VIRY.CZ

Zdravím, prosím o kontrolu logu, ntb je hodně zasekaný občas nereaguje...
Zde přikládám RSIT log, díky

Logfile of random's system information tool 1.16 (written by random/random)
Run by Nikola at 2017-04-13 14:21:45
Microsoft Windows 10 Home
System drive C: has 51 GB (11%) free of 460 GB
Total RAM: 3982 MB (39% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:22:23, on 13.04.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0953)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
C:\Program Files\trend micro\Nikola_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE13DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.bing.com?pc=HPNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Nikola\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: $McRebootA5E6DEAA56$.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: SafeKey Fill Forms - file://C:\Users\Nikola\AppData\LocalLow\SafeKey\context.html?cmd=fillforms
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12185 bytes

====== Enumerating Processes ======

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\WLANExt.exe 1672508590480
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\iPod\bin\iPodService.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\dwm.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\taskhostw.exe
"C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxEM.exe
C:\WINDOWS\system32\igfxHK.exe
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /ANDREA_BF_BYPASS
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe"
C:\Program Files\CCleaner\CCleaner64.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\WINDOWS\system32\rundll32.exe" -localserver 22d8c27b-47a1-48d1-ad08-7da7abd79617
C:\Windows\System32\InstallAgent.exe -Embedding
C:\WINDOWS\system32\compattelrunner.exe
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun -cv:LRmzQUTfTUqRNVjk.1
C:\Program Files\Windows Defender\MpCmdRun.exe
C:\Windows\System32\InstallAgentUserBroker.exe -Embedding
"C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe" -Embedding
C:\WINDOWS\System32\fontdrvhost.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:11412 CREDAT:75027 /prefetch:2
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:11412 CREDAT:206084 /prefetch:2
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1051_none_7f2bf7ea21d201b2\TiWorker.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x758
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe26_ Global\UsGthrCtrlFltPipeMssGthrPipe26 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 640 644 652 8192 648
"C:\Users\Nikola\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

====== Scheduled tasks folder ======

C:\WINDOWS\tasks\HPCeeScheduleForNikola.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForNikola (null)
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\HPCeeScheduleForNikola - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForNikola (null)
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task - C:\Users\Verča\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\Start OPBHOBroker - "C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe"
C:\WINDOWS\system32\tasks\Start OPBHOBrokerDesktop - "C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe"
C:\WINDOWS\system32\tasks\Start SimplePass - "C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
C:\WINDOWS\system32\tasks\Synaptics TouchPad Enhancements - "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{301E95F6-D818-4FA3-92E8-CD54925A1BE7} - C:\Windows\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{60E425B9-AEEC-4FE8-A41C-320D7F90D4CE} - C:\Windows\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{ECF285A6-AFDF-45DA-8D35-AB5F2519358A} - C:\Windows\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\YCMServiceAgent - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\WINDOWS\system32\tasks\{0AA7030C-92D3-485B-AEB7-ACB8928C140F} - C:\Windows\system32\pcalua.exe -a "C:\Users\Nikola\Desktop\The Sims 2\Sims2_uninst.exe" -d "C:\Users\Nikola\Desktop\The Sims 2"
C:\WINDOWS\system32\tasks\{A02F6D19-5DF3-4BEF-872B-7413F13DF38A} - C:\Windows\system32\pcalua.exe -a "C:\Users\Nikola\Desktop\The Sims 2\setup.exe" -d "C:\Users\Nikola\Desktop\The Sims 2"
C:\WINDOWS\system32\tasks\{ABAB2064-A4EB-4B11-A8B5-A3D491610FC2} - C:\Windows\system32\pcalua.exe -a "C:\Users\Nikola\Desktop\The Sims 2\DirectX\dxsetup.exe" -d "C:\Users\Nikola\Desktop\The Sims 2\DirectX"
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - C:\Program Files\Windows Defender\\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - C:\Program Files\Windows Defender\\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\Program Files\Windows Defender\\MpCmdRun.exe Scan -ScheduleJob
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - C:\Program Files\Windows Defender\\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval - C:\WINDOWS\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemovalTools\MRT_HB - C:\WINDOWS\system32\MRT.exe /EHB /Q
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\Lpksetup - C:\Windows\System32\lpksetup.exe -v
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\Mcbuilder - C:\Windows\System32\mcbuilder.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\WINDOWS\system32\tasks\Microsoft\Office\Office Automatic Updates - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe /update SCHEDULEDTASK displaylevel=False
C:\WINDOWS\system32\tasks\Microsoft\Office\Office ClickToRun Service Monitor - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe /WatchService
C:\WINDOWS\system32\tasks\Microsoft\Office\Office Subscription Maintenance - C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe
C:\WINDOWS\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe scan upload mininterval:2880
C:\WINDOWS\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe scan upload
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Support Assistant\Product Configurator - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport
C:\WINDOWS\system32\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA
C:\WINDOWS\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs
C:\WINDOWS\system32\tasks\Apple\AppleSoftwareUpdate - C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe -task

=========Google Chrome=========

C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aaaaadgepjkdffhjbkfjgnnffnfcffbg 0 Search App by Ask 124.15
Extension aaaaaejaghnbcjilindpkgmcmdflpgjf 0 Search Extension by Ask 31.12
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension bgjpfhpjcgdppjbgnpnjllokbmcdllig 1 Seznam Lištička - Email 1.4.2
Extension blmojkbhnkkphngknkmgccmlenfaelkd 1 Seznam Lištička - Slovník 1.4.6
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.13.2
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Vyhledávání Google 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg Settings 0.2
Extension fcfenmboojpjinhpgggodefccipikbpd 2 MSN Homepage & Bing Search Engine 0.0.0.6
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 0 Dokumenty Google offline 1.4
Extension iaijgphfkdcogjlaolalgdmpnkipkdbl 1 AllTabsLinks 0.5
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension lifbcibllhkdhoafpjfnlhfpfgnpldfl 2 Skype 8.5.0.9167
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.2
Extension olfeabkoenfaoljndfecamgilllcpiak 1 Seznam Lištička - Rychlá volba 1.8.7
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh Google Now 1.2.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5717.116.0.4
Homepage:
default_search_provider.search_url:
C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaaaejaghnbcjilindpkgmcmdflpgjf]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTer ... c=CPNTDFJS
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D7852E99-6CDE-47F8-A598-F0F788B27448}]
"URL"=http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTer ... c=CPNTDFJS
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{D7852E99-6CDE-47F8-A598-F0F788B27448}]
"URL"=http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-03-06 213704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-03-06 3002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21 440712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-03-06 150728]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-03-06 2032432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21 416320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
SimpleAdblock Class - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll [2010-03-09 699904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-11-18 8725248]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-11-18 1407744]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2017-01-19 176440]
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2016-09-07 631808]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-10-05 4264536]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"cz.seznam.software.autoupdate"=C:\Users\Nikola\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-12-06 9288408]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-03-14 27545048]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [2015-09-03 657424]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
$McRebootA5E6DEAA56$.lnk -

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"SafeModeBlockNonAdmins"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath" = %SystemRoot%\inf\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-04-13 14:21:54 ----D---- C:\Program Files\trend micro
2017-04-13 14:21:44 ----D---- C:\rsit
2017-04-03 20:45:51 ----A---- C:\WINDOWS\system32\drivers\aswEF27.tmp
2017-04-03 20:45:51 ----A---- C:\WINDOWS\system32\drivers\aswEE99.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswEE79.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswEE59.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswEE29.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswEE09.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswED4C.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswEC90.tmp
2017-04-03 20:45:50 ----A---- C:\WINDOWS\system32\drivers\aswEC31.tmp
2017-04-03 20:45:49 ----A---- C:\WINDOWS\system32\drivers\aswE9BF.tmp
2017-04-03 20:45:49 ----A---- C:\WINDOWS\system32\drivers\aswE895.tmp
2017-04-03 20:45:49 ----A---- C:\WINDOWS\system32\drivers\aswE79A.tmp
2017-04-03 20:45:48 ----A---- C:\WINDOWS\system32\drivers\aswE632.tmp
2017-03-18 01:29:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-03-18 01:29:26 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-03-18 01:29:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-03-18 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-03-18 01:29:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-03-18 01:29:17 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-03-18 01:29:16 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-03-18 01:29:15 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-03-18 01:29:15 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-03-18 01:29:14 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-03-18 01:29:10 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-03-18 01:29:09 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-03-18 01:29:07 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-03-18 01:29:06 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-03-18 01:29:05 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2017-03-18 01:29:05 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-03-18 01:29:04 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2017-03-18 01:29:04 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-03-18 01:29:03 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-03-18 01:29:03 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2017-03-18 01:29:02 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2017-03-18 01:29:02 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-03-18 01:29:01 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2017-03-18 01:29:01 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-03-18 01:29:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-03-18 01:29:00 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-03-18 01:29:00 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2017-03-18 01:29:00 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2017-03-18 01:28:59 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-03-18 01:28:58 ----A---- C:\WINDOWS\SYSWOW64\wsp_health.dll
2017-03-18 01:28:58 ----A---- C:\WINDOWS\SYSWOW64\wsp_fs.dll
2017-03-18 01:28:58 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-03-18 01:28:58 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2017-03-18 01:28:57 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2017-03-18 01:28:57 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2017-03-18 01:28:56 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-03-18 01:28:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-03-18 01:28:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-03-18 01:28:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-03-18 01:28:55 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-03-18 01:28:55 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2017-03-18 01:28:54 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-03-18 01:28:54 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-03-18 01:28:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2017-03-18 01:28:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2017-03-18 01:28:53 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2017-03-18 01:28:53 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-03-18 01:28:52 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2017-03-18 01:28:51 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-03-18 01:28:51 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-03-18 01:28:51 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-03-18 01:28:51 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2017-03-18 01:28:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2017-03-18 01:28:50 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2017-03-18 01:28:50 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2017-03-18 01:28:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2017-03-18 01:28:49 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2017-03-18 01:28:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-03-18 01:28:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2017-03-18 01:28:47 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2017-03-18 01:28:47 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2017-03-18 01:28:47 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2017-03-18 01:28:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2017-03-18 01:28:46 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-03-18 01:28:46 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2017-03-18 01:28:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-03-18 01:28:45 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-03-18 01:28:45 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-03-18 01:28:44 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-03-18 01:28:44 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-03-18 01:28:43 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2017-03-18 01:28:43 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-03-18 01:28:43 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-03-18 01:28:42 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2017-03-18 01:28:42 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-03-18 01:28:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-03-18 01:28:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-03-18 01:28:41 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2017-03-18 01:28:41 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2017-03-18 01:28:41 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2017-03-18 01:28:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2017-03-18 01:28:40 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-03-18 01:28:40 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2017-03-18 01:28:40 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2017-03-18 01:28:39 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2017-03-18 01:28:39 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2017-03-18 01:28:39 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2017-03-18 01:28:39 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-03-18 01:28:39 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-03-18 01:28:38 ----A---- C:\WINDOWS\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2017-03-18 01:28:38 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2017-03-18 01:28:38 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-03-18 01:28:38 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2017-03-18 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2017-03-18 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-03-18 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2017-03-18 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2017-03-18 01:28:37 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-03-18 01:28:36 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2017-03-18 01:28:36 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-03-18 01:28:36 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2017-03-18 01:28:35 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2017-03-18 01:28:35 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2017-03-18 01:28:35 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-03-18 01:28:35 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2017-03-18 01:28:35 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2017-03-18 01:28:34 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2017-03-18 01:28:34 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2017-03-18 01:28:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2017-03-18 01:28:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-03-18 01:28:33 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2017-03-18 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2017-03-18 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\PCPTpm12.dll
2017-03-18 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2017-03-18 01:28:32 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2017-03-18 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2017-03-18 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Perception.dll
2017-03-18 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-03-18 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2017-03-18 01:28:31 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2017-03-18 01:28:30 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-03-18 01:28:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2017-03-18 01:28:30 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2017-03-18 01:28:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2017-03-18 01:28:29 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2017-03-18 01:28:29 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2017-03-18 01:28:29 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2017-03-18 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2017-03-18 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-03-18 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-03-18 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-03-18 01:28:28 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2017-03-18 01:28:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2017-03-18 01:28:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-03-18 01:28:27 ----A---- C:\WINDOWS\SYSWOW64\MiracastReceiver.dll
2017-03-18 01:28:27 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2017-03-18 01:28:26 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2017-03-18 01:28:26 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2017-03-18 01:28:26 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2017-03-18 01:28:26 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2017-03-18 01:28:26 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-03-18 01:28:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2017-03-18 01:28:25 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2017-03-18 01:28:25 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-03-18 01:28:25 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2017-03-18 01:28:24 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2017-03-18 01:28:24 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2017-03-18 01:28:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Picker.dll
2017-03-18 01:28:23 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2017-03-18 01:28:23 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2017-03-18 01:28:23 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2017-03-18 01:28:23 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2017-03-18 01:28:22 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-03-18 01:28:22 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2017-03-18 01:28:22 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2017-03-18 01:28:22 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-03-18 01:28:21 ----A---- C:\WINDOWS\SYSWOW64\wsp_sr.dll
2017-03-18 01:28:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2017-03-18 01:28:21 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-03-18 01:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2017-03-18 01:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2017-03-18 01:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2017-03-18 01:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.LowLevel.dll
2017-03-18 01:28:20 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2017-03-18 01:28:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-03-18 01:28:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2017-03-18 01:28:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-03-18 01:28:19 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2017-03-18 01:28:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-03-18 01:28:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-03-18 01:28:18 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2017-03-18 01:28:18 ----A---- C:\WINDOWS\SYSWOW64\MCCSEngineShared.dll
2017-03-18 01:28:18 ----A---- C:\WINDOWS\SYSWOW64\imapi2fs.dll
2017-03-18 01:28:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-03-18 01:28:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-03-18 01:28:17 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2017-03-18 01:28:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-03-18 01:28:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.Input.dll
2017-03-18 01:28:16 ----A---- C:\WINDOWS\SYSWOW64\icm32.dll
2017-03-18 01:28:16 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2017-03-18 01:28:15 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2017-03-18 01:28:15 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2017-03-18 01:28:15 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-03-18 01:28:15 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-03-18 01:28:14 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2017-03-18 01:28:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2017-03-18 01:28:14 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2017-03-18 01:28:14 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2017-03-18 01:28:14 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2017-03-18 01:28:13 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2017-03-18 01:28:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFi.dll
2017-03-18 01:28:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-03-18 01:28:09 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2017-03-18 01:28:09 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-03-18 01:28:09 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2017-03-18 01:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-03-18 01:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-03-18 01:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-03-18 01:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2017-03-18 01:28:07 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2017-03-18 01:28:07 ----A---- C:\WINDOWS\SYSWOW64\PlayToReceiver.dll
2017-03-18 01:28:07 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-03-18 01:28:06 ----A---- C:\WINDOWS\SYSWOW64\Pimstore.dll
2017-03-18 01:28:06 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2017-03-18 01:28:06 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2017-03-18 01:28:05 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2017-03-18 01:28:05 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2017-03-18 01:28:05 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-03-18 01:28:04 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2017-03-18 01:28:04 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2017-03-18 01:28:04 ----A---- C:\WINDOWS\SYSWOW64\msutb.dll
2017-03-18 01:28:04 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2017-03-18 01:28:04 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2017-03-18 01:28:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-18 01:28:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2017-03-18 01:28:03 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2017-03-18 01:28:03 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-03-18 01:28:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2017-03-18 01:28:02 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2017-03-18 01:28:02 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2017-03-18 01:28:02 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\wlanui.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\msdtcuiu.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2017-03-18 01:28:01 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2017-03-18 01:28:00 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2017-03-18 01:28:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Ocr.dll
2017-03-18 01:28:00 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2017-03-18 01:28:00 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2017-03-18 01:27:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2017-03-18 01:27:59 ----A---- C:\WINDOWS\SYSWOW64\SyncSettings.dll
2017-03-18 01:27:59 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2017-03-18 01:27:59 ----A---- C:\WINDOWS\SYSWOW64\regedit.exe
2017-03-18 01:27:59 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2017-03-18 01:27:58 ----A---- C:\WINDOWS\SYSWOW64\RADCUI.dll
2017-03-18 01:27:58 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2017-03-18 01:27:58 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2017-03-18 01:27:58 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2017-03-18 01:27:57 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2017-03-18 01:27:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Search.dll
2017-03-18 01:27:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-03-18 01:27:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Radios.dll
2017-03-18 01:27:57 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2017-03-18 01:27:57 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2017-03-18 01:27:56 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2017-03-18 01:27:56 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2017-03-18 01:27:56 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2017-03-18 01:27:55 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2017-03-18 01:27:55 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2017-03-18 01:27:55 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2017-03-18 01:27:54 ----A---- C:\WINDOWS\SYSWOW64\vaultcli.dll
2017-03-18 01:27:54 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2017-03-18 01:27:54 ----A---- C:\WINDOWS\SYSWOW64\mscandui.dll
2017-03-18 01:27:54 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2017-03-18 01:27:54 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2017-03-18 01:27:53 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2017-03-18 01:27:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Gaming.UI.GameBar.dll
2017-03-18 01:27:53 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2017-03-18 01:27:53 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2017-03-18 01:27:53 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2017-03-18 01:27:53 ----A---- C:\WINDOWS\SYSWOW64\BrowserSettingSync.dll
2017-03-18 01:27:52 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-03-18 01:27:52 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2017-03-18 01:27:52 ----A---- C:\WINDOWS\SYSWOW64\DavSyncProvider.dll
2017-03-18 01:27:52 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2017-03-18 01:27:52 ----A---- C:\WINDOWS\SYSWOW64\accountaccessor.dll
2017-03-18 01:27:51 ----A---- C:\WINDOWS\SYSWOW64\XInputUap.dll
2017-03-18 01:27:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2017-03-18 01:27:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.SystemManagement.dll
2017-03-18 01:27:51 ----A---- C:\WINDOWS\SYSWOW64\mssitlb.dll
2017-03-18 01:27:50 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2017-03-18 01:27:50 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-03-18 01:27:50 ----A---- C:\WINDOWS\SYSWOW64\CameraCaptureUI.dll
2017-03-18 01:27:50 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2017-03-18 01:27:48 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2017-03-18 01:27:48 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2017-03-18 01:27:48 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-03-18 01:27:47 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2017-03-18 01:27:46 ----A---- C:\WINDOWS\SYSWOW64\tapi32.dll
2017-03-18 01:27:46 ----A---- C:\WINDOWS\SYSWOW64\msctfui.dll
2017-03-18 01:27:46 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-03-18 01:27:46 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-03-18 01:27:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-18 01:27:44 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-03-18 01:27:44 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-03-18 01:27:43 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2017-03-18 01:27:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2017-03-18 01:27:42 ----A---- C:\WINDOWS\SYSWOW64\UserDeviceRegistration.Ngc.dll
2017-03-18 01:27:42 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2017-03-18 01:27:42 ----A---- C:\WINDOWS\SYSWOW64\msctfp.dll
2017-03-18 01:27:42 ----A---- C:\WINDOWS\SYSWOW64\ddrawex.dll
2017-03-18 01:27:39 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-03-18 01:27:39 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2017-03-18 01:27:39 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2017-03-18 01:27:39 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-03-18 01:27:38 ----A---- C:\WINDOWS\SYSWOW64\GamePanelExternalHook.dll
2017-03-18 01:27:38 ----A---- C:\WINDOWS\SYSWOW64\ddraw.dll
2017-03-18 01:27:25 ----A---- C:\WINDOWS\system32\tquery.dll
2017-03-18 01:27:24 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2017-03-18 01:27:24 ----A---- C:\WINDOWS\system32\wmpmde.dll
2017-03-18 01:27:24 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-03-18 01:27:23 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2017-03-18 01:27:23 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-03-18 01:27:21 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2017-03-18 01:27:21 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-03-18 01:27:20 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2017-03-18 01:27:20 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-03-18 01:27:19 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-03-18 01:27:17 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-03-18 01:27:16 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-03-18 01:27:09 ----A---- C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-03-18 01:26:23 ----A---- C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2017-03-18 01:26:22 ----A---- C:\WINDOWS\system32\XblGameSaveExt.dll
2017-03-18 01:25:56 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2017-03-18 01:25:53 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-03-18 01:25:53 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2017-03-18 01:25:52 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-03-18 01:25:52 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2017-03-18 01:25:52 ----A---- C:\WINDOWS\system32\mssvp.dll
2017-03-18 01:25:52 ----A---- C:\WINDOWS\system32\mssphtb.dll
2017-03-18 01:25:51 ----A---- C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-03-18 01:25:51 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-03-18 01:25:51 ----A---- C:\WINDOWS\system32\mssph.dll
2017-03-18 01:25:50 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2017-03-18 01:25:50 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-03-18 01:25:50 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-03-18 01:25:49 ----A---- C:\WINDOWS\system32\wwanmm.dll
2017-03-18 01:25:48 ----A---- C:\WINDOWS\system32\Windows.Gaming.UI.GameBar.dll
2017-03-18 01:25:47 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-03-18 01:25:47 ----A---- C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-03-18 01:25:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-03-18 01:25:46 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2017-03-18 01:25:46 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2017-03-18 01:25:45 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-03-18 01:25:45 ----A---- C:\WINDOWS\system32\wlanui.dll
2017-03-18 01:25:45 ----A---- C:\WINDOWS\system32\nshwfp.dll
2017-03-18 01:25:44 ----A---- C:\WINDOWS\system32\WinRtTracing.dll
2017-03-18 01:25:44 ----A---- C:\WINDOWS\system32\mssitlb.dll
2017-03-18 01:25:43 ----A---- C:\WINDOWS\system32\WwaApi.dll
2017-03-18 01:25:43 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-03-18 01:25:42 ----A---- C:\WINDOWS\system32\wwanconn.dll
2017-03-18 01:25:42 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-03-18 01:25:38 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-03-18 01:25:35 ----A---- C:\WINDOWS\system32\wmp.dll
2017-03-18 01:25:30 ----A---- C:\WINDOWS\system32\shell32.dll
2017-03-18 01:25:22 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2017-03-18 01:25:20 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-03-18 01:25:18 ----A---- C:\WINDOWS\system32\mos.dll
2017-03-18 01:25:14 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-03-18 01:25:09 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-03-18 01:25:08 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-03-18 01:25:06 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-03-18 01:25:05 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2017-03-18 01:25:05 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-03-18 01:25:04 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2017-03-18 01:25:03 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-03-18 01:25:03 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-03-18 01:25:02 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2017-03-18 01:24:58 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-03-18 01:24:57 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-03-18 01:24:57 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2017-03-18 01:24:56 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-03-18 01:24:55 ----A---- C:\WINDOWS\system32\MapRouter.dll
2017-03-18 01:24:54 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-03-18 01:24:52 ----A---- C:\WINDOWS\system32\Wpc.dll
2017-03-18 01:24:52 ----A---- C:\WINDOWS\system32\MapsStore.dll
2017-03-18 01:24:51 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-03-18 01:24:51 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2017-03-18 01:24:51 ----A---- C:\WINDOWS\system32\ContactApis.dll
2017-03-18 01:24:50 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-03-18 01:24:49 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2017-03-18 01:24:48 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-03-18 01:24:48 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-03-18 01:24:47 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-18 01:24:47 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-03-18 01:24:46 ----A---- C:\WINDOWS\system32\localspl.dll
2017-03-18 01:24:44 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-03-18 01:24:42 ----A---- C:\WINDOWS\system32\wpncore.dll
2017-03-18 01:24:42 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-03-18 01:24:41 ----A---- C:\WINDOWS\system32\mmc.exe
2017-03-18 01:24:40 ----A---- C:\WINDOWS\system32\wpnapps.dll
2017-03-18 01:24:39 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-03-18 01:24:38 ----A---- C:\WINDOWS\system32\WpcMon.exe
2017-03-18 01:24:38 ----A---- C:\WINDOWS\system32\usercpl.dll
2017-03-18 01:24:37 ----A---- C:\WINDOWS\system32\wlansec.dll
2017-03-18 01:24:37 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-03-18 01:24:37 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2017-03-18 01:24:36 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-03-18 01:24:36 ----A---- C:\WINDOWS\system32\msxml3.dll
2017-03-18 01:24:36 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-03-18 01:24:35 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2017-03-18 01:24:35 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-03-18 01:24:34 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2017-03-18 01:24:33 ----A---- C:\WINDOWS\system32\wlansvc.dll
2017-03-18 01:24:33 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-03-18 01:24:33 ----A---- C:\WINDOWS\system32\mprddm.dll
2017-03-18 01:24:32 ----A---- C:\WINDOWS\system32\ntshrui.dll
2017-03-18 01:24:32 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2017-03-18 01:24:31 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-03-18 01:24:31 ----A---- C:\WINDOWS\system32\spoolsv.exe
2017-03-18 01:24:31 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2017-03-18 01:24:30 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2017-03-18 01:24:29 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2017-03-18 01:24:29 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2017-03-18 01:24:28 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-03-18 01:24:28 ----A---- C:\WINDOWS\system32\usocore.dll
2017-03-18 01:24:28 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-03-18 01:24:28 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2017-03-18 01:24:28 ----A---- C:\WINDOWS\system32\mf.dll
2017-03-18 01:24:27 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2017-03-18 01:24:26 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2017-03-18 01:24:26 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2017-03-18 01:24:26 ----A---- C:\WINDOWS\system32\EmailApis.dll
2017-03-18 01:24:25 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2017-03-18 01:24:24 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-03-18 01:24:24 ----A---- C:\WINDOWS\system32\Pimstore.dll
2017-03-18 01:24:23 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2017-03-18 01:24:23 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-03-18 01:24:23 ----A---- C:\WINDOWS\system32\AuthHost.exe
2017-03-18 01:24:22 ----A---- C:\WINDOWS\system32\rasgcw.dll
2017-03-18 01:24:22 ----A---- C:\WINDOWS\system32\ChatApis.dll
2017-03-18 01:24:21 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-03-18 01:24:21 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-03-18 01:24:21 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-03-18 01:24:21 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2017-03-18 01:24:20 ----A---- C:\WINDOWS\system32\wlanapi.dll
2017-03-18 01:24:20 ----A---- C:\WINDOWS\system32\mfds.dll
2017-03-18 01:24:20 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2017-03-18 01:24:20 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2017-03-18 01:24:19 ----A---- C:\WINDOWS\system32\UserDataService.dll
2017-03-18 01:24:19 ----A---- C:\WINDOWS\system32\InputService.dll
2017-03-18 01:24:18 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2017-03-18 01:24:18 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-03-18 01:24:18 ----A---- C:\WINDOWS\system32\moshost.dll
2017-03-18 01:24:17 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-03-18 01:24:17 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2017-03-18 01:24:16 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2017-03-18 01:24:16 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-03-18 01:24:15 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2017-03-18 01:24:15 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-03-18 01:24:15 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-03-18 01:24:15 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2017-03-18 01:24:13 ----A---- C:\WINDOWS\system32\MCCSEngineShared.dll
2017-03-18 01:24:13 ----A---- C:\WINDOWS\system32\internetmail.dll
2017-03-18 01:24:13 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-03-18 01:24:12 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-03-18 01:24:12 ----A---- C:\WINDOWS\system32\RADCUI.dll
2017-03-18 01:24:11 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-03-18 01:24:11 ----A---- C:\WINDOWS\system32\usoapi.dll
2017-03-18 01:24:11 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2017-03-18 01:24:10 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-03-18 01:24:09 ----A---- C:\WINDOWS\system32\RelPost.exe
2017-03-18 01:24:09 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2017-03-18 01:24:08 ----A---- C:\WINDOWS\system32\puiobj.dll
2017-03-18 01:24:08 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-03-18 01:24:07 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-03-18 01:24:07 ----A---- C:\WINDOWS\system32\wfdprov.dll
2017-03-18 01:24:07 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2017-03-18 01:24:06 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2017-03-18 01:24:06 ----A---- C:\WINDOWS\system32\netshell.dll
2017-03-18 01:24:05 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-03-18 01:24:05 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2017-03-18 01:24:05 ----A---- C:\WINDOWS\system32\ExSMime.dll
2017-03-18 01:24:04 ----A---- C:\WINDOWS\system32\Windows.Storage.Search.dll
2017-03-18 01:24:04 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-03-18 01:24:03 ----A---- C:\WINDOWS\system32\sdengin2.dll
2017-03-18 01:24:03 ----A---- C:\WINDOWS\system32\PrintDialogs3D.dll
2017-03-18 01:24:02 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2017-03-18 01:24:02 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2017-03-18 01:24:01 ----A---- C:\WINDOWS\system32\Unistore.dll
2017-03-18 01:24:00 ----A---- C:\WINDOWS\system32\PrintRenderAPIHost.DLL
2017-03-18 01:24:00 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2017-03-18 01:23:59 ----A---- C:\WINDOWS\system32\wpninprc.dll
2017-03-18 01:23:59 ----A---- C:\WINDOWS\system32\puiapi.dll
2017-03-18 01:23:59 ----A---- C:\WINDOWS\system32\DavSyncProvider.dll
2017-03-18 01:23:59 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2017-03-18 01:23:58 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-03-18 01:23:58 ----A---- C:\WINDOWS\system32\DuCsps.dll
2017-03-18 01:23:58 ----A---- C:\WINDOWS\system32\cemapi.dll
2017-03-18 01:23:58 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2017-03-18 01:23:57 ----A---- C:\WINDOWS\system32\tapi32.dll
2017-03-18 01:23:57 ----A---- C:\WINDOWS\system32\sdshext.dll
2017-03-18 01:23:57 ----A---- C:\WINDOWS\system32\pnidui.dll
2017-03-18 01:23:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-18 01:23:56 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-03-18 01:23:56 ----A---- C:\WINDOWS\system32\netiougc.exe
2017-03-18 01:23:54 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-03-18 01:23:50 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-03-18 01:23:39 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-03-18 01:23:33 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-03-18 01:23:25 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-03-18 01:23:22 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-03-18 01:23:18 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-03-18 01:23:14 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-03-18 01:23:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-03-18 01:23:07 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2017-03-18 01:23:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-03-18 01:23:04 ----A---- C:\WINDOWS\system32\wininet.dll
2017-03-18 01:23:03 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-03-18 01:22:56 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-03-18 01:22:54 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-03-18 01:22:53 ----A---- C:\WINDOWS\system32\d3d11.dll
2017-03-18 01:22:52 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-03-18 01:22:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-03-18 01:22:50 ----A---- C:\WINDOWS\system32\DWrite.dll
2017-03-18 01:22:48 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-03-18 01:22:47 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-03-18 01:22:46 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2017-03-18 01:22:43 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-03-18 01:22:42 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-03-18 01:22:42 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-03-18 01:22:41 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-03-18 01:22:40 ----A---- C:\WINDOWS\system32\FntCache.dll
2017-03-18 01:22:39 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2017-03-18 01:22:39 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-03-18 01:22:39 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2017-03-18 01:22:38 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-03-18 01:22:38 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-03-18 01:22:37 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-03-18 01:22:37 ----A---- C:\WINDOWS\system32\schannel.dll
2017-03-18 01:22:37 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2017-03-18 01:22:36 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-03-18 01:22:35 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-03-18 01:22:35 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-03-18 01:22:34 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-03-18 01:22:34 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-03-18 01:22:33 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-03-18 01:22:33 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-03-18 01:22:31 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-03-18 01:22:31 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-03-18 01:22:30 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-03-18 01:22:30 ----A---- C:\WINDOWS\system32\winmde.dll
2017-03-18 01:22:29 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-03-18 01:22:28 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-03-18 01:22:28 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2017-03-18 01:22:27 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-03-18 01:22:27 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2017-03-18 01:22:26 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-03-18 01:22:26 ----A---- C:\WINDOWS\system32\vpnike.dll
2017-03-18 01:22:25 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2017-03-18 01:22:24 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-03-18 01:22:23 ----A---- C:\WINDOWS\system32\uDWM.dll
2017-03-18 01:22:22 ----A---- C:\WINDOWS\HelpPane.exe
2017-03-18 01:22:21 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-03-18 01:22:21 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2017-03-18 01:22:20 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-03-18 01:22:20 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-03-18 01:22:19 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-03-18 01:22:19 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2017-03-18 01:22:19 ----A---- C:\WINDOWS\system32\DMRServer.dll
2017-03-18 01:22:18 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2017-03-18 01:22:18 ----A---- C:\WINDOWS\system32\SHCore.dll
2017-03-18 01:22:18 ----A---- C:\WINDOWS\system32\SettingSync.dll
2017-03-18 01:22:17 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-03-18 01:22:17 ----A---- C:\WINDOWS\system32\quartz.dll
2017-03-18 01:22:15 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2017-03-18 01:22:15 ----A---- C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-03-18 01:22:14 ----A---- C:\WINDOWS\system32\MiracastReceiver.dll
2017-03-18 01:22:11 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-03-18 01:22:09 ----A---- C:\WINDOWS\system32\msftedit.dll
2017-03-18 01:22:07 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-03-18 01:22:05 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-03-18 01:22:04 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-03-18 01:22:03 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-03-18 01:22:03 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-03-18 01:22:02 ----A---- C:\WINDOWS\system32\evr.dll
2017-03-18 01:22:01 ----A---- C:\WINDOWS\system32\wlidprov.dll
2017-03-18 01:22:00 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-03-18 01:21:59 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2017-03-18 01:21:59 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-03-18 01:21:55 ----A---- C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-03-18 01:21:50 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2017-03-18 01:21:50 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-03-18 01:21:49 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-03-18 01:21:46 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-03-18 01:21:46 ----A---- C:\WINDOWS\system32\thumbcache.dll
2017-03-18 01:21:44 ----A---- C:\WINDOWS\system32\MFPlay.dll
2017-03-18 01:21:44 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-03-18 01:21:43 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2017-03-18 01:21:42 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-03-18 01:21:42 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-03-18 01:21:37 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-03-18 01:21:37 ----A---- C:\WINDOWS\system32\Tabbtn.dll
2017-03-18 01:21:37 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-03-18 01:21:36 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2017-03-18 01:21:36 ----A---- C:\WINDOWS\system32\icm32.dll
2017-03-18 01:21:36 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-03-18 01:21:35 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2017-03-18 01:21:35 ----A---- C:\WINDOWS\system32\dialclient.dll
2017-03-18 01:21:33 ----A---- C:\WINDOWS\system32\shutdownux.dll
2017-03-18 01:21:33 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2017-03-18 01:21:33 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2017-03-18 01:21:32 ----A---- C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-03-18 01:21:32 ----A---- C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2017-03-18 01:21:31 ----A---- C:\WINDOWS\system32\Geolocation.dll
2017-03-18 01:21:31 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2017-03-18 01:21:31 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2017-03-18 01:21:30 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2017-03-18 01:21:28 ----A---- C:\WINDOWS\system32\SyncSettings.dll
2017-03-18 01:21:28 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2017-03-18 01:21:27 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2017-03-18 01:21:26 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-03-18 01:21:25 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2017-03-18 01:21:25 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-03-18 01:21:24 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2017-03-18 01:21:24 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2017-03-18 01:21:22 ----A---- C:\WINDOWS\system32\tbauth.dll
2017-03-18 01:21:22 ----A---- C:\WINDOWS\system32\BrowserSettingSync.dll
2017-03-18 01:21:21 ----A---- C:\WINDOWS\system32\fhcfg.dll
2017-03-18 01:21:20 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2017-03-18 01:21:20 ----A---- C:\WINDOWS\system32\CameraCaptureUI.dll
2017-03-18 01:21:20 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-03-18 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2017-03-18 01:21:19 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2017-03-18 01:21:18 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2017-03-18 01:21:16 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2017-03-18 01:21:15 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-03-18 01:21:13 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2017-03-18 01:21:10 ----A---- C:\WINDOWS\system32\ddrawex.dll
2017-03-18 01:21:08 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-03-18 01:21:08 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-03-18 01:21:07 ----A---- C:\WINDOWS\system32\ddraw.dll
2017-03-18 01:20:41 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-03-18 01:20:36 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-03-18 01:20:34 ----A---- C:\WINDOWS\system32\twinui.dll
2017-03-18 01:20:32 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2017-03-18 01:20:32 ----A---- C:\WINDOWS\system32\aepic.dll
2017-03-18 01:20:31 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2017-03-18 01:20:31 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-03-18 01:20:31 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-03-18 01:20:27 ----A---- C:\WINDOWS\explorer.exe
2017-03-18 01:20:25 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-03-18 01:20:24 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-03-18 01:20:23 ----A---- C:\WINDOWS\system32\mispace.dll
2017-03-18 01:20:22 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-03-18 01:20:22 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-03-18 01:20:21 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-03-18 01:20:16 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-03-18 01:20:14 ----A---- C:\WINDOWS\system32\wsp_health.dll
2017-03-18 01:20:12 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-03-18 01:20:11 ----A---- C:\WINDOWS\system32\msctf.dll
2017-03-18 01:20:10 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-03-18 01:20:10 ----A---- C:\WINDOWS\system32\devinv.dll
2017-03-18 01:20:09 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-03-18 01:20:08 ----A---- C:\WINDOWS\system32\AppContracts.dll
2017-03-18 01:20:06 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-03-18 01:20:05 ----A---- C:\WINDOWS\system32\EnterpriseAPNCsp.dll
2017-03-18 01:20:05 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2017-03-18 01:20:05 ----A---- C:\WINDOWS\system32\CspCellularSettings.dll
2017-03-18 01:20:05 ----A---- C:\WINDOWS\system32\CfgSPCellular.dll
2017-03-18 01:20:04 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-03-18 01:20:04 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2017-03-18 01:20:04 ----A---- C:\WINDOWS\system32\dcntel.dll
2017-03-18 01:20:03 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2017-03-18 01:20:02 ----A---- C:\WINDOWS\system32\wsp_fs.dll
2017-03-18 01:20:01 ----A---- C:\WINDOWS\system32\winload.exe
2017-03-18 01:20:00 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2017-03-18 01:19:59 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-03-18 01:19:59 ----A---- C:\WINDOWS\system32\invagent.dll
2017-03-18 01:19:59 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-03-18 01:19:59 ----A---- C:\WINDOWS\system32\clusapi.dll
2017-03-18 01:19:57 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-03-18 01:19:56 ----A---- C:\WINDOWS\system32\winresume.exe
2017-03-18 01:19:56 ----A---- C:\WINDOWS\system32\ReAgent.dll
2017-03-18 01:19:53 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-03-18 01:19:53 ----A---- C:\WINDOWS\system32\twinapi.dll
2017-03-18 01:19:53 ----A---- C:\WINDOWS\system32\resutils.dll
2017-03-18 01:19:53 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-03-18 01:19:52 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-03-18 01:19:51 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-03-18 01:19:51 ----A---- C:\WINDOWS\system32\imapi2fs.dll
2017-03-18 01:19:51 ----A---- C:\WINDOWS\system32\gameux.dll
2017-03-18 01:19:50 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2017-03-18 01:19:50 ----A---- C:\WINDOWS\system32\wer.dll
2017-03-18 01:19:50 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2017-03-18 01:19:50 ----A---- C:\WINDOWS\system32\uReFS.dll
2017-03-18 01:19:50 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2017-03-18 01:19:49 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2017-03-18 01:19:49 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-03-18 01:19:47 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-03-18 01:19:46 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2017-03-18 01:19:45 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-03-18 01:19:42 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2017-03-18 01:19:42 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-03-18 01:19:42 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-03-18 01:19:41 ----A---- C:\WINDOWS\system32\wintrust.dll
2017-03-18 01:19:41 ----A---- C:\WINDOWS\system32\ubpm.dll
2017-03-18 01:19:41 ----A---- C:\WINDOWS\system32\themecpl.dll
2017-03-18 01:19:40 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-03-18 01:19:40 ----A---- C:\WINDOWS\system32\authui.dll
2017-03-18 01:19:40 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-03-18 01:19:40 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2017-03-18 01:19:39 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-03-18 01:19:39 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-03-18 01:19:38 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-03-18 01:19:38 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-03-18 01:19:37 ----A---- C:\WINDOWS\system32\bootux.dll
2017-03-18 01:19:36 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-03-18 01:19:36 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-03-18 01:19:36 ----A---- C:\WINDOWS\system32\ci.dll
2017-03-18 01:19:35 ----A---- C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-03-18 01:19:35 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-03-18 01:19:35 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-03-18 01:19:34 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-03-18 01:19:34 ----A---- C:\WINDOWS\system32\stobject.dll
2017-03-18 01:19:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-03-18 01:19:33 ----A---- C:\WINDOWS\system32\dui70.dll
2017-03-18 01:19:32 ----A---- C:\WINDOWS\system32\VSSVC.exe
2017-03-18 01:19:32 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2017-03-18 01:19:32 ----A---- C:\WINDOWS\system32\PCPTpm12.dll
2017-03-18 01:19:32 ----A---- C:\WINDOWS\system32\icsvcext.dll
2017-03-18 01:19:31 ----A---- C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-18 01:19:31 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2017-03-18 01:19:31 ----A---- C:\WINDOWS\system32\DXP.dll
2017-03-18 01:19:31 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-03-18 01:19:30 ----A---- C:\WINDOWS\system32\wsp_sr.dll
2017-03-18 01:19:30 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2017-03-18 01:19:30 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-03-18 01:19:29 ----A---- C:\WINDOWS\system32\vssapi.dll
2017-03-18 01:19:29 ----A---- C:\WINDOWS\system32\combase.dll
2017-03-18 01:19:29 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2017-03-18 01:19:29 ----A---- C:\WINDOWS\system32\basecsp.dll
2017-03-18 01:19:28 ----A---- C:\WINDOWS\system32\systemreset.exe
2017-03-18 01:19:28 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2017-03-18 01:19:28 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2017-03-18 01:19:28 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-03-18 01:19:27 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2017-03-18 01:19:27 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-03-18 01:19:27 ----A---- C:\WINDOWS\system32\sud.dll
2017-03-18 01:19:27 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-03-18 01:19:27 ----A---- C:\WINDOWS\system32\icfupgd.dll
2017-03-18 01:19:27 ----A---- C:\WINDOWS\system32\certprop.dll
2017-03-18 01:19:26 ----A---- C:\WINDOWS\system32\WinTypes.dll
2017-03-18 01:19:26 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2017-03-18 01:19:26 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2017-03-18 01:19:25 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-03-18 01:19:25 ----A---- C:\WINDOWS\system32\wbengine.exe
2017-03-18 01:19:25 ----A---- C:\WINDOWS\system32\gpapi.dll
2017-03-18 01:19:25 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-03-18 01:19:25 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-03-18 01:19:24 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2017-03-18 01:19:24 ----A---- C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-03-18 01:19:24 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-03-18 01:19:23 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-03-18 01:19:23 ----A---- C:\WINDOWS\system32\netiohlp.dll
2017-03-18 01:19:23 ----A---- C:\WINDOWS\system32\input.dll
2017-03-18 01:19:23 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-03-18 01:19:23 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-03-18 01:19:23 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-03-18 01:19:22 ----A---- C:\WINDOWS\system32\scksp.dll
2017-03-18 01:19:22 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-03-18 01:19:22 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-03-18 01:19:21 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-03-18 01:19:21 ----A---- C:\WINDOWS\system32\spaceman.exe
2017-03-18 01:19:21 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2017-03-18 01:19:20 ----A---- C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2017-03-18 01:19:20 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-03-18 01:19:20 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-03-18 01:19:20 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2017-03-18 01:19:20 ----A---- C:\WINDOWS\system32\appinfo.dll
2017-03-18 01:19:19 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2017-03-18 01:19:19 ----A---- C:\WINDOWS\system32\tabcal.exe
2017-03-18 01:19:19 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-03-18 01:19:19 ----A---- C:\WINDOWS\system32\gpsvc.dll
2017-03-18 01:19:19 ----A---- C:\WINDOWS\system32\Family.SyncEngine.dll
2017-03-18 01:19:18 ----A---- C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-03-18 01:19:18 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2017-03-18 01:19:18 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-03-18 01:19:18 ----A---- C:\WINDOWS\system32\hgcpl.dll
2017-03-18 01:19:18 ----A---- C:\WINDOWS\system32\ApplicationFrame.dll
2017-03-18 01:19:17 ----A---- C:\WINDOWS\system32\MultiDigiMon.exe
2017-03-18 01:19:17 ----A---- C:\WINDOWS\system32\msutb.dll
2017-03-18 01:19:17 ----A---- C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-03-18 01:19:17 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-03-18 01:19:16 ----A---- C:\WINDOWS\system32\wups.dll
2017-03-18 01:19:15 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-03-18 01:19:14 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-03-18 01:19:14 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-03-18 01:19:14 ----A---- C:\WINDOWS\system32\vaultcli.dll
2017-03-18 01:19:14 ----A---- C:\WINDOWS\regedit.exe
2017-03-18 01:19:13 ----A---- C:\WINDOWS\system32\BluetoothDesktopHandlers.dll
2017-03-18 01:19:12 ----A---- C:\WINDOWS\system32\XInputUap.dll
2017-03-18 01:19:12 ----A---- C:\WINDOWS\system32\werui.dll
2017-03-18 01:19:12 ----A---- C:\WINDOWS\system32\oleacc.dll
2017-03-18 01:19:12 ----A---- C:\WINDOWS\system32\mscandui.dll
2017-03-18 01:19:11 ----A---- C:\WINDOWS\system32\vds.exe
2017-03-18 01:19:10 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-03-18 01:19:10 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-03-18 01:19:10 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2017-03-18 01:19:10 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2017-03-18 01:19:09 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-03-18 01:19:09 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-03-18 01:19:09 ----A---- C:\WINDOWS\system32\msctfui.dll
2017-03-18 01:19:09 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2017-03-18 01:19:09 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-03-18 01:19:09 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-03-18 01:19:08 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-03-18 01:19:08 ----A---- C:\WINDOWS\system32\msctfp.dll
2017-03-18 01:19:07 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2017-03-18 01:19:07 ----A---- C:\WINDOWS\system32\GamePanelExternalHook.dll
2017-03-18 01:19:06 ----A---- C:\WINDOWS\system32\cdp.dll
2017-03-18 01:19:01 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-03-18 01:19:01 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-03-18 01:16:29 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSetup.exe
2017-03-16 16:28:07 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2017-03-16 16:28:06 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2017-03-16 16:28:06 ----A---- C:\WINDOWS\system32\prm0009.dll
2017-03-16 16:28:04 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2017-03-16 16:28:04 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2017-03-16 12:56:37 ----RD---- C:\Program Files (x86)\Skype

nevlezlo se to do jedné zprávy tady je zbytek

====== List of files/folders modified in the last 1 month ======

2017-04-13 14:21:54 ----RD---- C:\Program Files
2017-04-13 14:21:48 ----D---- C:\WINDOWS\Prefetch
2017-04-13 14:20:44 ----D---- C:\WINDOWS\Temp
2017-04-13 14:20:32 ----D---- C:\WINDOWS\CbsTemp
2017-04-13 14:09:18 ----D---- C:\WINDOWS\INF
2017-04-13 14:09:17 ----D---- C:\Windows
2017-04-13 14:08:05 ----D---- C:\Users\Nikola\AppData\Roaming\Skype
2017-04-13 14:05:11 ----D---- C:\WINDOWS\system32\sru
2017-04-13 13:42:53 ----D---- C:\WINDOWS\system32\SleepStudy
2017-04-13 13:41:45 ----D---- C:\WINDOWS\AppReadiness
2017-04-12 23:00:24 ----D---- C:\WINDOWS\system32\config
2017-04-12 21:36:06 ----D---- C:\Users\Nikola\AppData\Roaming\Seznam.cz
2017-04-12 12:14:49 ----D---- C:\WINDOWS\system32\catroot2
2017-04-12 12:10:08 ----D---- C:\WINDOWS\WinSxS
2017-04-12 11:41:04 ----SHD---- C:\WINDOWS\Installer
2017-04-12 11:37:36 ----HD---- C:\Program Files\WindowsApps
2017-04-12 11:35:16 ----RD---- C:\Program Files (x86)
2017-04-11 12:22:47 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-04-09 23:07:45 ----SHD---- C:\System Volume Information
2017-04-08 21:55:49 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2017-04-08 18:58:12 ----D---- C:\WINDOWS\debug
2017-04-07 09:25:47 ----RD---- C:\Users
2017-04-06 21:16:10 ----D---- C:\WINDOWS\SysWOW64
2017-04-06 21:16:10 ----D---- C:\WINDOWS\System32
2017-04-06 21:15:44 ----D---- C:\WINDOWS\system32\drivers
2017-04-06 21:15:36 ----D---- C:\WINDOWS\system32\CatRoot
2017-04-06 21:15:28 ----D---- C:\WINDOWS\system32\DriverStore
2017-04-03 20:48:50 ----D---- C:\ProgramData\AVAST Software
2017-04-03 20:46:45 ----D---- C:\WINDOWS\system32\Tasks
2017-04-03 20:38:57 ----D---- C:\Program Files (x86)\Seznam.cz
2017-04-03 20:38:43 ----HD---- C:\ProgramData
2017-04-03 20:37:41 ----D---- C:\Users\Nikola\AppData\Roaming\Synaptics
2017-04-03 19:35:55 ----D---- C:\WINDOWS\Tasks
2017-03-30 16:03:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-03-28 22:10:58 ----RD---- C:\WINDOWS\Microsoft.NET
2017-03-27 23:49:24 ----RD---- C:\WINDOWS\assembly
2017-03-27 21:20:57 ----SD---- C:\ProgramData\Microsoft
2017-03-26 12:06:16 ----D---- C:\WINDOWS\system32\appraiser
2017-03-24 13:59:28 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2017-03-24 13:59:28 ----D---- C:\WINDOWS\SYSWOW64\setup
2017-03-24 13:59:28 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-03-24 13:59:23 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-03-24 13:59:23 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-03-24 13:59:23 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-03-24 13:58:29 ----D---- C:\WINDOWS\system32\wbem
2017-03-24 13:58:29 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-03-24 13:58:28 ----D---- C:\WINDOWS\system32\setup
2017-03-24 13:58:27 ----D---- C:\WINDOWS\system32\oobe
2017-03-24 13:58:27 ----D---- C:\WINDOWS\system32\migration
2017-03-24 13:58:26 ----SD---- C:\WINDOWS\system32\F12
2017-03-24 13:58:25 ----D---- C:\WINDOWS\system32\en-US
2017-03-24 13:58:25 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2017-03-24 13:58:24 ----D---- C:\WINDOWS\system32\cs-CZ
2017-03-24 13:58:22 ----D---- C:\WINDOWS\system32\Boot
2017-03-24 13:57:33 ----D---- C:\WINDOWS\ShellExperiences
2017-03-24 13:57:32 ----RD---- C:\WINDOWS\PrintDialog
2017-03-24 13:57:25 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-03-24 13:57:24 ----D---- C:\WINDOWS\bcastdvr
2017-03-24 13:57:24 ----D---- C:\WINDOWS\AppPatch
2017-03-24 13:57:23 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-03-24 13:57:23 ----D---- C:\Program Files (x86)\Windows Mail
2017-03-24 13:57:23 ----D---- C:\Program Files (x86)\Windows Defender
2017-03-24 13:57:22 ----RD---- C:\Program Files\Windows Defender
2017-03-24 13:57:22 ----D---- C:\Program Files\Windows Photo Viewer
2017-03-24 13:57:22 ----D---- C:\Program Files\Windows Mail
2017-03-24 13:57:22 ----D---- C:\Program Files (x86)\Internet Explorer
2017-03-24 13:57:21 ----D---- C:\Program Files\Internet Explorer
2017-03-24 13:40:58 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2017-03-22 12:51:23 ----D---- C:\WINDOWS\system32\MRT
2017-03-21 15:35:10 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-03-16 16:28:39 ----D---- C:\WINDOWS\OCR
2017-03-16 12:56:56 ----D---- C:\ProgramData\Skype
2017-03-16 12:56:38 ----D---- C:\Program Files (x86)\Common Files
2017-03-16 12:54:40 ----D---- C:\ProgramData\Package Cache

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R0 MBI;@oem5.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2014-01-23 29464]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R3 clwvd;@oem0.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\WINDOWS\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 dtsoftbus01;@oem3.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-09-29 283064]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 GPIO;@oem13.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 iwdbus;@oem32.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 RSP2STOR;@oem31.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2015-06-05 310528]
R3 rt640x64;@oem21.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-11-18 888064]
R3 RTWlanE;@oem38.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\System32\drivers\rtwlane.sys [2017-02-01 6294016]
R3 TXEIx64;@oem6.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-15 88592]
R4 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2016-06-06 46240]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\WINDOWS\system32\drivers\mfeelamk.sys [2016-03-11 83608]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-08-06 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 intaud_WaveExtensible;@oem17.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys []
S3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys []
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; %windir%\system32\svchost.exe -k apphost;"ServiceDll" = %windir%\system32\inetsrv\apphostsvc.dll
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2016-09-22 83768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CDPUserSvc_252a08d6;CDPUserSvc_252a08d6; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2017-03-26 3737792]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-05-27 2139328]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2016-12-07 31776]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-01-03 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-01 733696]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2015-01-30 103424]
R2 OneSyncSvc_252a08d6;Hostitel synchronizace_252a08d6; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2017-01-19 651576]
R3 PimIndexMaintenanceSvc_252a08d6;Data kontaktů_252a08d6; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [2015-09-03 606224]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-02-27 317400]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2016-07-16 52920]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-01 822232]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_252a08d6;Služba zasílání zpráv_252a08d6; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-03-05 207056]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

Zdravim

Stahnete crystal disk info http://www.slunecnice.cz/sw/crystaldiskinfo/
Nainstalujte (pozor na pripadne doplnky, ty odmitnete zrusenim zatrzitka) a spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

tady log

----------------------------------------------------------------------------
CrystalDiskInfo 7.0.5 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 10 [10.0 Build 14393] (x64)
Date : 2017/04/14 8:53:07

-- Controller Map ----------------------------------------------------------
+ Intel(R) Pentium(R) processor N- and J-series / Intel(R) Celeron(R) processor N- and J-series AHCI - 0F23 [ATA]
- TOSHIBA MQ01ABF050
- hp DVDRAM GU90N
- Řadič prostorů úložišť [SCSI]

-- Disk List ---------------------------------------------------------------
(1) TOSHIBA MQ01ABF050 : 500,1 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) TOSHIBA MQ01ABF050
----------------------------------------------------------------------------
Model : TOSHIBA MQ01ABF050
Firmware : AM002C
Serial Number : 64F3SXAAS
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/300
Power On Hours : 7537 hod.
Power On Count : 4084 krát
Temperature : 31 C (87 F)
Health Status : Pozor
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : ----
Drive Letter : C: D:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Počet chyb čtení
02 100 100 _50 000000000000 Průchodnost disku
03 100 100 __2 00000000051A Čas na roztočení ploten
04 100 100 __0 0000000064C5 Počet spuštění/zastavení
05 100 100 _10 000000000000 Počet přemapovaných sektorů
07 100 100 _50 000000000000 Počet chybných hledání
08 100 100 _50 000000000000 Čas potřebný na vyhledání
09 _82 _82 __0 000000001D71 Hodin v činnosti
0A 253 100 _30 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 __0 000000000FF4 Počet cyklů zapnutí zařízení
B7 100 100 __1 000000000000 Specifický pro výrobce
B8 100 100 _97 000000000000 Ukončovacích chyb
B9 100 100 __1 00000000FFFF Specifický pro výrobce
BB __1 __1 __0 000000000E9A Ohlášeno neopravitelných chyb
BC 100 100 __0 000000000000 Časový limit příkazu
BD 100 100 __1 000000000000 Vysoká rychlost zápisu
BE _69 _48 _40 00001F1A001F Teplota toku vzduchu
BF 100 100 __0 0000000001FF Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000500050 Počet vypnutí disku
C1 _95 _95 __0 00000000D4A0 Počet cyklů načítání/vymazání
C2 _69 _48 _40 00001F1A001F Teplota
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000008 Počet podezřelých sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2036 3446 3353 5841 4153
020: 0000 4000 0000 414D 3030 3243 2020 544F 5348 4942
030: 4120 4D51 3031 4142 4630 3530 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0007 0407 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0D06 0004 004C 0048
080: 01F8 0000 706B 7C09 6123 7069 BC09 6123 003F 0032
090: 0032 0080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 6003 0000 5000 0395
110: 9570 6604 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 D1A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 64 00 00 00 00 00 00 00 02 27
010: 00 64 64 00 00 00 00 00 00 00 03 23 00 64 64 1A
020: 05 00 00 00 00 00 04 32 00 64 64 C5 64 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 64 64 00
050: 00 00 00 00 00 00 09 32 00 52 52 71 1D 00 00 00
060: 00 00 0A 33 00 FD 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 F4 0F 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 64 64 FF FF 00 00 00 00 00 BB 32
0A0: 00 01 01 9A 0E 00 00 00 00 00 BC 32 00 64 64 00
0B0: 00 00 00 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 45 30 1F 00 1A 1F 00 00 00 BF 32
0D0: 00 64 64 FF 01 00 00 00 00 00 C0 22 00 64 64 50
0E0: 00 50 00 00 00 00 C1 32 00 5F 5F A0 D4 00 00 00
0F0: 00 00 C2 22 00 45 30 1F 00 1A 1F 00 00 00 C4 32
100: 00 64 64 00 00 00 00 00 00 00 C5 32 00 64 64 08
110: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 51
170: 03 00 01 00 02 67 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E1

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 02 32
010: 00 00 00 00 00 00 00 00 00 00 03 02 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 0A 00 00 00 00 00 00 00 00 00 00 07 32
040: 00 00 00 00 00 00 00 00 00 00 08 32 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 1E 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 01 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 01 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 01 00 00 00 00 00 00 00 00
0C0: 00 00 BE 28 00 00 00 00 00 00 00 00 00 00 BF 00
0D0: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
0E0: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
0F0: 00 00 C2 28 00 00 00 00 00 00 00 00 00 00 C4 00
100: 00 00 00 00 00 00 00 00 00 00 C5 00 00 00 00 00
110: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A1

Tak jeste ADWCleaner a budem pokracovat. Disk bohuzel nevypada nejlepe, tak uvidime, jestli vycisteni pomuze.

jojo chvíli to trvalo tady je log

# AdwCleaner v6.045 - Log vytvořen 14/04/2017 v 09:06:51
# Aktualizováno dne 28/03/2017 z Malwarebytes
# Databáze : 2017-04-13.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Nikola - VAN
# Spuštěno z : C:\Users\Nikola\Desktop\adwcleaner_6.045.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\Nikola\AppData\LocalLow\Simple Adblock
[-] Složka smazána: C:\Users\Nikola\AppData\Roaming\OpenCandy
[-] Složka smazána: C:\Users\Nikola\AppData\Roaming\RHEng
[-] Složka smazána: C:\ProgramData\apn
[-] Složka smazána: C:\Program Files (x86)\Common Files\Simple Adblock
[-] Složka smazána: C:\Users\Vodičkovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep
[-] Složka smazána: C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaadgepjkdffhjbkfjgnnffnfcffbg
[-] Složka smazána: C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaaaadgepjkdffhjbkfjgnnffnfcffbg
[-] Složka smazána: C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaejaghnbcjilindpkgmcmdflpgjf


***** [ Soubory ] *****

[-] Soubor smazán: C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aaaaadgepjkdffhjbkfjgnnffnfcffbg_0.localstorage


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKU\.DEFAULT\Software\AskPartnerNetwork
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AskPartnerNetwork
[-] Klíč smazán: HKU\AvGeneric_S-1-5-21-2176563461-811689632-2555268022-1004\Software\Microsoft\Internet Explorer\SearchScopes\{3E70E118-3F20-40FE-A1A4-DE19E67D8639}
[-] Klíč smazán: HKU\AvGeneric_S-1-5-21-2176563461-811689632-2555268022-1004\Software\Microsoft\Internet Explorer\SearchScopes\{EC79078E-00AD-47C2-A8F3-CF349B53AC53}
[-] Klíč smazán: HKU\AvGeneric_S-1-5-21-2176563461-811689632-2555268022-1005\Software\Microsoft\Internet Explorer\SearchScopes\{DFE68ED8-C9E1-4EF7-B38B-3C444D3A6752}
[-] Klíč smazán: HKU\S-1-5-21-2176563461-811689632-2555268022-1001\Software\Microsoft\Internet Explorer\SearchScopes\{EC79078E-00AD-47C2-A8F3-CF349B53AC53}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EC79078E-00AD-47C2-A8F3-CF349B53AC53}
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EC79078E-00AD-47C2-A8F3-CF349B53AC53}
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\slunecnice.cz
[-] Klíč smazán: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\slunecnice.cz
[-] Klíč smazán: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.slunecnice.cz
[-] Klíč smazán: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\slunecnice.cz
[-] Klíč smazán: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.slunecnice.cz
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\slunecnice.cz
[#] Klíč smazán po restartu: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\slunecnice.cz
[#] Klíč smazán po restartu: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.slunecnice.cz
[#] Klíč smazán po restartu: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\slunecnice.cz
[#] Klíč smazán po restartu: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.slunecnice.cz
[-] Hodnota smazána: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [ApnTBMon]
[-] Klíč smazán: HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[#] Klíč smazán po restartu: [x64] HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaejaghnbcjilindpkgmcmdflpgjf
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaejaghnbcjilindpkgmcmdflpgjf


***** [ Prohlížeče ] *****

[-] [C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: aaaaadgepjkdffhjbkfjgnnffnfcffbg
[-] [C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: aaaaaejaghnbcjilindpkgmcmdflpgjf
[-] [C:\Users\Nikola\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: fcfenmboojpjinhpgggodefccipikbpd
[-] [C:\Users\Vodičkovi\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: aaaaaejaghnbcjilindpkgmcmdflpgjf
[-] [C:\Users\Vodičkovi\AppData\Local\Google\Chrome\User Data\Default] [extension] Smazáno: aaaaahaeginbdcckocjkhbciadcafnep
[-] [C:\Users\Nikola\AppData\Local\Comodo\Dragon\User Data\Default\Web data] [Search Provider] Smazáno: ask.com


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [6120 Bajty] - [14/04/2017 09:06:51]
C:\AdwCleaner\AdwCleaner[S0].txt - [6397 Bajty] - [14/04/2017 09:02:07]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [6266 Bajty] ##########

Udelejte kontrolu programem HD Tune
Stahnete http://www.slunecnice.cz/sw/hd-tune/ , nainstalujte a spustte jako spravce (pokud vam pri instalaci nabidne nejaky doplnek, odmitnete ho!)
V tom okne kliknete na posledni zalozku - Error Scan (pokud bude zatrzeny quick scan, tak zatrzitko zruste) a kliknete na Start.
Kontrola bude nejakou dobu trvat. Dejte vedet, jestli tam bylo nejake cervene policko.
Taky se podivejte na zalozku Health a opiste mi (vyfotte), co se tam pise. Melo by tam byt OK


Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Tady jsou výsledky HD Tune, kde se objevilo jedno červené políčko

za chvíli tu přiložím kontrolu MBAM

Stale bezi?

Nějakou dobu to trvalo, ale vše hotovo a zde přikládám log

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 14.04.17
Čas skenování: 12:08
Logovací soubor: MBAM log.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.103
Aktualizovat verzi balíku komponent: 1.0.1726
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: VAN\Nikola

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 377499
Uplynulý čas: 6 hod, 8 min, 4 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 10
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\_metadata, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\css, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\js, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep, Žádná uživatelská akce, [10678], [179571],1.0.1726

Soubor: 25
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\logo_128x.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\logo_19x.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\logo_24x.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\logo_32x.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\newtablogo.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\toolbar-icon-ask.ico, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\config\skin\images\logo\toolbar-icons.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\css\bootstrap.css, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\css\bootstrap.css.map, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images\coupons.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images\latestdeals.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images\options.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images\search.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images\shopping_cart.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\images\specialoffers.png, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\js\background.js, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\js\bootstrap.js, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\js\jquery.js, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\js\popup.js, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\_metadata\verified_contents.json, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\apnAPI.js, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\manifest.json, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.ShoppingApp, C:\Users\Ver\u00c4\u008da\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahaeginbdcckocjkhbciadcafnep\22.13_0\popup.html, Žádná uživatelská akce, [10678], [179571],1.0.1726
PUP.Optional.MindSpark, C:\USERS\VER\u00c4\u008dA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\HTTP_GAMINGWONDERLAND.DL.MYWAY.COM_0.LOCALSTORAGE-JOURNAL, Žádná uživatelská akce, [250], [240305],1.0.1726
PUP.Optional.MindSpark, C:\USERS\VER\u00c4\u008dA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\HTTP_GAMINGWONDERLAND.DL.MYWAY.COM_0.LOCALSTORAGE, Žádná uživatelská akce, [250], [240305],1.0.1726

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

zde přikládám log

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 16.04.17
Čas skenování: 10:16
Logovací soubor: test 22.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.103
Aktualizovat verzi balíku komponent: 1.0.1741
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: VAN\Nikola

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 432082
Uplynulý čas: 7 hod, 28 min, 13 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 1
PUP.Optional.ASK.Generic, C:\USERS\NIKOLA\APPDATA\LOCAL\COMODO\DRAGON\USER DATA\DEFAULT\EXTENSIONS\AAAALIPAOKHKCCGMGKDGLFINFNFHFLKO\30.10_0\BACKGROUND\CHROMEUTILPLUGIN.DLL, V karanténě, [1232], [345551],1.0.1741

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

MBAM odinstalujte.

Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach
(Kdyby nesel Launcher stahnout, dejte logy jen ze samotneho FRST, tedy bez pouziti Launcheru)