2510-4fe0-97ef-9b5a22eafe30} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
Český slovník pro kontrolu pravopisu - dictionary - cs@dictionaries.addons.mozilla.org - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\cs@dictionaries.addons.mozilla.org
Greasemonkey - extension - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Avast Online Security - extension - wrc@avast.com - C:\Program Files\AVAST Software\Avast\WebRep\FF
Avast SafePrice - extension - sp@avast.com - C:\Program Files\AVAST Software\Avast\SafePrice\FF
DownThemAll! - extension - {DDC359D1-844A-42a7-9AA1-88A850A938A8} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
Wikiwand: Wikipedia Modernized - extension - jid1-D7momAzRw417Ag@jetpack - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\jid1-D7momAzRw417Ag@jetpack.xpi
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Application Update Service Helper - extension - aushelper@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
British English Dictionary (Marco Pinto) - dictionary - marcoagpinto@mail.telepac.pt - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\marcoagpinto@mail.telepac.pt
Zotero - extension - zotero@chnm.gmu.edu - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\zotero@chnm.gmu.edu.xpi
Adobe Acrobat DC - Create PDF - extension - web2pdfextension.15@web2pdf.adobedotcom - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn

C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\pluginreg.dat
Plugin - AdobeAAMDetect - 1.0.0.0 - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
Plugin - Adobe Acrobat - 15.23.20053.15062 - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
Plugin - Adobe Acrobat - 15.23.20053.15062 - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll
Plugin - VLC Web Plugin - 2.2.4.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
Plugin - Google Update - 1.3.32.7 - C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll
Plugin - Microsoft Office 2010 - 14.0.4730.1010 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
Plugin - Microsoft Office 2010 - 14.0.4761.1000 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
Plugin - Java(TM) Platform SE 8 U40 - 11.40.2.26 - C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.400.26 - 11.40.2.26 - C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npdeployJava1.dll
Plugin - iTunes Application Detector - 1.0.1.1 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
Plugin - Shockwave for Director - 12.1.9.160 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll
Plugin - Shockwave Flash - 24.0.0.194 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll
Plugin - Google Update - 1.3.30.3 - C:\Users\Krystof\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll
Plugin - Google Talk Plugin - 5.41.3.0 - C:\Users\Krystof\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
Plugin - Google Talk Plugin Video Renderer - 5.41.3.0 - C:\Users\Krystof\AppData\Roaming\Mozilla\plugins\npo1d.dll

=========Google Chrome=========

C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Google Slides 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Web Store 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Google Docs 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Google Drive 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Google Search 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat - Create PDF 15.0.0.0
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension eofcbnmajmjmplflapaojjnihcjkigck 0 Avast SafePrice 12.0.155
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Google Sheets 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Google Docs Offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.6.0
Extension gomekmidlodglbbmalcneegieacbdmki 0 Avast Online Security 12.0.124
Extension immhpnclomdloikkpcefncmfgjbkojmh 1 Emoji Input by EmojiStuff.com 3.0.8
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension nbpagnldghgfoolbancepceaanlmhfmd 1 Hotword triggering 0.0.1.4
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Chrome Web Store Payments 1.0.0.0
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh 1 Google Now 1.2.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5416.905.0.6
Homepage:
default_search_provider.search_url:
C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx


======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24 790552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-24 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24 664848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object - C:\PROGRA~2\IDM\QUICKF~1\PlugIns\IEHelp.dll [2007-02-16 457216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-24 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]
"CNAP3 Launcher"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [2012-06-14 228520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe [2015-04-16 107848]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2016-04-08 1399208]
"Dropbox Update"=C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-16 143144]
"Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [2016-12-23 886352]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2016-07-14 255224]
"f.lux"=C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-11-15 9080768]
"Cisco AnyConnect Secure Mobility Agent for Windows"=C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2012-01-13 527312]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-03-07 335232]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2016-12-23 1870928]
""= []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"Family Tree Builder Update"=C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2016-05-17 14118064]

C:\Users\Krystof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Dropbox.lnk - C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-09 21:38:57 ----D---- C:\Users\Krystof\AppData\Roaming\Zotero
2017-01-09 21:38:47 ----D---- C:\Program Files (x86)\Zotero Standalone
2017-01-09 19:25:10 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-01-09 19:25:10 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-01-09 19:25:10 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\msiexec.exe
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\consent.exe
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-01-09 19:25:03 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\jscript.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-01-09 19:25:01 ----A---- C:\WINDOWS\system32\win32k.sys
2017-01-09 19:25:01 ----A---- C:\WINDOWS\system32\msctf.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\wininet.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\ole32.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\msi.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\crypt32.dll
2017-01-09 19:24:58 ----A---- C:\WINDOWS\system32\UtcResources.dll
2017-01-09 19:24:58 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-01-09 19:24:57 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\system32\certcli.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\system32\authui.dll
2017-01-09 19:24:55 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-01-09 19:24:54 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\SessEnv.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\wintrust.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\gdi32.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\user32.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\pdh.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\input.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmi.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\shsetup.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\localspl.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\iscsiwmi.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\iscsiexe.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\asycfilt.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\apisetschema.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\iscsidsc.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\xolehlp.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\iscsidsc.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\dab.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-12-18 15:06:59 ----D---- C:\Program Files (x86)\Microsoft Keyboard Layout Creator 1.4

======List of files/folders modified in the last 1 month======

2017-01-13 23:31:43 ----D---- C:\Program Files\trend micro
2017-01-13 23:31:06 ----SHD---- C:\WINDOWS\Installer
2017-01-13 23:31:06 ----D---- C:\WINDOWS\Temp
2017-01-13 23:27:05 ----D---- C:\WINDOWS\Prefetch
2017-01-13 23:00:00 ----D---- C:\WINDOWS\system32\sru
2017-01-13 17:06:22 ----D---- C:\WINDOWS\system32\drivers
2017-01-13 12:34:32 ----D---- C:\WINDOWS\Microsoft.NET
2017-01-12 20:26:16 ----D---- C:\WINDOWS\Inf
2017-01-12 17:59:03 ----D---- C:\Users\Krystof\AppData\Roaming\vlc
2017-01-11 23:40:24 ----D---- C:\Users\Krystof\AppData\Roaming\Dropbox
2017-01-11 15:00:05 ----D---- C:\Users\Krystof\AppData\Roaming\Adobe
2017-01-11 13:50:16 ----D---- C:\WINDOWS\SysWOW64
2017-01-11 12:45:51 ----D---- C:\Users\Krystof\AppData\Roaming\Spotify
2017-01-11 00:23:04 ----D---- C:\Users\Krystof\AppData\Roaming\uTorrent
2017-01-11 00:05:46 ----D---- C:\WINDOWS\system32\Tasks
2017-01-10 22:40:57 ----D---- C:\WINDOWS\SoftwareDistribution
2017-01-10 21:58:16 ----D---- C:\WINDOWS\debug
2017-01-10 21:58:16 ----D---- C:\Windows
2017-01-10 19:06:09 ----HD---- C:\ProgramData
2017-01-10 17:27:25 ----D---- C:\WINDOWS\rescache
2017-01-10 17:13:28 ----SHD---- C:\System Volume Information
2017-01-10 17:04:27 ----D---- C:\WINDOWS\system32\Macromed
2017-01-10 17:04:24 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2017-01-10 17:02:16 ----D---- C:\WINDOWS\system32\config
2017-01-09 21:38:47 ----RD---- C:\Program Files (x86)
2017-01-09 21:26:56 ----D---- C:\WINDOWS\system32\catroot2
2017-01-09 19:50:20 ----D---- C:\WINDOWS\WinSxS
2017-01-09 19:48:07 ----D---- C:\WINDOWS\system32\DriverStore
2017-01-09 19:42:59 ----RD---- C:\WINDOWS\ToastData
2017-01-09 19:42:55 ----D---- C:\Program Files\Internet Explorer
2017-01-09 19:42:55 ----D---- C:\Program Files (x86)\Internet Explorer
2017-01-09 19:42:54 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-01-09 19:42:54 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\wbem
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\migration
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\drivers\en-US
2017-01-09 19:42:52 ----RD---- C:\WINDOWS\System32
2017-01-09 19:42:52 ----D---- C:\WINDOWS\system32\oobe
2017-01-09 19:42:52 ----D---- C:\WINDOWS\system32\en-US
2017-01-09 19:42:46 ----SD---- C:\ProgramData\Microsoft
2017-01-09 19:35:59 ----D---- C:\ProgramData\Microsoft Help
2017-01-09 19:33:20 ----D---- C:\WINDOWS\CbsTemp
2017-01-09 19:28:34 ----D---- C:\WINDOWS\system32\MRT
2017-01-09 19:28:27 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-01-09 15:25:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-31 13:42:29 ----D---- C:\Users\Krystof\AppData\Roaming\Atom
2016-12-28 01:15:44 ----D---- C:\Program Files (x86)\Steam
2016-12-18 15:39:24 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-18 15:39:24 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-12-16 22:25:17 ----D---- C:\WINDOWS\Tasks

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-09-10 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2009-02-03 75384]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2006-06-14 14192]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2007-02-08 107384]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-09-10 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-09-10 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-09-24 513632]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2016-08-13 71680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-09-10 108816]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-09-10 163416]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-11-16 11922944]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-11-16 359936]
R3 athur;@oem4.inf,%ATHR.Service.DispName%;Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtHDMIVX.sys [2012-06-05 237968]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 acsock;acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [2012-01-13 106408]
S3 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-09-10 37656]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 rt61x64;@oem2.inf,%General.Service.DispName%;RT61 Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr6164.sys [2010-04-08 446304]
S3 ssudmdm;@oem24.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 USBAAPL64;@oem12.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-06-10 54784]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-09-24 121088]
S3 vpnva;@oem6.inf,%vpnva_Desc%;Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64; C:\WINDOWS\system32\DRIVERS\vpnva64.sys [2012-01-13 26536]
S3 WDC_SAM;@oem32.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2015-11-12 26880]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-09-26 2207960]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2012-11-16 238080]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-10 197128]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2016-07-14 100088]
R2 vpnagent;Cisco AnyConnect Secure Mobility Agent; C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2012-01-13 476112]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-09-20 324224]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-08-24 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10 270936]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll"=%SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2015-06-16 238376]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2016-04-08 792592]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05 107848]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-17 172488]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-12-09 1467168]

-----------------EOF-----------------

Re: Prosím o kontrolu

Napsal: 14 led 2017 12:24
od kherold
Po instalaci aktualizací už svchost, zdá se, nezlobí, tak definitivně jen preventivní kontrolu prosím. :)

Re: Prosím o kontrolu

Napsal: 15 led 2017 12:45
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Prosím o kontrolu

Napsal: 17 led 2017 11:15
od kherold
# AdwCleaner v6.042 - Logfile created 17/01/2017 at 11:06:09
# Updated on 06/01/2017 by Malwarebytes
# Database : 2017-01-17.1 [Server]
# Operating System : Windows 8.1 Pro (X64)
# Username : Krystof - NAOKO
# Running from : C:\Users\Krystof\Desktop\adwcleaner_6.042.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****



***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1227 Bytes] - [30/08/2016 10:17:50]
C:\AdwCleaner\AdwCleaner[C2].txt - [824 Bytes] - [17/01/2017 11:06:09]
C:\AdwCleaner\AdwCleaner[S0].txt - [1230 Bytes] - [30/08/2016 10:15:13]
C:\AdwCleaner\AdwCleaner[S1].txt - [1303 Bytes] - [30/08/2016 10:17:03]
C:\AdwCleaner\AdwCleaner[S2].txt - [1362 Bytes] - [17/01/2017 11:05:59]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1115 Bytes] ##########

Re: Prosím o kontrolu

Napsal: 17 led 2017 17:57
od Rudy
Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA.job
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:services
Bonjour Service

Commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Re: Prosím o kontrolu

Napsal: 18 led 2017 10:51
od kherold
Díky.

Logfile of random's system information tool 1.14 (written by random/random)
Run by Krystof at 2017-01-18 10:49:28
Microsoft Windows 8.1 Pro
System drive C: has 182 GB (60%) free of 305 GB
Total RAM: 4094 MB (65% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:49:33, on 18. 1. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
C:\Program Files\trend micro\Krystof_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~2\IDM\QUICKF~1\PlugIns\IEHelp.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - HKCU\..\Run: [f.lux] "C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Dropbox.lnk = Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\WINDOWS\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10361 bytes

======Enumerating Processes======

C:\WINDOWS\system32\wininit.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\dwm.exe
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\atieclxx.exe
"C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
C:\WINDOWS\system32\taskhostex.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\dashost.exe
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE"
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNABISWD.EXE !auto LBP6230dw
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe" --xmlFilePath="C:\Users\Krystof\AppData\Local\Temp\adobegc_a02424" --workflowInitiator=CSUpdater --xmlFilePath2="C:\Users\Public\Documents\AdobeGC\adobegc_a02424"
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
"C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe -Embedding
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4069756600-3228387922-4177950117-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4069756600-3228387922-4177950117-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 568 572 580 65536 576
"E:\software\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\SZBrowser\launcher.exe" --scheduledautoupdate $(Arg0)

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core.job - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA.job - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\Adobe Flash Player Updater - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\system32\tasks\DropboxUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA - C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GarminUpdaterTask - C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001Core - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskUserS-1-5-21-4069756600-3228387922-4177950117-1001UA - C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Opera scheduled Autoupdate 1449509864 - C:\Program Files (x86)\Opera\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\SafeZone scheduled Autoupdate 1469290103 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask - %systemroot%\system32\sc.exe start osppsvc
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\WINDOWS\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe %windir%\system32\invagent.dll,RunUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Mozilla firefox=========

ProfilePath - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.google.com/"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.194 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.194 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\
cs@dictionaries.addons.mozilla.org
marcoagpinto@mail.telepac.pt

C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\addons.json
Český slovník pro kontrolu pravopisu - dictionary - cs@dictionaries.addons.mozilla.org
Session Manager - extension - {1280606b-2510-4fe0-97ef-9b5a22eafe30}
Greasemonkey - extension - {e4a8a97b-f2ed-450b-b12d-ee082ba24781}
Wikiwand: Wikipedia Modernized - extension - jid1-D7momAzRw417Ag@jetpack
Tab Auto Reload - extension - TabAutoReload@schuzak.jp
British English Dictionary (Marco Pinto) - dictionary - marcoagpinto@mail.telepac.pt
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
DownThemAll! - extension - {DDC359D1-844A-42a7-9AA1-88A850A938A8}

C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions.json
Tab Auto Reload - extension - TabAutoReload@schuzak.jp - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\TabAutoReload@schuzak.jp.xpi
Session Manager - extension - {1280606b-2510-4fe0-97ef-9b5a22eafe30} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
Český slovník pro kontrolu pravopisu - dictionary - cs@dictionaries.addons.mozilla.org - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\cs@dictionaries.addons.mozilla.org
Greasemonkey - extension - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Avast Online Security - extension - wrc@avast.com - C:\Program Files\AVAST Software\Avast\WebRep\FF
Avast SafePrice - extension - sp@avast.com - C:\Program Files\AVAST Software\Avast\SafePrice\FF
DownThemAll! - extension - {DDC359D1-844A-42a7-9AA1-88A850A938A8} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
Wikiwand: Wikipedia Modernized - extension - jid1-D7momAzRw417Ag@jetpack - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\jid1-D7momAzRw417Ag@jetpack.xpi
Adblock Plus - extension - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Application Update Service Helper - extension - aushelper@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
British English Dictionary (Marco Pinto) - dictionary - marcoagpinto@mail.telepac.pt - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\marcoagpinto@mail.telepac.pt
Zotero - extension - zotero@chnm.gmu.edu - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\extensions\zotero@chnm.gmu.edu.xpi
Adobe Acrobat DC - Create PDF - extension - web2pdfextension.15@web2pdf.adobedotcom - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn

C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\rltxgpmi.default\pluginreg.dat
Plugin - AdobeAAMDetect - 1.0.0.0 - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
Plugin - Adobe Acrobat - 15.23.20053.15062 - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
Plugin - Adobe Acrobat - 15.23.20053.15062 - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll
Plugin - VLC Web Plugin - 2.2.4.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
Plugin - Google Update - 1.3.32.7 - C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll
Plugin - Microsoft Office 2010 - 14.0.4730.1010 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
Plugin - Microsoft Office 2010 - 14.0.4761.1000 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
Plugin - Silverlight Plug-In - 5.1.50901.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll
Plugin - Java(TM) Platform SE 8 U40 - 11.40.2.26 - C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.400.26 - 11.40.2.26 - C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npdeployJava1.dll
Plugin - iTunes Application Detector - 1.0.1.1 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
Plugin - Shockwave for Director - 12.1.9.160 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1219160.dll
Plugin - Shockwave Flash - 24.0.0.194 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll
Plugin - Google Update - 1.3.30.3 - C:\Users\Krystof\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll
Plugin - Google Talk Plugin - 5.41.3.0 - C:\Users\Krystof\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
Plugin - Google Talk Plugin Video Renderer - 5.41.3.0 - C:\Users\Krystof\AppData\Roaming\Mozilla\plugins\npo1d.dll

=========Google Chrome=========

C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Google Slides 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Web Store 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Google Docs 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Google Drive 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Google Search 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat - Create PDF 15.0.0.0
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension eofcbnmajmjmplflapaojjnihcjkigck 0 Avast SafePrice 12.0.155
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Google Sheets 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Google Docs Offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.6.0
Extension gomekmidlodglbbmalcneegieacbdmki 0 Avast Online Security 12.0.124
Extension immhpnclomdloikkpcefncmfgjbkojmh 1 Emoji Input by EmojiStuff.com 3.0.8
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension nbpagnldghgfoolbancepceaanlmhfmd 1 Hotword triggering 0.0.1.4
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Chrome Web Store Payments 1.0.0.0
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh 1 Google Now 1.2.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5416.905.0.6
Homepage:
default_search_provider.search_url:
C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx


======Registry dump======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24 790552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-24 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24 664848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
QUICKfind BHO Object - C:\PROGRA~2\IDM\QUICKF~1\PlugIns\IEHelp.dll [2007-02-16 457216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-24 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]
"CNAP3 Launcher"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [2012-06-14 228520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Krystof\AppData\Local\Google\Update\GoogleUpdate.exe [2015-04-16 107848]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2016-04-08 1399208]
"Dropbox Update"=C:\Users\Krystof\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-16 143144]
"Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [2016-12-23 886352]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2016-07-14 255224]
"f.lux"=C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-11-15 9080768]
"Cisco AnyConnect Secure Mobility Agent for Windows"=C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2012-01-13 527312]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2016-12-23 1870928]
""= []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"Family Tree Builder Update"=C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2016-05-17 14118064]

C:\Users\Krystof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Dropbox.lnk - C:\Users\Krystof\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-01-18 10:43:04 ----D---- C:\_OTM
2017-01-14 12:02:07 ----D---- C:\WINDOWS\system32\appraiser
2017-01-14 12:02:07 ----D---- C:\WINDOWS\Migration
2017-01-14 11:47:12 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2017-01-14 11:47:12 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-01-14 11:46:59 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2017-01-14 11:46:59 ----A---- C:\WINDOWS\system32\calc.exe
2017-01-14 11:46:58 ----A---- C:\WINDOWS\SYSWOW64\DeviceSetupStatusProvider.dll
2017-01-14 11:46:58 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2017-01-14 11:46:58 ----A---- C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2017-01-14 11:46:31 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2017-01-14 11:46:30 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2017-01-14 11:46:24 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-01-14 11:46:24 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2017-01-14 11:46:24 ----A---- C:\WINDOWS\system32\centel.dll
2017-01-14 11:46:24 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-01-14 11:46:23 ----A---- C:\WINDOWS\system32\pcasvc.dll
2017-01-14 11:46:23 ----A---- C:\WINDOWS\system32\invagent.dll
2017-01-14 11:46:23 ----A---- C:\WINDOWS\system32\devinv.dll
2017-01-14 11:46:23 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-01-14 11:46:23 ----A---- C:\WINDOWS\system32\aepic.dll
2017-01-14 11:46:23 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-01-14 11:46:01 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2017-01-14 11:46:01 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2017-01-14 11:45:53 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2017-01-14 11:45:47 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-01-14 11:45:47 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-01-14 11:45:35 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-01-14 11:45:34 ----A---- C:\WINDOWS\system32\d2d1.dll
2017-01-14 11:45:31 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2017-01-14 11:45:26 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2017-01-14 11:44:50 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-01-14 11:44:50 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-14 11:44:43 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2017-01-14 11:44:43 ----A---- C:\WINDOWS\system32\untfs.dll
2017-01-14 11:44:29 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-01-14 11:44:28 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-01-14 11:44:27 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2017-01-14 11:44:27 ----A---- C:\WINDOWS\system32\photowiz.dll
2017-01-14 11:44:26 ----A---- C:\WINDOWS\system32\VSSVC.exe
2017-01-14 11:44:18 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2017-01-14 11:44:18 ----A---- C:\WINDOWS\system32\tdh.dll
2017-01-14 11:44:05 ----A---- C:\WINDOWS\system32\AuthHost.exe
2017-01-14 11:44:04 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2017-01-14 11:43:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-01-14 11:43:42 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-01-14 11:43:39 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2017-01-14 11:42:56 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2017-01-14 11:42:55 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2017-01-14 11:42:55 ----A---- C:\WINDOWS\system32\rsaenh.dll
2017-01-14 11:42:16 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-01-14 11:42:15 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2017-01-14 11:42:15 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-01-14 11:42:15 ----A---- C:\WINDOWS\system32\dbghelp.dll
2017-01-14 11:42:14 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2017-01-14 11:42:14 ----A---- C:\WINDOWS\system32\SRH.dll
2017-01-14 11:41:54 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2017-01-14 11:41:54 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2017-01-14 11:41:53 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-01-14 11:41:53 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2017-01-14 11:41:53 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys
2017-01-14 11:41:53 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2017-01-14 11:41:53 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2017-01-14 11:41:53 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2017-01-14 11:41:52 ----A---- C:\WINDOWS\SYSWOW64\rgb9rast.dll
2017-01-14 11:41:33 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2017-01-14 11:41:33 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2017-01-14 11:41:33 ----A---- C:\WINDOWS\system32\wscsvc.dll
2017-01-14 11:41:33 ----A---- C:\WINDOWS\system32\wscapi.dll
2017-01-14 11:41:33 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2017-01-14 11:41:33 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2017-01-14 11:41:15 ----A---- C:\WINDOWS\system32\drivers\disk.sys
2017-01-14 11:41:08 ----A---- C:\WINDOWS\system32\drivers\vpcivsp.sys
2017-01-14 11:41:08 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2017-01-14 11:40:55 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2017-01-14 11:40:55 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-01-14 11:40:48 ----A---- C:\WINDOWS\SYSWOW64\dsparse.dll
2017-01-14 11:40:48 ----A---- C:\WINDOWS\system32\dsparse.dll
2017-01-14 11:40:19 ----A---- C:\WINDOWS\SYSWOW64\mfc42u.dll
2017-01-14 11:40:19 ----A---- C:\WINDOWS\SYSWOW64\mfc42.dll
2017-01-14 11:40:19 ----A---- C:\WINDOWS\system32\mfc42u.dll
2017-01-14 11:40:19 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2017-01-14 11:40:19 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-14 11:40:18 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-01-14 11:40:18 ----A---- C:\WINDOWS\system32\mfc42.dll
2017-01-14 11:39:58 ----A---- C:\WINDOWS\SYSWOW64\dhcpsapi.dll
2017-01-14 11:39:58 ----A---- C:\WINDOWS\system32\dhcpsapi.dll
2017-01-14 11:39:57 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2017-01-14 11:39:55 ----A---- C:\WINDOWS\system32\lockscreencn.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-01-14 11:39:48 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-01-14 11:39:45 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2017-01-14 11:39:45 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-01-14 11:39:33 ----A---- C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe
2017-01-14 11:39:19 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2017-01-14 11:39:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-14 11:39:19 ----A---- C:\WINDOWS\system32\WSShared.dll
2017-01-14 11:39:19 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-14 11:39:17 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2017-01-14 11:39:17 ----A---- C:\WINDOWS\system32\shacct.dll
2017-01-14 11:39:17 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2017-01-14 11:38:27 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2017-01-14 11:38:27 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2017-01-14 11:38:27 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2017-01-14 11:38:27 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2017-01-14 11:38:13 ----A---- C:\WINDOWS\system32\SystemSettingsDatabase.dll
2017-01-14 11:38:13 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2017-01-14 11:38:13 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-01-14 11:38:13 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-01-14 11:38:13 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2017-01-14 11:37:56 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2017-01-14 11:37:56 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2017-01-14 11:37:56 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2017-01-14 11:37:56 ----A---- C:\WINDOWS\system32\authz.dll
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\winusb.sys
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2017-01-14 11:37:22 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2017-01-14 11:37:21 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2017-01-14 11:37:21 ----A---- C:\WINDOWS\system32\rdpcore.dll
2017-01-14 11:37:14 ----A---- C:\WINDOWS\system32\profsvc.dll
2017-01-14 11:36:50 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2017-01-14 11:36:49 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2017-01-14 11:36:23 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2017-01-14 11:36:23 ----A---- C:\WINDOWS\system32\netcfgx.dll
2017-01-14 11:36:23 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-01-14 11:36:09 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2017-01-14 11:36:09 ----A---- C:\WINDOWS\system32\fhcpl.dll
2017-01-14 11:36:09 ----A---- C:\WINDOWS\system32\eapphost.dll
2017-01-14 11:36:09 ----A---- C:\WINDOWS\system32\eappcfg.dll
2017-01-14 11:36:08 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2017-01-14 11:36:08 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2017-01-14 11:36:08 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2017-01-14 11:36:08 ----A---- C:\WINDOWS\system32\eappgnui.dll
2017-01-14 11:36:08 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2017-01-14 11:36:03 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-01-14 11:36:03 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-01-14 11:35:48 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2017-01-14 11:35:45 ----A---- C:\WINDOWS\system32\webio.dll
2017-01-14 11:35:44 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-01-14 11:35:41 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\system32\tquery.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-01-14 11:35:41 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-01-14 11:35:41 ----A---- C:\WINDOWS\system32\mssvp.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-01-14 11:35:41 ----A---- C:\WINDOWS\system32\mssph.dll
2017-01-14 11:35:40 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-01-14 11:35:40 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2017-01-14 11:35:40 ----A---- C:\WINDOWS\system32\mssphtb.dll
2017-01-14 11:35:25 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2017-01-14 11:34:54 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2017-01-14 11:34:54 ----A---- C:\WINDOWS\system32\wininit.exe
2017-01-14 11:34:54 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-01-14 11:34:46 ----A---- C:\WINDOWS\system32\msftedit.dll
2017-01-14 11:34:45 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2017-01-14 11:34:30 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2017-01-14 11:34:30 ----A---- C:\WINDOWS\system32\wpdshext.dll
2017-01-14 11:34:30 ----A---- C:\WINDOWS\system32\msra.exe
2017-01-14 11:34:17 ----A---- C:\WINDOWS\system32\winlogon.exe
2017-01-14 11:34:16 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2017-01-14 11:34:16 ----A---- C:\WINDOWS\system32\NcdAutoSetup.dll
2017-01-14 11:21:43 ----D---- C:\Program Files\Microsoft Silverlight
2017-01-14 11:21:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2017-01-09 21:38:57 ----D---- C:\Users\Krystof\AppData\Roaming\Zotero
2017-01-09 21:38:47 ----D---- C:\Program Files (x86)\Zotero Standalone
2017-01-09 19:25:10 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-01-09 19:25:10 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-01-09 19:25:10 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-01-09 19:25:09 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-01-09 19:25:08 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-01-09 19:25:07 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-01-09 19:25:06 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\msiexec.exe
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2017-01-09 19:25:05 ----A---- C:\WINDOWS\system32\consent.exe
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2017-01-09 19:25:04 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-01-09 19:25:03 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\jscript.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-01-09 19:25:03 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-01-09 19:25:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-01-09 19:25:01 ----A---- C:\WINDOWS\system32\win32k.sys
2017-01-09 19:25:01 ----A---- C:\WINDOWS\system32\msctf.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\wininet.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\ole32.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\msi.dll
2017-01-09 19:25:00 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-01-09 19:24:59 ----A---- C:\WINDOWS\system32\crypt32.dll
2017-01-09 19:24:58 ----A---- C:\WINDOWS\system32\UtcResources.dll
2017-01-09 19:24:58 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-01-09 19:24:57 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\system32\certcli.dll
2017-01-09 19:24:56 ----A---- C:\WINDOWS\system32\authui.dll
2017-01-09 19:24:55 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-01-09 19:24:54 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\SessEnv.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-01-09 19:24:54 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\wintrust.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\gdi32.dll
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-01-09 19:24:53 ----A---- C:\WINDOWS\system32\drivers\cmimcext.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\user32.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\pdh.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\input.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\drivers\bowser.sys
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-01-09 19:24:52 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmi.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\shsetup.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\localspl.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\iscsiwmi.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\iscsiexe.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\asycfilt.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\apisetschema.dll
2017-01-09 19:24:51 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\iscsidsc.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\xolehlp.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\iscsidsc.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\dab.dll
2017-01-09 19:24:50 ----A---- C:\WINDOWS\system32\atmlib.dll

======List of files/folders modified in the last 1 month======

2017-01-18 10:49:32 ----D---- C:\Program Files\trend micro
2017-01-18 10:48:48 ----D---- C:\Users\Krystof\AppData\Roaming\uTorrent
2017-01-18 10:48:22 ----D---- C:\Windows
2017-01-18 10:48:21 ----D---- C:\WINDOWS\Temp
2017-01-18 10:43:15 ----D---- C:\WINDOWS\Prefetch
2017-01-18 10:43:04 ----D---- C:\WINDOWS\Tasks
2017-01-18 10:41:32 ----D---- C:\Users\Krystof\AppData\Roaming\vlc
2017-01-17 23:00:00 ----D---- C:\WINDOWS\system32\sru
2017-01-17 20:49:25 ----HD---- C:\ProgramData
2017-01-17 11:34:36 ----D---- C:\WINDOWS\system32\config
2017-01-17 11:29:11 ----D---- C:\WINDOWS\Microsoft.NET
2017-01-17 11:06:09 ----D---- C:\AdwCleaner
2017-01-17 10:57:18 ----D---- C:\WINDOWS\system32\drivers
2017-01-17 10:56:37 ----D---- C:\WINDOWS\SoftwareDistribution
2017-01-16 18:18:31 ----D---- C:\WINDOWS\Inf
2017-01-16 18:18:20 ----D---- C:\WINDOWS\debug
2017-01-15 10:31:30 ----D---- C:\WINDOWS\AppCompat
2017-01-15 00:27:58 ----D---- C:\WINDOWS\rescache
2017-01-15 00:21:19 ----RSD---- C:\WINDOWS\assembly
2017-01-14 12:11:04 ----RD---- C:\WINDOWS\System32
2017-01-14 12:11:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-14 12:08:20 ----D---- C:\WINDOWS\WinSxS
2017-01-14 12:07:15 ----D---- C:\WINDOWS\system32\DriverStore
2017-01-14 12:02:11 ----D---- C:\WINDOWS\SysWOW64
2017-01-14 12:02:07 ----SD---- C:\WINDOWS\system32\CompatTel
2017-01-14 12:02:07 ----D---- C:\WINDOWS\system32\wbem
2017-01-14 12:02:07 ----D---- C:\WINDOWS\apppatch
2017-01-14 12:02:06 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-01-14 12:02:06 ----D---- C:\WINDOWS\system32\en-US
2017-01-14 12:02:05 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-01-14 12:02:05 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2017-01-14 12:02:04 ----RSD---- C:\WINDOWS\Fonts
2017-01-14 12:02:03 ----D---- C:\WINDOWS\system32\Boot
2017-01-14 12:02:02 ----D---- C:\WINDOWS\SYSWOW64\wbem
2017-01-14 12:02:00 ----D---- C:\WINDOWS\WinStore
2017-01-14 11:57:03 ----D---- C:\WINDOWS\CbsTemp
2017-01-14 11:48:58 ----RD---- C:\Program Files
2017-01-14 11:48:58 ----D---- C:\WINDOWS\ShellNew
2017-01-14 11:45:09 ----D---- C:\WINDOWS\system32\catroot2
2017-01-14 11:23:44 ----SHD---- C:\WINDOWS\Installer
2017-01-14 11:23:33 ----D---- C:\ProgramData\Microsoft Help
2017-01-14 11:23:05 ----SD---- C:\ProgramData\Microsoft
2017-01-14 11:21:43 ----RD---- C:\Program Files (x86)
2017-01-14 11:09:53 ----D---- C:\WINDOWS\system32\MRT
2017-01-14 11:05:51 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-01-14 11:03:29 ----SHD---- C:\System Volume Information
2017-01-11 23:40:24 ----D---- C:\Users\Krystof\AppData\Roaming\Dropbox
2017-01-11 15:00:05 ----D---- C:\Users\Krystof\AppData\Roaming\Adobe
2017-01-11 12:45:51 ----D---- C:\Users\Krystof\AppData\Roaming\Spotify
2017-01-11 00:05:46 ----D---- C:\WINDOWS\system32\Tasks
2017-01-10 17:04:27 ----D---- C:\WINDOWS\system32\Macromed
2017-01-10 17:04:24 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2017-01-09 19:42:59 ----RD---- C:\WINDOWS\ToastData
2017-01-09 19:42:55 ----D---- C:\Program Files\Internet Explorer
2017-01-09 19:42:55 ----D---- C:\Program Files (x86)\Internet Explorer
2017-01-09 19:42:54 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\migration
2017-01-09 19:42:53 ----D---- C:\WINDOWS\system32\drivers\en-US
2017-01-09 19:42:52 ----D---- C:\WINDOWS\system32\oobe
2016-12-31 13:42:29 ----D---- C:\Users\Krystof\AppData\Roaming\Atom
2016-12-28 01:15:44 ----D---- C:\Program Files (x86)\Steam
2016-12-22 23:42:43 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-09-10 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2009-02-03 75384]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2006-06-14 14192]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2007-02-08 107384]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-09-10 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-09-10 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-09-24 513632]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2016-08-13 71680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-09-10 108816]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-09-10 163416]
R2 speedfan;speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-11-16 11922944]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-11-16 359936]
R3 athur;@oem4.inf,%ATHR.Service.DispName%;Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtHDMIVX.sys [2012-06-05 237968]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 acsock;acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [2012-01-13 106408]
S3 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-09-10 37656]
S3 dg_ssudbus;@oem23.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 rt61x64;@oem2.inf,%General.Service.DispName%;RT61 Extensible Wireless Driver; C:\WINDOWS\system32\DRIVERS\netr6164.sys [2010-04-08 446304]
S3 ssudmdm;@oem24.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 USBAAPL64;@oem12.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-06-10 54784]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-09-24 121088]
S3 vpnva;@oem6.inf,%vpnva_Desc%;Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64; C:\WINDOWS\system32\DRIVERS\vpnva64.sys [2012-01-13 26536]
S3 WDC_SAM;@oem32.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2015-11-12 26880]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-09-26 2207960]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2012-11-16 238080]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-10 197128]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2016-07-14 100088]
R2 vpnagent;Cisco AnyConnect Secure Mobility Agent; C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2012-01-13 476112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-09-20 324224]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-08-24 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10 270936]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll"=%SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\WINDOWS\syswow64\EasyAntiCheat.exe [2015-06-16 238376]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2016-04-08 792592]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05 107848]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-17 172488]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-12-09 1467168]

-----------------EOF-----------------

Re: Prosím o kontrolu

Napsal: 18 led 2017 18:34
od Rudy
OK. Nastala nějaká změna?

Re: Prosím o kontrolu

Napsal: 18 led 2017 19:04
od kherold
CPU se zdá v klidu, díky moc. :)

Re: Prosím o kontrolu

Napsal: 18 led 2017 19:57
od Rudy
Nemáte zač! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz