VIRY.CZ

Zdravím. Pár dni pozorujem že počítač je nejaký spomalený. Dlho načítava karty na firefoxe respektíve na akomkoľvek prehliadači, sken cez Ccleaner trvá niekoľko minút čo niekedy trval pár sekúnd, zamrzla inštalácia aktualizácií Windows pri vypínaní celkovo je nejaký divný. Raz svižne a raz seká. Napadá ma iba či nie sú poškodené sektory na HDD(konkrétne sú 4 poškodené) alebo či tam je nejaký vírus tak sa obraciam na Vás s prosbou o kontrolu logu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2017-11-21 17:05:24
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 476 GB (80%) free of 598 GB
Total RAM: 3959 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:05:28, on 21. 11. 2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18838)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t55j1k75q
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t55j1k75q
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Acer ODD Power Service (ODDPwrSvc) - Acer Incorporated - C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12929 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe"
"C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe"
"C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\PLFSetI.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="4244.0.1676991198\1548824276" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\uzivatel\AppData\LocalLow\Mozilla\Temp-{6f2f388b-a939-4932-87c4-c30a865f3306}" 4244 "\\.\pipe\gecko-crash-server-pipe.4244" gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="4244.13.595214940\1390884053" -childID 2 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 4244 "\\.\pipe\gecko-crash-server-pipe.4244" tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="4244.27.1954943195\10030887" -childID 4 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 4244 "\\.\pipe\gecko-crash-server-pipe.4244" tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="4244.34.1050038764\117847546" -childID 5 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 4244 "\\.\pipe\gecko-crash-server-pipe.4244" tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="4244.41.713740037\314760077" -childID 6 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 4244 "\\.\pipe\gecko-crash-server-pipe.4244" tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="4244.48.1986655981\987893640" -childID 7 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 4244 "\\.\pipe\gecko-crash-server-pipe.4244" tab
C:\Windows\system32\DllHost.exe /Processid:{B366DEBE-645B-43A5-B865-DDD82C345492}
C:\Windows\system32\sppsvc.exe
C:\Windows\servicing\TrustedInstaller.exe

"C:\Users\uzivatel\Downloads\RSITx64(1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1easrqfo.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 26.0.0.137 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.131.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.131.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 26.0.0.137 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-07-06 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-06 186944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-02 10038304]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-02-02 877600]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-02-05 324608]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2010-02-05 222240]
"mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-02-01 349552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-05 2046760]
"PLFSetI"=C:\Windows\PLFSetI.exe [2010-01-13 206208]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-03-10 496160]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-11-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-14 1767712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-06-13 9803992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-06-13 9803992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NortonOnlineBackupReminder]
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-25 588648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-03-15 587288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2009-12-24 284696]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-02-01 337264]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2009-12-25 201512]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2009-12-25 401192]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-03-09 260608]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-02-25 1289296]
"MDS_Menu"=C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [2010-03-01 124136]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-11-21 17:02:24 ----D---- C:\rsit
2017-11-21 17:02:24 ----D---- C:\Program Files\trend micro
2017-11-21 09:15:40 ----D---- C:\ProgramData\MB2Migration
2017-11-21 09:13:19 ----D---- C:\ProgramData\Malwarebytes
2017-11-21 09:13:19 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-11-19 17:30:24 ----D---- C:\cb2e4ebb9a8f575ef234429e
2017-11-19 15:03:05 ----D---- C:\bcdafdadcfe3345134ae6fed56
2017-11-19 14:31:07 ----D---- C:\Program Files (x86)\Western Digital Corporation
2017-11-19 14:23:02 ----D---- C:\Users\uzivatel\AppData\Roaming\HD Tune Pro
2017-11-19 14:05:28 ----D---- C:\Program Files (x86)\HD Tune Pro
2017-11-17 17:26:53 ----D---- C:\Users\uzivatel\AppData\Roaming\Burnaware
2017-11-15 14:37:42 ----A---- C:\Windows\system32\mshtml.dll
2017-11-15 14:37:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-11-15 14:37:38 ----A---- C:\Windows\system32\ieframe.dll
2017-11-15 14:37:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-11-15 14:37:36 ----A---- C:\Windows\system32\jscript9.dll
2017-11-15 14:37:35 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-11-15 14:37:35 ----A---- C:\Windows\system32\wininet.dll
2017-11-15 14:37:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-11-15 14:37:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-11-15 14:37:34 ----A---- C:\Windows\system32\iertutil.dll
2017-11-15 14:37:33 ----A---- C:\Windows\system32\wmp.dll
2017-11-15 14:37:33 ----A---- C:\Windows\system32\win32k.sys
2017-11-15 14:37:33 ----A---- C:\Windows\system32\urlmon.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-11-15 14:37:31 ----A---- C:\Windows\system32\jscript.dll
2017-11-15 14:37:31 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-11-15 14:37:30 ----A---- C:\Windows\system32\ucrtbase.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-11-15 14:37:28 ----A---- C:\Windows\system32\vbscript.dll
2017-11-15 14:37:28 ----A---- C:\Windows\system32\tquery.dll
2017-11-15 14:37:27 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\t2embed.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\Query.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\msfeeds.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 14:37:26 ----A---- C:\Windows\system32\iedkcs32.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\atmfd.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\drivers\usbhub.sys
2017-11-15 14:37:25 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-15 14:37:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-11-15 14:37:24 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2017-11-15 14:37:24 ----A---- C:\Windows\system32\webcheck.dll
2017-11-15 14:37:24 ----A---- C:\Windows\system32\drivers\luafv.sys
2017-11-15 14:37:23 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\mssrch.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\ie4uinit.exe
2017-11-15 14:37:23 ----A---- C:\Windows\system32\drivers\usbport.sys
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mssvp.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mssph.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mshtmled.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\ieui.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\ieapfltr.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\dxtrans.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\dxtmsft.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\msrating.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\jsproxy.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\jscript9diag.dll
2017-11-15 14:37:19 ----A---- C:\Windows\system32\occache.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssprxy.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssphtb.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssitlb.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\inseng.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\ieUnatt.exe
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 14:37:16 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\lpk.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\iesetup.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-11-15 14:37:15 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-11-15 14:37:15 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\spwmp.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-11-15 14:37:14 ----A---- C:\Windows\system32\msscntrs.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\iernonce.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-11-15 14:37:14 ----A---- C:\Windows\system32\fontsub.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\dciman32.dll
2017-11-15 14:37:13 ----A---- C:\Windows\system32\msshooks.dll
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\lpk.dll
2017-11-15 14:37:12 ----A---- C:\Windows\system32\dxmasf.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2017-11-15 14:37:10 ----A---- C:\Windows\system32\drivers\usbohci.sys
2017-11-15 14:37:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2017-11-15 14:37:09 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2017-11-15 14:37:09 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-11-15 14:37:09 ----A---- C:\Windows\system32\wmploc.DLL
2017-11-15 14:37:09 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2017-11-15 14:37:09 ----A---- C:\Windows\system32\drivers\usbd.sys
2017-11-15 14:37:09 ----A---- C:\Windows\system32\atmlib.dll
2017-11-15 14:37:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\appraiser.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\aitstatic.exe
2017-11-15 14:30:49 ----A---- C:\Windows\system32\aeinv.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\acmigration.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\invagent.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\generaltel.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\devinv.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-11-15 14:30:48 ----A---- C:\Windows\system32\centel.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\aepic.dll
2017-11-10 23:03:44 ----D---- C:\Users\uzivatel\AppData\Roaming\Battlerite
2017-11-02 22:07:30 ----D---- C:\Program Files (x86)\F1 Challenge 99-02
2017-11-02 22:06:39 ----D---- C:\Users\uzivatel\AppData\Roaming\GHISLER
2017-11-02 22:06:39 ----D---- C:\totalcmd
2017-10-30 19:09:30 ----D---- C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\XAudio2_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\xactengine3_7.dll
2017-10-30 19:08:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2017-10-30 19:08:50 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\system32\d3dx11_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\system32\d3dcsx_43.dll
2017-10-30 19:08:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2017-10-30 19:08:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2017-10-30 19:08:46 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2017-10-30 19:08:46 ----A---- C:\Windows\system32\D3DX9_43.dll
2017-10-30 19:08:45 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2017-10-30 19:08:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2017-10-30 19:08:45 ----A---- C:\Windows\system32\XAudio2_6.dll
2017-10-30 19:08:45 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2017-10-30 19:08:44 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2017-10-30 19:08:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2017-10-30 19:08:44 ----A---- C:\Windows\system32\xactengine3_6.dll
2017-10-30 19:08:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2017-10-30 19:08:42 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\system32\XAudio2_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2017-10-30 19:08:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2017-10-30 19:08:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2017-10-30 19:08:38 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2017-10-30 19:08:38 ----A---- C:\Windows\system32\d3dcsx_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\system32\d3dx11_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\system32\d3dx10_42.dll
2017-10-30 19:08:34 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2017-10-30 19:08:34 ----A---- C:\Windows\system32\D3DX9_42.dll
2017-10-30 19:08:32 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\system32\d3dx10_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2017-10-30 19:08:30 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2017-10-30 19:08:30 ----A---- C:\Windows\system32\D3DX9_41.dll
2017-10-30 19:08:29 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2017-10-30 19:08:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2017-10-30 19:08:29 ----A---- C:\Windows\system32\XAudio2_4.dll
2017-10-30 19:08:29 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2017-10-30 19:08:28 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2017-10-30 19:08:28 ----A---- C:\Windows\system32\xactengine3_4.dll
2017-10-30 19:08:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2017-10-30 19:08:27 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2017-10-30 19:08:25 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\system32\d3dx10_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2017-10-30 19:08:23 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2017-10-30 19:08:23 ----A---- C:\Windows\system32\D3DX9_40.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\XAudio2_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\xactengine3_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\XAudio2_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\xactengine3_2.dll
2017-10-30 19:08:16 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\system32\d3dx10_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2017-10-30 19:08:14 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2017-10-30 19:08:14 ----A---- C:\Windows\system32\D3DX9_39.dll
2017-10-30 19:08:13 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2017-10-30 19:08:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2017-10-30 19:08:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2017-10-30 19:08:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2017-10-30 19:08:12 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2017-10-30 19:08:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2017-10-30 19:08:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2017-10-30 19:08:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2017-10-30 19:08:10 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\system32\d3dx10_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2017-10-30 19:08:07 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2017-10-30 19:08:07 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2017-10-30 19:08:07 ----A---- C:\Windows\system32\XAudio2_0.dll
2017-10-30 19:08:07 ----A---- C:\Windows\system32\D3DX9_38.dll
2017-10-30 19:08:06 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2017-10-30 19:08:06 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2017-10-30 19:08:06 ----A---- C:\Windows\system32\xactengine3_0.dll
2017-10-30 19:08:06 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2017-10-30 19:08:03 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\system32\d3dx10_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2017-10-30 19:08:01 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2017-10-30 19:08:01 ----A---- C:\Windows\system32\D3DX9_37.dll
2017-10-30 19:08:00 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2017-10-30 19:08:00 ----A---- C:\Windows\system32\xactengine2_10.dll
2017-10-30 19:07:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2017-10-30 19:07:54 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2017-10-30 19:07:54 ----A---- C:\Windows\system32\d3dx9_36.dll
2017-10-30 19:07:53 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2017-10-30 19:07:53 ----A---- C:\Windows\system32\xactengine2_9.dll
2017-10-30 19:07:52 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\system32\d3dx10_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2017-10-30 19:07:49 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2017-10-30 19:07:49 ----A---- C:\Windows\system32\d3dx9_35.dll
2017-10-30 19:07:48 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2017-10-30 19:07:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2017-10-30 19:07:48 ----A---- C:\Windows\system32\xactengine2_8.dll
2017-10-30 19:07:48 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2017-10-30 19:07:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2017-10-30 19:07:45 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2017-10-30 19:07:45 ----A---- C:\Windows\system32\d3dx9_34.dll
2017-10-30 19:07:44 ----A---- C:\Windows\system32\xinput1_3.dll
2017-10-30 19:07:43 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2017-10-30 19:07:43 ----A---- C:\Windows\system32\xactengine2_7.dll
2017-10-30 19:07:42 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\system32\d3dx10_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2017-10-30 19:07:39 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2017-10-30 19:07:39 ----A---- C:\Windows\system32\d3dx9_33.dll
2017-10-30 19:07:38 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2017-10-30 19:07:38 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2017-10-30 19:07:38 ----A---- C:\Windows\system32\xactengine2_6.dll
2017-10-30 19:07:38 ----A---- C:\Windows\system32\xactengine2_5.dll
2017-10-30 19:07:37 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2017-10-30 19:07:37 ----A---- C:\Windows\system32\d3dx10.dll
2017-10-30 19:07:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2017-10-30 19:07:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2017-10-30 19:07:34 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2017-10-30 19:07:34 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2017-10-30 19:07:34 ----A---- C:\Windows\system32\xactengine2_4.dll
2017-10-30 19:07:34 ----A---- C:\Windows\system32\x3daudio1_1.dll
2017-10-30 19:07:32 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2017-10-30 19:07:32 ----A---- C:\Windows\system32\d3dx9_31.dll
2017-10-30 19:07:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2017-10-30 19:07:31 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2017-10-30 19:07:31 ----A---- C:\Windows\system32\xinput1_2.dll
2017-10-30 19:07:31 ----A---- C:\Windows\system32\xactengine2_3.dll
2017-10-30 19:07:30 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2017-10-30 19:07:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2017-10-30 19:07:29 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2017-10-30 19:07:29 ----A---- C:\Windows\system32\xinput1_1.dll
2017-10-30 19:07:28 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2017-10-30 19:07:28 ----A---- C:\Windows\system32\xactengine2_1.dll
2017-10-30 19:07:20 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2017-10-30 19:07:20 ----A---- C:\Windows\system32\d3dx9_30.dll
2017-10-30 19:07:18 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\system32\xactengine2_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\system32\x3daudio1_0.dll
2017-10-30 19:07:16 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2017-10-30 19:07:16 ----A---- C:\Windows\system32\d3dx9_29.dll
2017-10-30 19:07:15 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2017-10-30 19:07:15 ----A---- C:\Windows\system32\d3dx9_28.dll
2017-10-30 19:07:12 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2017-10-30 19:07:12 ----A---- C:\Windows\system32\d3dx9_27.dll
2017-10-30 19:07:10 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2017-10-30 19:07:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2017-10-30 19:07:09 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2017-10-30 19:07:09 ----A---- C:\Windows\system32\d3dx9_25.dll
2017-10-30 19:07:08 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2017-10-30 19:07:08 ----A---- C:\Windows\system32\d3dx9_24.dll
2017-10-23 18:45:21 ----D---- C:\Program Files (x86)\OpenAL
2017-10-23 18:45:21 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2017-10-23 18:45:21 ----A---- C:\Windows\system32\wrap_oal.dll
2017-10-23 18:45:21 ----A---- C:\Windows\system32\OpenAL32.dll
2017-10-23 18:45:17 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2017-10-22 21:01:39 ----D---- C:\Users\uzivatel\AppData\Roaming\Fallout

======List of files/folders modified in the last 1 month======

2017-11-21 17:04:04 ----D---- C:\Windows\Temp
2017-11-21 17:04:04 ----D---- C:\Windows\system32\config
2017-11-21 17:03:58 ----D---- C:\Windows\Prefetch
2017-11-21 17:02:24 ----RD---- C:\Program Files
2017-11-21 16:53:38 ----D---- C:\Windows\system32\drivers
2017-11-21 16:12:08 ----A---- C:\Windows\SYSWOW64\log.txt
2017-11-21 16:11:56 ----AD---- C:\Windows
2017-11-21 16:11:53 ----D---- C:\ProgramData\NVIDIA
2017-11-21 16:10:56 ----D---- C:\Windows\SysWOW64
2017-11-21 09:16:08 ----D---- C:\Windows\inf
2017-11-21 09:15:40 ----HD---- C:\ProgramData
2017-11-21 09:13:19 ----RD---- C:\Program Files (x86)
2017-11-20 20:21:02 ----D---- C:\Windows\Panther
2017-11-20 20:20:38 ----D---- C:\Windows\Logs
2017-11-20 20:20:38 ----D---- C:\Windows\debug
2017-11-20 05:26:35 ----SHD---- C:\System Volume Information
2017-11-20 04:52:28 ----D---- C:\Windows\rescache
2017-11-19 21:52:32 ----D---- C:\Windows\Microsoft.NET
2017-11-19 20:35:22 ----D---- C:\Program Files (x86)\Steam
2017-11-19 18:54:15 ----D---- C:\ProgramData\Origin
2017-11-19 17:31:23 ----SHD---- C:\Windows\Installer
2017-11-19 15:02:21 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-11-19 15:01:36 ----D---- C:\Windows\System32
2017-11-19 15:01:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-18 23:46:03 ----D---- C:\Windows\system32\MRT
2017-11-18 23:38:00 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-11-18 23:37:43 ----AC---- C:\Windows\system32\MRT.exe
2017-11-18 19:24:05 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2017-11-16 22:52:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-16 19:10:41 ----D---- C:\Users\uzivatel\AppData\Roaming\Mozilla
2017-11-16 19:10:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-11-16 09:47:22 ----D---- C:\Windows\winsxs
2017-11-16 09:43:45 ----D---- C:\Program Files\Internet Explorer
2017-11-16 09:43:44 ----D---- C:\Program Files\Windows Media Player
2017-11-16 09:43:44 ----D---- C:\Program Files (x86)\Internet Explorer
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\sk-SK
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\migration
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\en-US
2017-11-16 09:43:43 ----D---- C:\Program Files (x86)\Windows Media Player
2017-11-16 09:43:40 ----D---- C:\Windows\system32\sk-SK
2017-11-16 09:43:40 ----D---- C:\Windows\system32\migration
2017-11-16 09:43:40 ----D---- C:\Windows\system32\drivers\en-US
2017-11-16 09:43:39 ----D---- C:\Windows\system32\en-US
2017-11-16 09:43:34 ----D---- C:\Windows\system32\appraiser
2017-11-16 09:43:34 ----D---- C:\Windows\AppPatch
2017-11-16 09:43:32 ----D---- C:\Windows\system32\DriverStore
2017-11-15 14:34:43 ----D---- C:\Windows\system32\catroot2
2017-11-14 20:35:41 ----D---- C:\Windows\system32\Tasks
2017-11-13 19:42:35 ----D---- C:\Windows\system32\LogFiles
2017-11-13 19:41:44 ----RSD---- C:\Windows\assembly
2017-11-02 08:43:07 ----D---- C:\Users\uzivatel\AppData\Roaming\NVIDIA
2017-11-01 22:50:20 ----D---- C:\ProgramData\Codemasters
2017-11-01 22:41:22 ----D---- C:\Users\uzivatel\AppData\Roaming\bf2battlelog

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-05-04 107344]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-08-09 132824]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-05-04 178056]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-05-04 78192]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-05-04 60544]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-05-04 101648]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-05-04 50752]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-01-05 1580584]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-02 2263584]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-01-18 75304]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-11-14 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-14 56384]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-02-05 316464]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-12-14 53800]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-01-15 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 21288]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-14 27584]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-29 23200]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-01-12 873248]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-02-25 325200]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-08-09 2625368]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-10 820768]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-11-14 1163712]
R2 Greg_Service;GRegService; C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-24 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 262144]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-09 250368]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-11-14 1879488]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 ODDPwrSvc;Acer ODD Power Service; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-02-05 171040]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2010-02-03 244904]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-11-14 426040]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-11 153168]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-11-14 2521024]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2017-11-01 1530888]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-11 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-10-14 116224]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-11-16 194000]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-02-01 305520]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-11-14 3632576]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2017-07-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner 7.0.4.0 - Logfile created on Tue Nov 21 18:30:41 2017
# Updated on 2017/27/10 by Malwarebytes
# Database: 11-21-2017.1
# Running on Windows 7 Home Premium (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

Adware.LoadMoney, C:\ProgramData\Partner
Adware.LoadMoney, C:\ProgramData\Application Data\Partner
Adware.LoadMoney, C:\Users\All Users\Partner


***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

# AdwCleaner 7.0.4.0 - Logfile created on Tue Nov 21 18:32:43 2017
# Updated on 2017/27/10 by Malwarebytes
# Running on Windows 7 Home Premium (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\ProgramData\Partner
Deleted: C:\ProgramData\Application Data\Partner
Deleted: C:\Users\All Users\Partner


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1162 B] - [2017/11/21 18:30:41]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2017-11-21 20:38:56
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 476 GB (80%) free of 598 GB
Total RAM: 3959 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:38:59, on 21. 11. 2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18838)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t55j1k75q
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t55j1k75q
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Acer ODD Power Service (ODDPwrSvc) - Acer Incorporated - C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12929 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe"
"C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe"
"C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\PLFSetI.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {0093CF29-93DC-4904-A622-070E25B67069}

C:\Windows\system32\DllHost.exe /Processid:{B366DEBE-645B-43A5-B865-DDD82C345492}
C:\Windows\system32\sppsvc.exe
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\uzivatel\Downloads\RSITx64(1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1easrqfo.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 26.0.0.137 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.131.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.131.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 26.0.0.137 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-07-06 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-06 186944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-02 10038304]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-02-02 877600]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-02-05 324608]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2010-02-05 222240]
"mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-02-01 349552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-05 2046760]
"PLFSetI"=C:\Windows\PLFSetI.exe [2010-01-13 206208]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-03-10 496160]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-11-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-14 1767712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-06-13 9803992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-06-13 9803992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NortonOnlineBackupReminder]
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-25 588648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-03-15 587288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2009-12-24 284696]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-02-01 337264]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2009-12-25 201512]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2009-12-25 401192]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-03-09 260608]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-02-25 1289296]
"MDS_Menu"=C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [2010-03-01 124136]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-11-21 19:27:48 ----D---- C:\AdwCleaner
2017-11-21 17:02:24 ----D---- C:\rsit
2017-11-21 17:02:24 ----D---- C:\Program Files\trend micro
2017-11-21 09:15:40 ----D---- C:\ProgramData\MB2Migration
2017-11-21 09:13:19 ----D---- C:\ProgramData\Malwarebytes
2017-11-21 09:13:19 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-11-19 17:30:24 ----D---- C:\cb2e4ebb9a8f575ef234429e
2017-11-19 15:03:05 ----D---- C:\bcdafdadcfe3345134ae6fed56
2017-11-19 14:31:07 ----D---- C:\Program Files (x86)\Western Digital Corporation
2017-11-19 14:23:02 ----D---- C:\Users\uzivatel\AppData\Roaming\HD Tune Pro
2017-11-19 14:05:28 ----D---- C:\Program Files (x86)\HD Tune Pro
2017-11-17 17:26:53 ----D---- C:\Users\uzivatel\AppData\Roaming\Burnaware
2017-11-15 14:37:42 ----A---- C:\Windows\system32\mshtml.dll
2017-11-15 14:37:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-11-15 14:37:38 ----A---- C:\Windows\system32\ieframe.dll
2017-11-15 14:37:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-11-15 14:37:36 ----A---- C:\Windows\system32\jscript9.dll
2017-11-15 14:37:35 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-11-15 14:37:35 ----A---- C:\Windows\system32\wininet.dll
2017-11-15 14:37:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-11-15 14:37:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-11-15 14:37:34 ----A---- C:\Windows\system32\iertutil.dll
2017-11-15 14:37:33 ----A---- C:\Windows\system32\wmp.dll
2017-11-15 14:37:33 ----A---- C:\Windows\system32\win32k.sys
2017-11-15 14:37:33 ----A---- C:\Windows\system32\urlmon.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-11-15 14:37:31 ----A---- C:\Windows\system32\jscript.dll
2017-11-15 14:37:31 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-11-15 14:37:30 ----A---- C:\Windows\system32\ucrtbase.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-11-15 14:37:28 ----A---- C:\Windows\system32\vbscript.dll
2017-11-15 14:37:28 ----A---- C:\Windows\system32\tquery.dll
2017-11-15 14:37:27 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\t2embed.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\Query.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\msfeeds.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 14:37:26 ----A---- C:\Windows\system32\iedkcs32.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\atmfd.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\drivers\usbhub.sys
2017-11-15 14:37:25 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-15 14:37:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-11-15 14:37:24 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2017-11-15 14:37:24 ----A---- C:\Windows\system32\webcheck.dll
2017-11-15 14:37:24 ----A---- C:\Windows\system32\drivers\luafv.sys
2017-11-15 14:37:23 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\mssrch.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\ie4uinit.exe
2017-11-15 14:37:23 ----A---- C:\Windows\system32\drivers\usbport.sys
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mssvp.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mssph.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mshtmled.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\ieui.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\ieapfltr.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\dxtrans.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\dxtmsft.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\msrating.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\jsproxy.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\jscript9diag.dll
2017-11-15 14:37:19 ----A---- C:\Windows\system32\occache.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssprxy.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssphtb.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssitlb.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\inseng.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\ieUnatt.exe
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 14:37:16 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\lpk.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\iesetup.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-11-15 14:37:15 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-11-15 14:37:15 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\spwmp.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-11-15 14:37:14 ----A---- C:\Windows\system32\msscntrs.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\iernonce.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-11-15 14:37:14 ----A---- C:\Windows\system32\fontsub.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\dciman32.dll
2017-11-15 14:37:13 ----A---- C:\Windows\system32\msshooks.dll
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\lpk.dll
2017-11-15 14:37:12 ----A---- C:\Windows\system32\dxmasf.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2017-11-15 14:37:10 ----A---- C:\Windows\system32\drivers\usbohci.sys
2017-11-15 14:37:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2017-11-15 14:37:09 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2017-11-15 14:37:09 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-11-15 14:37:09 ----A---- C:\Windows\system32\wmploc.DLL
2017-11-15 14:37:09 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2017-11-15 14:37:09 ----A---- C:\Windows\system32\drivers\usbd.sys
2017-11-15 14:37:09 ----A---- C:\Windows\system32\atmlib.dll
2017-11-15 14:37:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\appraiser.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\aitstatic.exe
2017-11-15 14:30:49 ----A---- C:\Windows\system32\aeinv.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\acmigration.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\invagent.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\generaltel.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\devinv.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-11-15 14:30:48 ----A---- C:\Windows\system32\centel.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\aepic.dll
2017-11-10 23:03:44 ----D---- C:\Users\uzivatel\AppData\Roaming\Battlerite
2017-11-02 22:07:30 ----D---- C:\Program Files (x86)\F1 Challenge 99-02
2017-11-02 22:06:39 ----D---- C:\Users\uzivatel\AppData\Roaming\GHISLER
2017-11-02 22:06:39 ----D---- C:\totalcmd
2017-10-30 19:09:30 ----D---- C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\XAudio2_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\xactengine3_7.dll
2017-10-30 19:08:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2017-10-30 19:08:50 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\system32\d3dx11_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\system32\d3dcsx_43.dll
2017-10-30 19:08:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2017-10-30 19:08:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2017-10-30 19:08:46 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2017-10-30 19:08:46 ----A---- C:\Windows\system32\D3DX9_43.dll
2017-10-30 19:08:45 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2017-10-30 19:08:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2017-10-30 19:08:45 ----A---- C:\Windows\system32\XAudio2_6.dll
2017-10-30 19:08:45 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2017-10-30 19:08:44 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2017-10-30 19:08:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2017-10-30 19:08:44 ----A---- C:\Windows\system32\xactengine3_6.dll
2017-10-30 19:08:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2017-10-30 19:08:42 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\system32\XAudio2_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2017-10-30 19:08:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2017-10-30 19:08:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2017-10-30 19:08:38 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2017-10-30 19:08:38 ----A---- C:\Windows\system32\d3dcsx_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\system32\d3dx11_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\system32\d3dx10_42.dll
2017-10-30 19:08:34 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2017-10-30 19:08:34 ----A---- C:\Windows\system32\D3DX9_42.dll
2017-10-30 19:08:32 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\system32\d3dx10_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2017-10-30 19:08:30 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2017-10-30 19:08:30 ----A---- C:\Windows\system32\D3DX9_41.dll
2017-10-30 19:08:29 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2017-10-30 19:08:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2017-10-30 19:08:29 ----A---- C:\Windows\system32\XAudio2_4.dll
2017-10-30 19:08:29 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2017-10-30 19:08:28 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2017-10-30 19:08:28 ----A---- C:\Windows\system32\xactengine3_4.dll
2017-10-30 19:08:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2017-10-30 19:08:27 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2017-10-30 19:08:25 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\system32\d3dx10_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2017-10-30 19:08:23 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2017-10-30 19:08:23 ----A---- C:\Windows\system32\D3DX9_40.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\XAudio2_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\xactengine3_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\XAudio2_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\xactengine3_2.dll
2017-10-30 19:08:16 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\system32\d3dx10_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2017-10-30 19:08:14 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2017-10-30 19:08:14 ----A---- C:\Windows\system32\D3DX9_39.dll
2017-10-30 19:08:13 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2017-10-30 19:08:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2017-10-30 19:08:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2017-10-30 19:08:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2017-10-30 19:08:12 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2017-10-30 19:08:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2017-10-30 19:08:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2017-10-30 19:08:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2017-10-30 19:08:10 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\system32\d3dx10_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2017-10-30 19:08:07 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2017-10-30 19:08:07 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2017-10-30 19:08:07 ----A---- C:\Windows\system32\XAudio2_0.dll
2017-10-30 19:08:07 ----A---- C:\Windows\system32\D3DX9_38.dll
2017-10-30 19:08:06 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2017-10-30 19:08:06 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2017-10-30 19:08:06 ----A---- C:\Windows\system32\xactengine3_0.dll
2017-10-30 19:08:06 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2017-10-30 19:08:03 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\system32\d3dx10_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2017-10-30 19:08:01 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2017-10-30 19:08:01 ----A---- C:\Windows\system32\D3DX9_37.dll
2017-10-30 19:08:00 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2017-10-30 19:08:00 ----A---- C:\Windows\system32\xactengine2_10.dll
2017-10-30 19:07:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2017-10-30 19:07:54 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2017-10-30 19:07:54 ----A---- C:\Windows\system32\d3dx9_36.dll
2017-10-30 19:07:53 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2017-10-30 19:07:53 ----A---- C:\Windows\system32\xactengine2_9.dll
2017-10-30 19:07:52 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\system32\d3dx10_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2017-10-30 19:07:49 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2017-10-30 19:07:49 ----A---- C:\Windows\system32\d3dx9_35.dll
2017-10-30 19:07:48 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2017-10-30 19:07:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2017-10-30 19:07:48 ----A---- C:\Windows\system32\xactengine2_8.dll
2017-10-30 19:07:48 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2017-10-30 19:07:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2017-10-30 19:07:45 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2017-10-30 19:07:45 ----A---- C:\Windows\system32\d3dx9_34.dll
2017-10-30 19:07:44 ----A---- C:\Windows\system32\xinput1_3.dll
2017-10-30 19:07:43 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2017-10-30 19:07:43 ----A---- C:\Windows\system32\xactengine2_7.dll
2017-10-30 19:07:42 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\system32\d3dx10_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2017-10-30 19:07:39 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2017-10-30 19:07:39 ----A---- C:\Windows\system32\d3dx9_33.dll
2017-10-30 19:07:38 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2017-10-30 19:07:38 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2017-10-30 19:07:38 ----A---- C:\Windows\system32\xactengine2_6.dll
2017-10-30 19:07:38 ----A---- C:\Windows\system32\xactengine2_5.dll
2017-10-30 19:07:37 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2017-10-30 19:07:37 ----A---- C:\Windows\system32\d3dx10.dll
2017-10-30 19:07:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2017-10-30 19:07:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2017-10-30 19:07:34 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2017-10-30 19:07:34 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2017-10-30 19:07:34 ----A---- C:\Windows\system32\xactengine2_4.dll
2017-10-30 19:07:34 ----A---- C:\Windows\system32\x3daudio1_1.dll
2017-10-30 19:07:32 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2017-10-30 19:07:32 ----A---- C:\Windows\system32\d3dx9_31.dll
2017-10-30 19:07:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2017-10-30 19:07:31 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2017-10-30 19:07:31 ----A---- C:\Windows\system32\xinput1_2.dll
2017-10-30 19:07:31 ----A---- C:\Windows\system32\xactengine2_3.dll
2017-10-30 19:07:30 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2017-10-30 19:07:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2017-10-30 19:07:29 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2017-10-30 19:07:29 ----A---- C:\Windows\system32\xinput1_1.dll
2017-10-30 19:07:28 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2017-10-30 19:07:28 ----A---- C:\Windows\system32\xactengine2_1.dll
2017-10-30 19:07:20 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2017-10-30 19:07:20 ----A---- C:\Windows\system32\d3dx9_30.dll
2017-10-30 19:07:18 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\system32\xactengine2_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\system32\x3daudio1_0.dll
2017-10-30 19:07:16 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2017-10-30 19:07:16 ----A---- C:\Windows\system32\d3dx9_29.dll
2017-10-30 19:07:15 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2017-10-30 19:07:15 ----A---- C:\Windows\system32\d3dx9_28.dll
2017-10-30 19:07:12 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2017-10-30 19:07:12 ----A---- C:\Windows\system32\d3dx9_27.dll
2017-10-30 19:07:10 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2017-10-30 19:07:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2017-10-30 19:07:09 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2017-10-30 19:07:09 ----A---- C:\Windows\system32\d3dx9_25.dll
2017-10-30 19:07:08 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2017-10-30 19:07:08 ----A---- C:\Windows\system32\d3dx9_24.dll
2017-10-23 18:45:21 ----D---- C:\Program Files (x86)\OpenAL
2017-10-23 18:45:21 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2017-10-23 18:45:21 ----A---- C:\Windows\system32\wrap_oal.dll
2017-10-23 18:45:21 ----A---- C:\Windows\system32\OpenAL32.dll
2017-10-23 18:45:17 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2017-10-22 21:01:39 ----D---- C:\Users\uzivatel\AppData\Roaming\Fallout

======List of files/folders modified in the last 1 month======

2017-11-21 20:36:42 ----D---- C:\Windows\system32\config
2017-11-21 20:36:35 ----D---- C:\Windows\Temp
2017-11-21 19:51:56 ----D---- C:\Windows\Prefetch
2017-11-21 19:34:49 ----A---- C:\Windows\SYSWOW64\log.txt
2017-11-21 19:34:36 ----D---- C:\ProgramData\NVIDIA
2017-11-21 19:32:40 ----HD---- C:\ProgramData
2017-11-21 17:02:24 ----RD---- C:\Program Files
2017-11-21 16:53:38 ----D---- C:\Windows\system32\drivers
2017-11-21 16:11:56 ----AD---- C:\Windows
2017-11-21 16:10:56 ----D---- C:\Windows\SysWOW64
2017-11-21 09:16:08 ----D---- C:\Windows\inf
2017-11-21 09:13:19 ----RD---- C:\Program Files (x86)
2017-11-20 20:21:02 ----D---- C:\Windows\Panther
2017-11-20 20:20:38 ----D---- C:\Windows\Logs
2017-11-20 20:20:38 ----D---- C:\Windows\debug
2017-11-20 05:26:35 ----SHD---- C:\System Volume Information
2017-11-20 04:52:28 ----D---- C:\Windows\rescache
2017-11-19 21:52:32 ----D---- C:\Windows\Microsoft.NET
2017-11-19 20:35:22 ----D---- C:\Program Files (x86)\Steam
2017-11-19 18:54:15 ----D---- C:\ProgramData\Origin
2017-11-19 17:31:23 ----SHD---- C:\Windows\Installer
2017-11-19 15:02:21 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-11-19 15:01:36 ----D---- C:\Windows\System32
2017-11-19 15:01:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-18 23:46:03 ----D---- C:\Windows\system32\MRT
2017-11-18 23:38:00 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-11-18 23:37:43 ----AC---- C:\Windows\system32\MRT.exe
2017-11-18 19:24:05 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2017-11-16 22:52:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-16 19:10:41 ----D---- C:\Users\uzivatel\AppData\Roaming\Mozilla
2017-11-16 19:10:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-11-16 09:47:22 ----D---- C:\Windows\winsxs
2017-11-16 09:43:45 ----D---- C:\Program Files\Internet Explorer
2017-11-16 09:43:44 ----D---- C:\Program Files\Windows Media Player
2017-11-16 09:43:44 ----D---- C:\Program Files (x86)\Internet Explorer
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\sk-SK
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\migration
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\en-US
2017-11-16 09:43:43 ----D---- C:\Program Files (x86)\Windows Media Player
2017-11-16 09:43:40 ----D---- C:\Windows\system32\sk-SK
2017-11-16 09:43:40 ----D---- C:\Windows\system32\migration
2017-11-16 09:43:40 ----D---- C:\Windows\system32\drivers\en-US
2017-11-16 09:43:39 ----D---- C:\Windows\system32\en-US
2017-11-16 09:43:34 ----D---- C:\Windows\system32\appraiser
2017-11-16 09:43:34 ----D---- C:\Windows\AppPatch
2017-11-16 09:43:32 ----D---- C:\Windows\system32\DriverStore
2017-11-15 14:34:43 ----D---- C:\Windows\system32\catroot2
2017-11-14 20:35:41 ----D---- C:\Windows\system32\Tasks
2017-11-13 19:42:35 ----D---- C:\Windows\system32\LogFiles
2017-11-13 19:41:44 ----RSD---- C:\Windows\assembly
2017-11-02 08:43:07 ----D---- C:\Users\uzivatel\AppData\Roaming\NVIDIA
2017-11-01 22:50:20 ----D---- C:\ProgramData\Codemasters
2017-11-01 22:41:22 ----D---- C:\Users\uzivatel\AppData\Roaming\bf2battlelog

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-05-04 107344]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-08-09 132824]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-05-04 178056]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-05-04 78192]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-05-04 60544]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-05-04 101648]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-05-04 50752]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-01-05 1580584]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-02 2263584]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-01-18 75304]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-11-14 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-14 56384]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-02-05 316464]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-12-14 53800]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-01-15 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 21288]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-29 23200]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-01-12 873248]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-02-25 325200]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-08-09 2625368]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-10 820768]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-11-14 1163712]
R2 Greg_Service;GRegService; C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-24 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 262144]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-09 250368]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-11-14 1879488]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 ODDPwrSvc;Acer ODD Power Service; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-02-05 171040]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2010-02-03 244904]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-11-14 426040]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-11 153168]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-11-14 2521024]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2017-11-01 1530888]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-11 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-10-14 116224]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-11-16 194000]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-02-01 305520]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-11-14 3632576]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2017-07-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP

:reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]/64

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Prikladám pre istotu log z OTM

All processes killed
========== FILES ==========
C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP folder moved successfully.
========== REGISTRY ==========
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 315184 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: uzivatel
->Temp folder emptied: 6210824 bytes
->Temporary Internet Files folder emptied: 388757 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 390494222 bytes
->Google Chrome cache emptied: 6436391 bytes
->Flash cache emptied: 315695 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 874 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 730 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 58525348 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 441,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

User: uzivatel
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 11212017_213703

Files moved on Reboot...
File move failed. C:\Users\uzivatel\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\b9928bf7aa10148369087e55f224ad6b_fce8395f8fd8a80a_6229ccd76215aea1_0_0.bin scheduled to be moved on reboot.
File move failed. C:\Users\uzivatel\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\b9928bf7aa10148369087e55f224ad6b_fce8395f8fd8a80a_6229ccd76215aea1_0_0.toc scheduled to be moved on reboot.
C:\Users\uzivatel\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\uzivatel\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2017-11-21 21:54:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 476 GB (80%) free of 598 GB
Total RAM: 3959 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:54:42, on 21. 11. 2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18838)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t55j1k75q
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t55j1k75q
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Acer ODD Power Service (ODDPwrSvc) - Acer Incorporated - C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12929 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Security\ekrn.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe"
"C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "2141833071-1357304541802633153-1795401162-6374108202051837811-350465103-1506560522
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe"
"C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\PLFSetI.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
taskeng.exe {81F4A587-32E8-4534-B132-2A614EE35B89}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3656.0.1655774086\676107677" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\uzivatel\AppData\LocalLow\Mozilla\Temp-{6f2f388b-a939-4932-87c4-c30a865f3306}" 3656 "\\.\pipe\gecko-crash-server-pipe.3656" gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3656.3.270507931\1621849588" -childID 1 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3656 "\\.\pipe\gecko-crash-server-pipe.3656" tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="3656.13.1173436518\141802470" -childID 2 -isForBrowser -intPrefs 5:50|6:-1|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|98:2|99:1|114:5000|124:0|126:0|137:10000|149:-1|154:128|155:10000|156:0|162:24|163:32768|165:0|166:0|174:5|178:1048576|179:100|180:5000|182:600|184:1|193:3|197:0|206:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:1|85:0|86:0|88:0|89:0|90:1|91:0|92:1|95:1|97:0|100:1|101:0|108:0|113:0|116:1|119:1|121:1|125:0|128:1|131:1|132:1|138:1|139:0|140:1|142:0|148:0|150:1|151:0|152:1|153:1|160:0|161:0|164:1|167:0|169:1|171:1|172:0|177:0|181:1|186:0|187:0|188:0|189:1|190:0|191:1|192:1|195:0|198:0|199:0|200:1|201:1|202:0|203:1|204:1|205:1|207:0|208:0|210:0|218:1|219:1|220:0|221:0|222:0| -stringPrefs "3:7;release|96:0;|141:3;1.0|158:332;  ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵           ​‎‏‐’․‧

‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ�|159:4;high|194:38;{6f2f388b-a939-4932-87c4-c30a865f3306}|" -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 3656 "\\.\pipe\gecko-crash-server-pipe.3656" tab

"C:\Users\uzivatel\Downloads\RSITx64(1).exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

=========Mozilla firefox=========

ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1easrqfo.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 26.0.0.137 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.131.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.131.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 26.0.0.137 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-07-06 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-06 186944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-02 10038304]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-02-02 877600]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-02-05 324608]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2010-02-05 222240]
"mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-02-01 349552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-05 2046760]
"PLFSetI"=C:\Windows\PLFSetI.exe [2010-01-13 206208]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-03-10 496160]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-11-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-14 1767712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-06-13 9803992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-06-13 9803992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NortonOnlineBackupReminder]
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-25 588648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe -silent []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2009-12-24 284696]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-02-01 337264]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2009-12-25 201512]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2009-12-25 401192]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-03-09 260608]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-02-25 1289296]
"MDS_Menu"=C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [2010-03-01 124136]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-11-21 21:37:03 ----D---- C:\_OTM
2017-11-21 19:27:48 ----D---- C:\AdwCleaner
2017-11-21 17:02:24 ----D---- C:\rsit
2017-11-21 17:02:24 ----D---- C:\Program Files\trend micro
2017-11-21 09:15:40 ----D---- C:\ProgramData\MB2Migration
2017-11-21 09:13:19 ----D---- C:\ProgramData\Malwarebytes
2017-11-21 09:13:19 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-11-19 17:30:24 ----D---- C:\cb2e4ebb9a8f575ef234429e
2017-11-19 15:03:05 ----D---- C:\bcdafdadcfe3345134ae6fed56
2017-11-19 14:31:07 ----D---- C:\Program Files (x86)\Western Digital Corporation
2017-11-19 14:23:02 ----D---- C:\Users\uzivatel\AppData\Roaming\HD Tune Pro
2017-11-19 14:05:28 ----D---- C:\Program Files (x86)\HD Tune Pro
2017-11-17 17:26:53 ----D---- C:\Users\uzivatel\AppData\Roaming\Burnaware
2017-11-15 14:37:42 ----A---- C:\Windows\system32\mshtml.dll
2017-11-15 14:37:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-11-15 14:37:38 ----A---- C:\Windows\system32\ieframe.dll
2017-11-15 14:37:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-11-15 14:37:36 ----A---- C:\Windows\system32\jscript9.dll
2017-11-15 14:37:35 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-11-15 14:37:35 ----A---- C:\Windows\system32\wininet.dll
2017-11-15 14:37:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-11-15 14:37:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-11-15 14:37:34 ----A---- C:\Windows\system32\iertutil.dll
2017-11-15 14:37:33 ----A---- C:\Windows\system32\wmp.dll
2017-11-15 14:37:33 ----A---- C:\Windows\system32\win32k.sys
2017-11-15 14:37:33 ----A---- C:\Windows\system32\urlmon.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-11-15 14:37:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-11-15 14:37:31 ----A---- C:\Windows\system32\jscript.dll
2017-11-15 14:37:31 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-11-15 14:37:30 ----A---- C:\Windows\system32\ucrtbase.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2017-11-15 14:37:29 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\Query.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-11-15 14:37:28 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-11-15 14:37:28 ----A---- C:\Windows\system32\vbscript.dll
2017-11-15 14:37:28 ----A---- C:\Windows\system32\tquery.dll
2017-11-15 14:37:27 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\t2embed.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\Query.dll
2017-11-15 14:37:27 ----A---- C:\Windows\system32\msfeeds.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 14:37:26 ----A---- C:\Windows\system32\iedkcs32.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\atmfd.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 14:37:26 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\drivers\usbhub.sys
2017-11-15 14:37:25 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-15 14:37:25 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-15 14:37:24 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-11-15 14:37:24 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2017-11-15 14:37:24 ----A---- C:\Windows\system32\webcheck.dll
2017-11-15 14:37:24 ----A---- C:\Windows\system32\drivers\luafv.sys
2017-11-15 14:37:23 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\mssrch.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-11-15 14:37:23 ----A---- C:\Windows\system32\ie4uinit.exe
2017-11-15 14:37:23 ----A---- C:\Windows\system32\drivers\usbport.sys
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mssvp.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mssph.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\mshtmled.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\ieui.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\ieapfltr.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\dxtrans.dll
2017-11-15 14:37:22 ----A---- C:\Windows\system32\dxtmsft.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2017-11-15 14:37:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\msrating.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\jsproxy.dll
2017-11-15 14:37:20 ----A---- C:\Windows\system32\jscript9diag.dll
2017-11-15 14:37:19 ----A---- C:\Windows\system32\occache.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-11-15 14:37:18 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\msrating.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-11-15 14:37:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssprxy.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssphtb.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\mssitlb.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\inseng.dll
2017-11-15 14:37:17 ----A---- C:\Windows\system32\ieUnatt.exe
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2017-11-15 14:37:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 14:37:16 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\lpk.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\iesetup.dll
2017-11-15 14:37:16 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-11-15 14:37:15 ----A---- C:\Windows\SYSWOW64\inseng.dll
2017-11-15 14:37:15 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2017-11-15 14:37:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\spwmp.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-11-15 14:37:14 ----A---- C:\Windows\system32\msscntrs.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\iernonce.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-11-15 14:37:14 ----A---- C:\Windows\system32\fontsub.dll
2017-11-15 14:37:14 ----A---- C:\Windows\system32\dciman32.dll
2017-11-15 14:37:13 ----A---- C:\Windows\system32\msshooks.dll
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2017-11-15 14:37:12 ----A---- C:\Windows\SYSWOW64\lpk.dll
2017-11-15 14:37:12 ----A---- C:\Windows\system32\dxmasf.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2017-11-15 14:37:11 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2017-11-15 14:37:10 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2017-11-15 14:37:10 ----A---- C:\Windows\system32\drivers\usbohci.sys
2017-11-15 14:37:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2017-11-15 14:37:09 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2017-11-15 14:37:09 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-11-15 14:37:09 ----A---- C:\Windows\system32\wmploc.DLL
2017-11-15 14:37:09 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2017-11-15 14:37:09 ----A---- C:\Windows\system32\drivers\usbd.sys
2017-11-15 14:37:09 ----A---- C:\Windows\system32\atmlib.dll
2017-11-15 14:37:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\appraiser.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\aitstatic.exe
2017-11-15 14:30:49 ----A---- C:\Windows\system32\aeinv.dll
2017-11-15 14:30:49 ----A---- C:\Windows\system32\acmigration.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\invagent.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\generaltel.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\devinv.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-11-15 14:30:48 ----A---- C:\Windows\system32\centel.dll
2017-11-15 14:30:48 ----A---- C:\Windows\system32\aepic.dll
2017-11-10 23:03:44 ----D---- C:\Users\uzivatel\AppData\Roaming\Battlerite
2017-11-02 22:07:30 ----D---- C:\Program Files (x86)\F1 Challenge 99-02
2017-11-02 22:06:39 ----D---- C:\Users\uzivatel\AppData\Roaming\GHISLER
2017-11-02 22:06:39 ----D---- C:\totalcmd
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2017-10-30 19:08:52 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\XAudio2_7.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2017-10-30 19:08:52 ----A---- C:\Windows\system32\xactengine3_7.dll
2017-10-30 19:08:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2017-10-30 19:08:50 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\system32\d3dx11_43.dll
2017-10-30 19:08:49 ----A---- C:\Windows\system32\d3dcsx_43.dll
2017-10-30 19:08:47 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2017-10-30 19:08:47 ----A---- C:\Windows\system32\d3dx10_43.dll
2017-10-30 19:08:46 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2017-10-30 19:08:46 ----A---- C:\Windows\system32\D3DX9_43.dll
2017-10-30 19:08:45 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2017-10-30 19:08:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2017-10-30 19:08:45 ----A---- C:\Windows\system32\XAudio2_6.dll
2017-10-30 19:08:45 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2017-10-30 19:08:44 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2017-10-30 19:08:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2017-10-30 19:08:44 ----A---- C:\Windows\system32\xactengine3_6.dll
2017-10-30 19:08:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2017-10-30 19:08:42 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\system32\XAudio2_5.dll
2017-10-30 19:08:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2017-10-30 19:08:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2017-10-30 19:08:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2017-10-30 19:08:38 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2017-10-30 19:08:38 ----A---- C:\Windows\system32\d3dcsx_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\system32\d3dx11_42.dll
2017-10-30 19:08:37 ----A---- C:\Windows\system32\d3dx10_42.dll
2017-10-30 19:08:34 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2017-10-30 19:08:34 ----A---- C:\Windows\system32\D3DX9_42.dll
2017-10-30 19:08:32 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\system32\d3dx10_41.dll
2017-10-30 19:08:32 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2017-10-30 19:08:30 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2017-10-30 19:08:30 ----A---- C:\Windows\system32\D3DX9_41.dll
2017-10-30 19:08:29 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2017-10-30 19:08:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2017-10-30 19:08:29 ----A---- C:\Windows\system32\XAudio2_4.dll
2017-10-30 19:08:29 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2017-10-30 19:08:28 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2017-10-30 19:08:28 ----A---- C:\Windows\system32\xactengine3_4.dll
2017-10-30 19:08:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2017-10-30 19:08:27 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2017-10-30 19:08:25 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\system32\d3dx10_40.dll
2017-10-30 19:08:25 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2017-10-30 19:08:23 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2017-10-30 19:08:23 ----A---- C:\Windows\system32\D3DX9_40.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\XAudio2_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\xactengine3_3.dll
2017-10-30 19:08:20 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2017-10-30 19:08:18 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\XAudio2_2.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2017-10-30 19:08:18 ----A---- C:\Windows\system32\xactengine3_2.dll
2017-10-30 19:08:16 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\system32\d3dx10_39.dll
2017-10-30 19:08:16 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2017-10-30 19:08:14 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2017-10-30 19:08:14 ----A---- C:\Windows\system32\D3DX9_39.dll
2017-10-30 19:08:13 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2017-10-30 19:08:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2017-10-30 19:08:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2017-10-30 19:08:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2017-10-30 19:08:12 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2017-10-30 19:08:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2017-10-30 19:08:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2017-10-30 19:08:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2017-10-30 19:08:10 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\system32\d3dx10_38.dll
2017-10-30 19:08:10 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2017-10-30 19:08:07 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2017-10-30 19:08:07 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2017-10-30 19:08:07 ----A---- C:\Windows\system32\XAudio2_0.dll
2017-10-30 19:08:07 ----A---- C:\Windows\system32\D3DX9_38.dll
2017-10-30 19:08:06 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2017-10-30 19:08:06 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2017-10-30 19:08:06 ----A---- C:\Windows\system32\xactengine3_0.dll
2017-10-30 19:08:06 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2017-10-30 19:08:03 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\system32\d3dx10_37.dll
2017-10-30 19:08:03 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2017-10-30 19:08:01 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2017-10-30 19:08:01 ----A---- C:\Windows\system32\D3DX9_37.dll
2017-10-30 19:08:00 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2017-10-30 19:08:00 ----A---- C:\Windows\system32\xactengine2_10.dll
2017-10-30 19:07:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2017-10-30 19:07:58 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2017-10-30 19:07:54 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2017-10-30 19:07:54 ----A---- C:\Windows\system32\d3dx9_36.dll
2017-10-30 19:07:53 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2017-10-30 19:07:53 ----A---- C:\Windows\system32\xactengine2_9.dll
2017-10-30 19:07:52 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\system32\d3dx10_35.dll
2017-10-30 19:07:52 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2017-10-30 19:07:49 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2017-10-30 19:07:49 ----A---- C:\Windows\system32\d3dx9_35.dll
2017-10-30 19:07:48 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2017-10-30 19:07:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2017-10-30 19:07:48 ----A---- C:\Windows\system32\xactengine2_8.dll
2017-10-30 19:07:48 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2017-10-30 19:07:47 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\system32\d3dx10_34.dll
2017-10-30 19:07:47 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2017-10-30 19:07:45 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2017-10-30 19:07:45 ----A---- C:\Windows\system32\d3dx9_34.dll
2017-10-30 19:07:44 ----A---- C:\Windows\system32\xinput1_3.dll
2017-10-30 19:07:43 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2017-10-30 19:07:43 ----A---- C:\Windows\system32\xactengine2_7.dll
2017-10-30 19:07:42 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\system32\d3dx10_33.dll
2017-10-30 19:07:42 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2017-10-30 19:07:39 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2017-10-30 19:07:39 ----A---- C:\Windows\system32\d3dx9_33.dll
2017-10-30 19:07:38 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2017-10-30 19:07:38 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2017-10-30 19:07:38 ----A---- C:\Windows\system32\xactengine2_6.dll
2017-10-30 19:07:38 ----A---- C:\Windows\system32\xactengine2_5.dll
2017-10-30 19:07:37 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2017-10-30 19:07:37 ----A---- C:\Windows\system32\d3dx10.dll
2017-10-30 19:07:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2017-10-30 19:07:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2017-10-30 19:07:34 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2017-10-30 19:07:34 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2017-10-30 19:07:34 ----A---- C:\Windows\system32\xactengine2_4.dll
2017-10-30 19:07:34 ----A---- C:\Windows\system32\x3daudio1_1.dll
2017-10-30 19:07:32 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2017-10-30 19:07:32 ----A---- C:\Windows\system32\d3dx9_31.dll
2017-10-30 19:07:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2017-10-30 19:07:31 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2017-10-30 19:07:31 ----A---- C:\Windows\system32\xinput1_2.dll
2017-10-30 19:07:31 ----A---- C:\Windows\system32\xactengine2_3.dll
2017-10-30 19:07:30 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2017-10-30 19:07:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2017-10-30 19:07:29 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2017-10-30 19:07:29 ----A---- C:\Windows\system32\xinput1_1.dll
2017-10-30 19:07:28 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2017-10-30 19:07:28 ----A---- C:\Windows\system32\xactengine2_1.dll
2017-10-30 19:07:20 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2017-10-30 19:07:20 ----A---- C:\Windows\system32\d3dx9_30.dll
2017-10-30 19:07:18 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\system32\xactengine2_0.dll
2017-10-30 19:07:18 ----A---- C:\Windows\system32\x3daudio1_0.dll
2017-10-30 19:07:16 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2017-10-30 19:07:16 ----A---- C:\Windows\system32\d3dx9_29.dll
2017-10-30 19:07:15 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2017-10-30 19:07:15 ----A---- C:\Windows\system32\d3dx9_28.dll
2017-10-30 19:07:12 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2017-10-30 19:07:12 ----A---- C:\Windows\system32\d3dx9_27.dll
2017-10-30 19:07:10 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2017-10-30 19:07:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2017-10-30 19:07:09 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2017-10-30 19:07:09 ----A---- C:\Windows\system32\d3dx9_25.dll
2017-10-30 19:07:08 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2017-10-30 19:07:08 ----A---- C:\Windows\system32\d3dx9_24.dll
2017-10-23 18:45:21 ----D---- C:\Program Files (x86)\OpenAL
2017-10-23 18:45:21 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2017-10-23 18:45:21 ----A---- C:\Windows\system32\wrap_oal.dll
2017-10-23 18:45:21 ----A---- C:\Windows\system32\OpenAL32.dll
2017-10-23 18:45:17 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2017-10-22 21:01:39 ----D---- C:\Users\uzivatel\AppData\Roaming\Fallout

======List of files/folders modified in the last 1 month======

2017-11-21 21:47:48 ----D---- C:\Windows\Temp
2017-11-21 21:42:35 ----D---- C:\Windows\Prefetch
2017-11-21 21:39:23 ----A---- C:\Windows\SYSWOW64\log.txt
2017-11-21 21:39:09 ----D---- C:\ProgramData\NVIDIA
2017-11-21 21:37:46 ----AD---- C:\Windows
2017-11-21 20:49:04 ----D---- C:\Windows\system32\config
2017-11-21 19:32:40 ----HD---- C:\ProgramData
2017-11-21 17:02:24 ----RD---- C:\Program Files
2017-11-21 16:53:38 ----D---- C:\Windows\system32\drivers
2017-11-21 16:10:56 ----D---- C:\Windows\SysWOW64
2017-11-21 09:16:08 ----D---- C:\Windows\inf
2017-11-21 09:13:19 ----RD---- C:\Program Files (x86)
2017-11-20 20:21:02 ----D---- C:\Windows\Panther
2017-11-20 20:20:38 ----D---- C:\Windows\Logs
2017-11-20 20:20:38 ----D---- C:\Windows\debug
2017-11-20 05:26:35 ----SHD---- C:\System Volume Information
2017-11-20 04:52:28 ----D---- C:\Windows\rescache
2017-11-19 21:52:32 ----D---- C:\Windows\Microsoft.NET
2017-11-19 20:35:22 ----D---- C:\Program Files (x86)\Steam
2017-11-19 18:54:15 ----D---- C:\ProgramData\Origin
2017-11-19 17:31:23 ----SHD---- C:\Windows\Installer
2017-11-19 15:02:21 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2017-11-19 15:01:36 ----D---- C:\Windows\System32
2017-11-19 15:01:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-18 23:46:03 ----D---- C:\Windows\system32\MRT
2017-11-18 23:38:00 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-11-18 23:37:43 ----AC---- C:\Windows\system32\MRT.exe
2017-11-18 19:24:05 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2017-11-16 22:52:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-16 19:10:41 ----D---- C:\Users\uzivatel\AppData\Roaming\Mozilla
2017-11-16 19:10:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-11-16 09:47:22 ----D---- C:\Windows\winsxs
2017-11-16 09:43:45 ----D---- C:\Program Files\Internet Explorer
2017-11-16 09:43:44 ----D---- C:\Program Files\Windows Media Player
2017-11-16 09:43:44 ----D---- C:\Program Files (x86)\Internet Explorer
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\sk-SK
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\migration
2017-11-16 09:43:43 ----D---- C:\Windows\SYSWOW64\en-US
2017-11-16 09:43:43 ----D---- C:\Program Files (x86)\Windows Media Player
2017-11-16 09:43:40 ----D---- C:\Windows\system32\sk-SK
2017-11-16 09:43:40 ----D---- C:\Windows\system32\migration
2017-11-16 09:43:40 ----D---- C:\Windows\system32\drivers\en-US
2017-11-16 09:43:39 ----D---- C:\Windows\system32\en-US
2017-11-16 09:43:34 ----D---- C:\Windows\system32\appraiser
2017-11-16 09:43:34 ----D---- C:\Windows\AppPatch
2017-11-16 09:43:32 ----D---- C:\Windows\system32\DriverStore
2017-11-15 14:34:43 ----D---- C:\Windows\system32\catroot2
2017-11-14 20:35:41 ----D---- C:\Windows\system32\Tasks
2017-11-13 19:42:35 ----D---- C:\Windows\system32\LogFiles
2017-11-13 19:41:44 ----RSD---- C:\Windows\assembly
2017-11-02 08:43:07 ----D---- C:\Users\uzivatel\AppData\Roaming\NVIDIA
2017-11-01 22:50:20 ----D---- C:\ProgramData\Codemasters
2017-11-01 22:41:22 ----D---- C:\Users\uzivatel\AppData\Roaming\bf2battlelog

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2017-05-04 107344]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2017-08-09 132824]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2017-05-04 178056]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2017-05-04 78192]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2017-05-04 60544]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2017-05-04 101648]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2017-05-04 50752]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-01-05 1580584]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-02 2263584]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-01-18 75304]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-05 18432]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-11-14 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-14 27584]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-11-14 56384]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-02-05 316464]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-05 16896]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 119296]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-12-14 53800]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-01-15 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 21288]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-29 23200]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-01-12 873248]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-02-25 325200]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-08-09 2625368]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-10 820768]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-11-14 1163712]
R2 Greg_Service;GRegService; C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-24 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 262144]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-09 250368]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-06 144640]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-11-14 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-11-14 2521024]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728]
R2 ODDPwrSvc;Acer ODD Power Service; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-02-05 171040]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2010-02-03 244904]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-11-14 426040]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-11-14 3632576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2017-04-21 128648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-11 153168]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2017-11-01 1530888]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-09-11 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-10-14 116224]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-11-16 194000]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-02-01 305520]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-06 50432]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2017-07-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Smazáno. Nastala nějaká změna?

Jasné je to 100x lepšie. Mám ešte dve otázky. Bol to vírus? Ak áno tak treba meniť aj hesla na účtoch a aplikáciach? No a posledná otázka. Používal som USB disk na prácu a nakoľko budem meniť HDD z dôvodu vadných sektorov tak by som bol nerád keby sa mi ten vírus(teda ak bol) preniesol aj na nový HDD teda je nejaká možnosť to USB vyčistiť za predpokladu že bolo aj USB infikované.

Jen AdWary a zbytečnosti, hesla měnit nemusíte. Na disk pusťte USBFix:

Stahnete a spustte http://www.fosshub.com/UsbFix.html
kliknete na Clean, vlozte nakazenou flashku do PC a kliknete na OK
pri dotazu na asistenci kliknete na No
upozorneni na ukonceni procesu - OK
obsah prave vytvoreneho logu vlozte do pristiho prispevku

Keď chcem stiahnúť program na čistenie USB tak mi ESET vypíše: Bola zachytená hrozba(LNK/Agent.DO), keď sa Firefox pokúsil o prístup na webovú stránku (download.fosshub.com) čo teraz?

Protentokrát vypněte antivir, malware to není, pouze se AV z nějakého důvodu nelíbí. Běžně ho tu používáme.

############################## | UsbFix V 9.067 | [Clean]

User: uzivatel (Administrator) # UZIVATEL-PC
Updated 03/10/2017 by SOSVirus
Started at 20:34:51 | 22/11/2017

Website : https://www.usb-antivirus.com/
Tutorial : https://www.usb-antivirus.com/tutorial/
Support : https://www.sosvirus.net/en/
Live detection : https://www.usbfix.net/
Contact : https://www.usb-antivirus.com/contact/

################## | System information |

MB: Acer (JV51_CP)
CPU: Intel(R) Core(TM) i5 CPU M 430 @ 2.27GHz
GC: NVIDIA GeForce GT 330M
RAM -> [Total : 3959 Mo | Free : 2969 Mo]
Bios: INSYDE
Boot: Normal boot

OS: Microsoft™ Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Google Chrome : 62.0.3202.94
WB: Mozilla Firefox : 57.0

################## | Security Information |

AV: ESET Smart Security [(!) Disabled |Updated]
AS: ESET Smart Security [(!) Disabled |Updated]
AS: Windows Defender [Enabled |Updated]
FW: ESET Personálny firewall [Enabled]
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]

################## | Disk Information |

C:\ (%SystemDrive%) -> Fixed disk # 584 Gb (465 Gb free - 80%) [Acer] # NTFS
E:\ -> Removable disk # 7 Gb (7 Gb free - 91%) [KINGSTON] # FAT32

################## | Generic Research |


################## | Startup |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKLM\..\Run : [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\..\Run : [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
04 - HKLM\..\Run : [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
04 - HKLM\..\Run : [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
04 - HKLM\..\Run : [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
04 - HKLM\..\Run : [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
04 - HKLM\..\Run : [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
04 - HKLM\..\Run : [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
04 - [x64] HKLM\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - [x64] HKLM\..\Run : [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3
04 - [x64] HKLM\..\Run : [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
04 - [x64] HKLM\..\Run : [ODDPwr] "C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe"
04 - [x64] HKLM\..\Run : [mwlDaemon] C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [PLFSetI] C:\Windows\PLFSetI.exe
04 - [x64] HKLM\..\Run : [Acer ePower Management] C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe
04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
04 - [x64] HKLM\..\Run : [ShadowPlay] "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1327265937-250205978-3510547034-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-1327265937-250205978-3510547034-1000\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - Bluetooth.lnk : C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe

################## | C:\ %SystemDrive% - Fixed drive (NTFS) |

[22/11/2017 - 20:35:00 | A | 0 Ko] - C:\usbfix-debug.txt
[22/11/2017 - 18:54:47 | ASH | 3040328 Ko] - C:\hiberfil.sys
[22/11/2017 - 18:54:55 | ASH | 4053772 Ko] - C:\pagefile.sys
[12/03/2010 - 04:45:29 | A | 2 Ko] - C:\RHDSetup.log
[06/07/2017 - 08:53:56 | A | 0 Ko] - C:\Webcam.log
[06/07/2017 - 08:46:41 | SHD] - C:\$Recycle.Bin
[12/03/2010 - 04:33:23 | RASH | 8 Ko] - C:\BOOTSECT.BAK
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[12/03/2010 - 04:43:56 | D] - C:\Intel
[12/03/2010 - 05:06:42 | RHD] - C:\MSOCache
[06/07/2017 - 08:43:16 | SHD] - C:\Recovery
[06/07/2017 - 08:43:51 | RD] - C:\Users
[06/07/2017 - 08:47:24 | AD] - C:\book
[06/07/2017 - 09:16:54 | D] - C:\OEM
[06/07/2017 - 10:27:14 | D] - C:\IDE
[07/07/2017 - 12:55:13 | D] - C:\2ba2f353a63cefaa5d3ba492
[17/09/2017 - 15:55:08 | D] - C:\Games
[02/11/2017 - 22:06:50 | D] - C:\totalcmd
[19/11/2017 - 15:03:12 | D] - C:\bcdafdadcfe3345134ae6fed56
[19/11/2017 - 17:31:15 | D] - C:\cb2e4ebb9a8f575ef234429e
[21/11/2017 - 09:13:19 | RD] - C:\Program Files (x86)
[21/11/2017 - 17:02:24 | RD] - C:\Program Files
[21/11/2017 - 17:02:41 | D] - C:\rsit
[21/11/2017 - 19:32:40 | HD] - C:\ProgramData
[21/11/2017 - 19:50:54 | D] - C:\AdwCleaner
[21/11/2017 - 21:37:03 | D] - C:\_OTM
[21/11/2017 - 21:37:46 | AD] - C:\Windows
[22/11/2017 - 20:33:50 | D] - C:\UsbFix

Analysed in 18.77 seconds

################## | E.O.F | https://www.sosvirus.net/ | https://www.usb-antivirus.com/ |