VIRY.CZ

Dobrý deň páni, po rokoch opäť budem potrebovať Vašu pomoc pretože antivirové programy nič nenašli, ide o to že keď normálne spustím akýkoľvek browser tak mi otvorí rovno stránku appusx (dreamer) v tom je vyhľadávač rovno čo sa tvári ako google ale po zadaní niečoho do tohto vyhľadávača to otvorí home.parallaxsearch prosím Vás zbavte ma tejto pliagy, btw ak otvorím browser ako správca tak ide normálne.

LOG
Logfile of random's system information tool 1.10 (written by random/random)
Run by BEZPOX at 2017-12-04 08:44:28
Microsoft Windows 10 Home
System drive C: has 125 GB (26%) free of 477 GB
Total RAM: 8152 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:44:36, on 4. 12. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe
C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
C:\Program Files\trend micro\BEZPOX.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.apusx.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [ROCCAT Savu Gaming Mouse] "C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe" /Automation
O4 - HKCU\..\Run: [Google Update] C:\Users\BEZPOX\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Volanie kliknutím - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: SetupARService - Unknown owner - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\Windows\system32\xbgmsvc.exe (file missing)

--
End of file - 11003 bytes

======Listing Processes======








C:\Windows\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
C:\Windows\system32\svchost.exe -k DcomLaunch -p
winlogon.exe
c:\windows\system32\svchost.exe -k rpcss -p
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s gpsvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s hidserv
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
c:\windows\system32\svchost.exe -k localservice -p -s SEMgrSvc
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\Windows\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s NgcCtnrSvc
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
c:\windows\system32\svchost.exe -k netsvcs -s CertPropSvc
c:\windows\syswow64\svchost.exe -k localhelperservice -s LHelperSvc
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\syswow64\svchost.exe -k mppsvc -s MppSvc
C:\Windows\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc

C:\Windows\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks

c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
dashost.exe {6c5cb5d1-2c09-46a3-ad93a8f675310d9a}
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE"
"C:\Program Files\PowerISO\PWRISOVM.EXE" -startup

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
"C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe" /Automation
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
c:\windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
C:\Windows\system32\AUDIODG.EXE 0x4a4
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc

c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Windows\system32\taskmgr.exe" /4
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
C:\Windows\system32\msiexec.exe /V
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.apusx.com
C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe --type=crashpad-handler "--user-data-dir=C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=62.0.3202.94 --initial-client-data=0x1d0,0x1d4,0x1d8,0x1cc,0x1dc,0x7ffcc58127e8,0x7ffcc58127a8,0x7ffcc58127b8
"C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=6660 --on-initialized-event-handle=660 --parent-handle=664 /prefetch:6
"C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1456,2473458575579964729,7592600874793047607,131072 --gpu-vendor-id=0x10de --gpu-device-id=0x1c02 --gpu-driver-vendor=NVIDIA --gpu-driver-version=23.21.13.8813 --gpu-driver-date=10-27-2017 --service-request-channel-token=B8FCD36BBB05A2D735261E4AB0FDDB05 --mojo-platform-channel-handle=1484 --ignored=" --type=renderer " /prefetch:2
"C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1456,2473458575579964729,7592600874793047607,131072 --service-pipe-token=212265B978A130A896DCA1DB18E87A07 --lang=sk --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=212265B978A130A896DCA1DB18E87A07 --renderer-client-id=3 --mojo-platform-channel-handle=2992 /prefetch:1
"C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1456,2473458575579964729,7592600874793047607,131072 --service-pipe-token=59E451C51F270AC5ACDC710C0EA416D5 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=59E451C51F270AC5ACDC710C0EA416D5 --renderer-client-id=7 --mojo-platform-channel-handle=5004 /prefetch:1
"C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1456,2473458575579964729,7592600874793047607,131072 --service-pipe-token=3C83C09B3C95325B0890EA62872E9FA8 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --enable-gpu-async-worker-context --service-request-channel-token=3C83C09B3C95325B0890EA62872E9FA8 --renderer-client-id=8 --mojo-platform-channel-handle=2720 /prefetch:1
"C:\Windows\system32\SearchFilterHost.exe" 0 732 736 744 8192 740
C:\Windows\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
"C:\Users\BEZPOX\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s wisvc

C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.15_none_2c4b8d3b386eed8e\TiWorker.exe -Embedding

======Scheduled tasks folder======

C:\Windows\tasks\DriverToolkit Autorun.job - C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe --autorun

=========Mozilla firefox=========

ProfilePath - C:\Users\BEZPOX\AppData\Roaming\Mozilla\Firefox\Profiles\t93u4nb8.default

prefs.js - "browser.startup.homepage" - "https://mail.google.com/mail/u/0/?shva=1#inbox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.151.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.151.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01 205416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2012-10-01 2322576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01 139368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-04 473664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2012-10-01 1720976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-04 187968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\BEZPOX\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [2017-11-19 601680]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-10-18 10021040]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2015-10-08 408888]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2017-07-04 1053656]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288]
""= []
"HPUsageTrackingLEDM"=C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [2009-10-15 30264]
"ROCCAT Savu Gaming Mouse"=C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [2012-09-10 872048]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"PromptOnSecureDesktop"=0
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-12-04 08:44:29 ----D---- C:\Program Files\trend micro
2017-12-04 08:44:28 ----D---- C:\rsit
2017-12-04 08:42:03 ----SHD---- C:\Config.Msi
2017-12-01 13:59:26 ----D---- C:\Program Files (x86)\AVG
2017-12-01 13:57:30 ----HD---- C:\ProgramData\Common Files
2017-12-01 13:57:30 ----D---- C:\ProgramData\Avg
2017-12-01 10:56:50 ----D---- C:\ProgramData\{A7FB8CB9-0BE2-4c79-BB9C-01F657A649CA}
2017-11-23 11:07:43 ----A---- C:\Windows\SECOH-QAD.exe
2017-11-23 11:07:43 ----A---- C:\Windows\SECOH-QAD.dll
2017-11-23 11:07:35 ----D---- C:\Program Files\KMSpico
2017-11-23 10:50:26 ----D---- C:\Program Files (x86)\ROCCAT
2017-11-15 10:30:06 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2017-11-15 10:30:06 ----A---- C:\Windows\SYSWOW64\user32.dll
2017-11-15 10:30:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-11-15 10:30:06 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2017-11-15 10:30:05 ----A---- C:\Windows\SYSWOW64\PCPKsp.dll
2017-11-15 10:30:05 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2017-11-15 10:30:05 ----A---- C:\Windows\system32\win32kbase.sys
2017-11-15 10:30:05 ----A---- C:\Windows\system32\user32.dll
2017-11-15 10:30:05 ----A---- C:\Windows\system32\jscript9.dll
2017-11-15 10:30:05 ----A---- C:\Windows\system32\Chakradiag.dll
2017-11-15 10:30:05 ----A---- C:\Windows\system32\drivers\storufs.sys
2017-11-15 10:30:05 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-11-15 10:30:04 ----A---- C:\Windows\system32\win32kfull.sys
2017-11-15 10:30:04 ----A---- C:\Windows\system32\PCPKsp.dll
2017-11-15 10:30:04 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-11-15 10:30:04 ----A---- C:\Windows\system32\mshtml.dll
2017-11-15 10:30:04 ----A---- C:\Windows\system32\jscript9diag.dll
2017-11-15 10:30:04 ----A---- C:\Windows\system32\Chakra.dll
2017-11-15 10:30:04 ----A---- C:\Windows\system32\drivers\storport.sys
2017-11-15 10:30:04 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-11-15 10:30:03 ----A---- C:\Windows\system32\edgehtml.dll
2017-11-15 10:30:02 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-11-15 10:30:01 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2017-11-15 10:30:01 ----A---- C:\Windows\system32\Hydrogen.dll
2017-11-15 10:30:01 ----A---- C:\Windows\system32\HologramCompositor.dll
2017-11-15 10:29:59 ----A---- C:\Windows\SYSWOW64\Windows.Mirage.dll
2017-11-15 10:29:59 ----A---- C:\Windows\system32\Windows.Mirage.dll
2017-11-15 10:29:59 ----A---- C:\Windows\system32\ISM.dll
2017-11-15 10:29:59 ----A---- C:\Windows\system32\HolographicRuntimes.dll
2017-11-15 10:29:59 ----A---- C:\Windows\system32\DHolographicDisplay.dll
2017-11-15 10:29:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2017-11-15 10:29:58 ----A---- C:\Windows\system32\jscript.dll
2017-11-15 10:29:58 ----A---- C:\Windows\system32\HolographicExtensions.dll
2017-11-15 10:29:58 ----A---- C:\Windows\system32\diagtrack.dll
2017-11-15 10:29:57 ----A---- C:\Windows\system32\wmp.dll
2017-11-15 10:29:56 ----A---- C:\Windows\SYSWOW64\msexcl40.dll
2017-11-15 10:29:56 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2017-11-15 10:29:56 ----A---- C:\Windows\system32\Windows.Media.dll
2017-11-15 10:29:56 ----A---- C:\Windows\system32\mfcore.dll
2017-11-15 10:29:55 ----A---- C:\Windows\system32\twinui.pcshell.dll
2017-11-15 10:29:54 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2017-11-15 10:29:54 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2017-11-15 10:29:53 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2017-11-15 10:29:53 ----A---- C:\Windows\system32\dwmcore.dll
2017-11-15 10:29:52 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-11-15 10:29:52 ----A---- C:\Windows\system32\wuaueng.dll
2017-11-15 10:29:52 ----A---- C:\Windows\system32\audiosrv.dll
2017-11-15 10:29:51 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2017-11-15 10:29:50 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2017-11-15 10:29:50 ----A---- C:\Windows\system32\FaceProcessor.dll
2017-11-15 10:29:50 ----A---- C:\Windows\system32\AudioEng.dll
2017-11-15 10:29:49 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2017-11-15 10:29:49 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2017-11-15 10:29:49 ----A---- C:\Windows\system32\Windows.Perception.Stub.dll
2017-11-15 10:29:49 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2017-11-15 10:29:49 ----A---- C:\Windows\system32\AudioSes.dll
2017-11-15 10:29:49 ----A---- C:\Windows\system32\audiodg.exe
2017-11-15 10:29:49 ----A---- C:\Windows\system32\aeinv.dll
2017-11-15 10:29:48 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2017-11-15 10:29:48 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2017-11-15 10:29:48 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2017-11-15 10:29:48 ----A---- C:\Windows\system32\wow64win.dll
2017-11-15 10:29:48 ----A---- C:\Windows\system32\Windows.Mirage.Internal.dll
2017-11-15 10:29:48 ----A---- C:\Windows\system32\Spectrum.exe
2017-11-15 10:29:48 ----A---- C:\Windows\system32\RDXService.dll
2017-11-15 10:29:48 ----A---- C:\Windows\system32\BioIso.exe
2017-11-15 10:29:47 ----A---- C:\Windows\SYSWOW64\AcGenral.dll
2017-11-15 10:29:46 ----A---- C:\Windows\SYSWOW64\Windows.Perception.Stub.dll
2017-11-15 10:29:46 ----A---- C:\Windows\system32\d3d10warp.dll
2017-11-15 10:29:46 ----A---- C:\Windows\system32\CloudExperienceHostCommon.dll
2017-11-15 10:29:46 ----A---- C:\Windows\system32\CapabilityAccessManager.dll
2017-11-15 10:29:46 ----A---- C:\Windows\system32\AcGenral.dll
2017-11-15 10:29:45 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostCommon.dll
2017-11-15 10:29:45 ----A---- C:\Windows\SYSWOW64\AcLayers.dll
2017-11-15 10:29:45 ----A---- C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-11-15 10:29:45 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2017-11-15 10:29:45 ----A---- C:\Windows\system32\mfsrcsnk.dll
2017-11-15 10:29:45 ----A---- C:\Windows\system32\drivers\rdbss.sys
2017-11-15 10:29:45 ----A---- C:\Windows\system32\ci.dll
2017-11-15 10:29:45 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2017-11-15 10:29:45 ----A---- C:\Windows\system32\AcLayers.dll
2017-11-15 10:29:44 ----A---- C:\Windows\SYSWOW64\Windows.UI.Input.Inking.dll
2017-11-15 10:29:44 ----A---- C:\Windows\SYSWOW64\Windows.Mirage.Internal.dll
2017-11-15 10:29:44 ----A---- C:\Windows\system32\vac.exe
2017-11-15 10:29:44 ----A---- C:\Windows\system32\devinv.dll
2017-11-15 10:29:40 ----A---- C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2017-11-15 10:29:39 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2017-11-15 10:29:39 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2017-11-15 10:29:39 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2017-11-15 10:29:39 ----A---- C:\Windows\system32\TileDataRepository.dll
2017-11-15 10:29:39 ----A---- C:\Windows\system32\runexehelper.exe
2017-11-15 10:29:39 ----A---- C:\Windows\system32\ntdll.dll
2017-11-15 10:29:39 ----A---- C:\Windows\system32\mispace.dll
2017-11-15 10:29:39 ----A---- C:\Windows\system32\FaceProcessorCore.dll
2017-11-15 10:29:39 ----A---- C:\Windows\system32\drivers\wcifs.sys
2017-11-15 10:29:39 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2017-11-15 10:29:39 ----A---- C:\Windows\system32\drivers\UcmCx.sys
2017-11-15 10:29:39 ----A---- C:\Windows\system32\drivers\sdbus.sys
2017-11-15 10:29:39 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\tzres.dll
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\TileDataRepository.dll
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\rdrleakdiag.exe
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\mispace.dll
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\CapabilityAccessManagerClient.dll
2017-11-15 10:29:38 ----A---- C:\Windows\SYSWOW64\AcSpecfc.dll
2017-11-15 10:29:38 ----A---- C:\Windows\system32\wuuhext.dll
2017-11-15 10:29:38 ----A---- C:\Windows\system32\vbscript.dll
2017-11-15 10:29:38 ----A---- C:\Windows\system32\tzres.dll
2017-11-15 10:29:38 ----A---- C:\Windows\system32\rdrleakdiag.exe
2017-11-15 10:29:38 ----A---- C:\Windows\system32\drivers\luafv.sys
2017-11-15 10:29:38 ----A---- C:\Windows\system32\CapabilityAccessManagerClient.dll
2017-11-15 10:29:38 ----A---- C:\Windows\system32\AcSpecfc.dll
2017-11-15 10:29:37 ----A---- C:\Windows\SYSWOW64\msdtcVSp1res.dll
2017-11-15 10:29:37 ----A---- C:\Windows\system32\msdtcVSp1res.dll
2017-11-14 08:59:15 ----D---- C:\Users\BEZPOX\AppData\Roaming\Plaut Slovensko s.r.o
2017-11-14 08:55:46 ----D---- C:\ProgramData\boost_interprocess
2017-11-14 08:54:56 ----D---- C:\Program Files (x86)\eID klient
2017-11-14 08:47:55 ----A---- C:\Windows\system32\SCN2PMUI.dll
2017-11-14 08:47:55 ----A---- C:\Windows\system32\SCN2PMR.dll
2017-11-14 08:47:55 ----A---- C:\Windows\system32\SCN2PM.dll
2017-11-14 08:47:55 ----A---- C:\Windows\system32\SCN2PM.DAT
2017-11-09 10:20:00 ----D---- C:\Program Files (x86)\Microsoft XNA
2017-11-09 10:19:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2017-11-09 10:18:43 ----A---- C:\Windows\system32\wrap_oal.dll
2017-11-09 10:18:43 ----A---- C:\Windows\system32\OpenAL32.dll
2017-11-09 10:18:42 ----D---- C:\Program Files (x86)\OpenAL
2017-11-09 10:18:42 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2017-11-09 10:18:42 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2017-11-09 10:17:25 ----D---- C:\Program Files (x86)\MSXML 4.0
2017-11-09 10:17:11 ----D---- C:\ProgramData\Thunder Network
2017-11-09 10:14:57 ----D---- C:\ProgramData\PlugCache
2017-11-09 10:14:54 ----D---- C:\ProgramData\DriverTalent
2017-11-09 10:14:50 ----D---- C:\Users\BEZPOX\AppData\Roaming\DriverTalent
2017-11-09 10:14:50 ----D---- C:\OSTotoFolder
2017-11-09 10:14:38 ----D---- C:\Program Files (x86)\OSTotoSoft
2017-11-09 09:53:18 ----D---- C:\Users\BEZPOX\AppData\Roaming\Io Interactive
2017-11-09 07:48:21 ----D---- C:\Program Files\Realtek
2017-11-07 08:29:27 ----D---- C:\Program Files (x86)\SHARP
2017-11-07 08:29:14 ----D---- C:\Windows\system32\COLOR
2017-11-07 08:29:14 ----A---- C:\Windows\system32\SN0HLMON.dll
2017-11-07 08:29:14 ----A---- C:\Windows\system32\SN0HLMON.dat
2017-11-07 08:29:08 ----A---- C:\Windows\system32\SN0ELMON.dll
2017-11-07 08:29:08 ----A---- C:\Windows\system32\SN0ELMON.dat
2017-11-07 08:29:05 ----N---- C:\Windows\SYSWOW64\_isusr2k.dll
2017-11-07 08:29:05 ----A---- C:\Windows\_isusr32.dll
2017-11-07 08:26:48 ----A---- C:\Windows\system32\perfh01B.dat
2017-11-07 08:26:48 ----A---- C:\Windows\system32\perfc01B.dat
2017-11-07 08:26:33 ----D---- C:\Program Files\Reference Assemblies
2017-11-07 08:26:33 ----D---- C:\Program Files\MSBuild
2017-11-07 08:26:33 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-11-07 08:26:33 ----D---- C:\Program Files (x86)\MSBuild
2017-11-07 08:25:42 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2017-11-07 08:25:42 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2017-11-07 08:25:42 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-11-07 08:25:40 ----A---- C:\Windows\system32\TsWpfWrp.exe
2017-11-07 08:25:40 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2017-11-07 08:25:40 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-11-07 08:23:51 ----D---- C:\Program Files (x86)\Hewlett-Packard
2017-11-07 08:23:25 ----D---- C:\ProgramData\HPSSUPPLY
2017-11-07 08:22:37 ----D---- C:\Program Files (x86)\HP
2017-11-07 08:22:13 ----A---- C:\Windows\SYSWOW64\mvusbews.dll
2017-11-07 08:21:54 ----A---- C:\Windows\system32\HPM1210SM.exe
2017-11-07 08:21:54 ----A---- C:\Windows\system32\HPM1210LM.DLL
2017-11-07 08:21:37 ----A---- C:\Windows\system32\HPSIsvc.exe
2017-11-07 08:21:07 ----D---- C:\Program Files\HP
2017-11-07 08:21:07 ----A---- C:\Windows\system32\mvhlewsi.dll
2017-11-07 08:19:04 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2017-11-07 08:19:04 ----A---- C:\Windows\system32\drivers\mvusbews.sys
2017-11-07 08:19:03 ----A---- C:\Windows\system32\mvusbews.dll
2017-11-07 08:19:03 ----A---- C:\Windows\system32\m1130wia2.dll
2017-11-07 08:19:02 ----A---- C:\Windows\system32\HPM1210SMs.dll
2017-11-07 08:19:02 ----A---- C:\Windows\system32\HPImgFlt.dll
2017-11-07 08:16:14 ----D---- C:\Windows\SYSWOW64\SCDRV
2017-11-07 08:16:13 ----D---- C:\Users\BEZPOX\AppData\Roaming\InstallShield
2017-11-07 08:16:10 ----D---- C:\Drivers
2017-11-07 08:07:35 ----D---- C:\Program Files (x86)\DriverToolkit
2017-11-06 14:10:35 ----D---- C:\Windows\pss
2017-11-05 19:28:06 ----D---- C:\Temp
2017-11-05 19:28:05 ----A---- C:\Windows\GPU-Z.INI
2017-11-05 19:27:44 ----D---- C:\Program Files (x86)\Futuremark
2017-11-05 19:24:34 ----D---- C:\Program Files\Futuremark
2017-11-05 18:53:10 ----D---- C:\Users\BEZPOX\AppData\Roaming\uTorrent
2017-11-05 18:05:50 ----D---- C:\Program Files\Common Files\DESIGNER
2017-11-05 18:05:35 ----D---- C:\Program Files\Microsoft.NET
2017-11-05 18:05:35 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2017-11-05 18:05:06 ----D---- C:\Windows\PCHEALTH
2017-11-05 18:05:06 ----D---- C:\Program Files\Microsoft SQL Server
2017-11-05 18:03:33 ----D---- C:\Windows\SHELLNEW
2017-11-05 18:03:15 ----D---- C:\Program Files\Microsoft Analysis Services
2017-11-05 18:03:15 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2017-11-05 18:03:10 ----D---- C:\Program Files (x86)\Microsoft Office
2017-11-05 18:03:08 ----D---- C:\Program Files\Microsoft Office
2017-11-05 18:03:07 ----D---- C:\ProgramData\Microsoft Help
2017-11-05 15:18:41 ----RHD---- C:\MSOCache
2017-11-05 15:14:56 ----D---- C:\Users\BEZPOX\AppData\Roaming\WinRAR
2017-11-05 14:19:43 ----D---- C:\Users\BEZPOX\AppData\Roaming\EasyAntiCheat
2017-11-05 14:18:33 ----D---- C:\Program Files (x86)\EasyAntiCheat
2017-11-05 14:18:07 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2017-11-05 14:18:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2017-11-05 14:18:07 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2017-11-05 14:18:07 ----A---- C:\Windows\system32\XAudio2_7.dll
2017-11-05 14:18:07 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2017-11-05 14:18:07 ----A---- C:\Windows\system32\xactengine3_7.dll
2017-11-05 14:18:06 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2017-11-05 14:18:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2017-11-05 14:18:06 ----A---- C:\Windows\system32\d3dcsx_43.dll
2017-11-05 14:18:06 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2017-11-05 14:18:03 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2017-11-05 14:18:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2017-11-05 14:18:03 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2017-11-05 14:18:03 ----A---- C:\Windows\system32\XAudio2_6.dll
2017-11-05 14:18:03 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2017-11-05 14:18:03 ----A---- C:\Windows\system32\xactengine3_6.dll
2017-11-05 14:18:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2017-11-05 14:18:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2017-11-05 14:18:01 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2017-11-05 14:18:01 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2017-11-05 14:18:01 ----A---- C:\Windows\system32\XAudio2_5.dll
2017-11-05 14:18:01 ----A---- C:\Windows\system32\xactengine3_5.dll
2017-11-05 14:18:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2017-11-05 14:18:00 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2017-11-05 14:17:59 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2017-11-05 14:17:59 ----A---- C:\Windows\system32\d3dcsx_42.dll
2017-11-05 14:17:58 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2017-11-05 14:17:58 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2017-11-05 14:17:58 ----A---- C:\Windows\system32\d3dx11_42.dll
2017-11-05 14:17:58 ----A---- C:\Windows\system32\d3dx10_42.dll
2017-11-05 14:17:57 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2017-11-05 14:17:57 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2017-11-05 14:17:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2017-11-05 14:17:57 ----A---- C:\Windows\system32\D3DX9_42.dll
2017-11-05 14:17:57 ----A---- C:\Windows\system32\d3dx10_41.dll
2017-11-05 14:17:57 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2017-11-05 14:17:56 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2017-11-05 14:17:56 ----A---- C:\Windows\system32\D3DX9_41.dll
2017-11-05 14:17:55 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2017-11-05 14:17:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2017-11-05 14:17:55 ----A---- C:\Windows\system32\XAudio2_4.dll
2017-11-05 14:17:55 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2017-11-05 14:17:54 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2017-11-05 14:17:54 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2017-11-05 14:17:54 ----A---- C:\Windows\system32\xactengine3_4.dll
2017-11-05 14:17:54 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2017-11-05 14:17:53 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2017-11-05 14:17:53 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2017-11-05 14:17:53 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2017-11-05 14:17:53 ----A---- C:\Windows\system32\D3DX9_40.dll
2017-11-05 14:17:53 ----A---- C:\Windows\system32\d3dx10_40.dll
2017-11-05 14:17:53 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2017-11-05 14:17:52 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2017-11-05 14:17:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2017-11-05 14:17:52 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2017-11-05 14:17:52 ----A---- C:\Windows\system32\XAudio2_3.dll
2017-11-05 14:17:52 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2017-11-05 14:17:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2017-11-05 14:17:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2017-11-05 14:17:51 ----A---- C:\Windows\system32\XAudio2_2.dll
2017-11-05 14:17:51 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2017-11-05 14:17:51 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2017-11-05 14:17:50 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2017-11-05 14:17:50 ----A---- C:\Windows\system32\xactengine3_2.dll
2017-11-05 14:17:50 ----A---- C:\Windows\system32\d3dx10_39.dll
2017-11-05 14:17:50 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2017-11-05 14:17:49 ----A---- C:\Windows\system32\D3DX9_39.dll
2017-11-05 14:17:48 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2017-11-05 14:17:48 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2017-11-05 14:17:48 ----A---- C:\Windows\system32\XAudio2_1.dll
2017-11-05 14:17:48 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2017-11-05 14:17:47 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2017-11-05 14:17:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2017-11-05 14:17:47 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2017-11-05 14:17:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2017-11-05 14:17:47 ----A---- C:\Windows\system32\xactengine3_1.dll
2017-11-05 14:17:47 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2017-11-05 14:17:47 ----A---- C:\Windows\system32\d3dx10_38.dll
2017-11-05 14:17:47 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2017-11-05 14:17:46 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2017-11-05 14:17:46 ----A---- C:\Windows\system32\D3DX9_38.dll
2017-11-05 14:17:45 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2017-11-05 14:17:45 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2017-11-05 14:17:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2017-11-05 14:17:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2017-11-05 14:17:45 ----A---- C:\Windows\system32\XAudio2_0.dll
2017-11-05 14:17:45 ----A---- C:\Windows\system32\xactengine3_0.dll
2017-11-05 14:17:45 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2017-11-05 14:17:45 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2017-11-05 14:17:44 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2017-11-05 14:17:44 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2017-11-05 14:17:44 ----A---- C:\Windows\system32\D3DX9_37.dll
2017-11-05 14:17:44 ----A---- C:\Windows\system32\d3dx10_37.dll
2017-11-05 14:17:43 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2017-11-05 14:17:43 ----A---- C:\Windows\system32\xactengine2_10.dll
2017-11-05 14:17:42 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2017-11-05 14:17:42 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2017-11-05 14:17:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2017-11-05 14:17:42 ----A---- C:\Windows\system32\d3dx9_36.dll
2017-11-05 14:17:42 ----A---- C:\Windows\system32\d3dx10_36.dll
2017-11-05 14:17:42 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2017-11-05 14:17:41 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2017-11-05 14:17:41 ----A---- C:\Windows\system32\xactengine2_9.dll
2017-11-05 14:17:40 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2017-11-05 14:17:40 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2017-11-05 14:17:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2017-11-05 14:17:40 ----A---- C:\Windows\system32\d3dx9_35.dll
2017-11-05 14:17:40 ----A---- C:\Windows\system32\d3dx10_35.dll
2017-11-05 14:17:40 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2017-11-05 14:17:39 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2017-11-05 14:17:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2017-11-05 14:17:39 ----A---- C:\Windows\system32\xactengine2_8.dll
2017-11-05 14:17:39 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2017-11-05 14:17:38 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2017-11-05 14:17:38 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2017-11-05 14:17:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2017-11-05 14:17:38 ----A---- C:\Windows\system32\d3dx9_34.dll
2017-11-05 14:17:38 ----A---- C:\Windows\system32\d3dx10_34.dll
2017-11-05 14:17:38 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2017-11-05 14:17:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2017-11-05 14:17:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2017-11-05 14:17:37 ----A---- C:\Windows\system32\xinput1_3.dll
2017-11-05 14:17:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2017-11-05 14:17:36 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2017-11-05 14:17:36 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2017-11-05 14:17:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2017-11-05 14:17:36 ----A---- C:\Windows\system32\d3dx9_33.dll
2017-11-05 14:17:36 ----A---- C:\Windows\system32\d3dx10_33.dll
2017-11-05 14:17:36 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2017-11-05 14:17:35 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2017-11-05 14:17:35 ----A---- C:\Windows\system32\xactengine2_6.dll
2017-11-05 14:17:34 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2017-11-05 14:17:34 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2017-11-05 14:17:34 ----A---- C:\Windows\system32\xactengine2_5.dll
2017-11-05 14:17:34 ----A---- C:\Windows\system32\d3dx10.dll
2017-11-05 14:17:33 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2017-11-05 14:17:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2017-11-05 14:17:33 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2017-11-05 14:17:33 ----A---- C:\Windows\system32\xactengine2_4.dll
2017-11-05 14:17:33 ----A---- C:\Windows\system32\x3daudio1_1.dll
2017-11-05 14:17:33 ----A---- C:\Windows\system32\d3dx9_32.dll
2017-11-05 14:17:32 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2017-11-05 14:17:32 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2017-11-05 14:17:32 ----A---- C:\Windows\system32\xactengine2_3.dll
2017-11-05 14:17:32 ----A---- C:\Windows\system32\d3dx9_31.dll
2017-11-05 14:17:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2017-11-05 14:17:31 ----A---- C:\Windows\system32\xinput1_2.dll
2017-11-05 14:17:30 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2017-11-05 14:17:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2017-11-05 14:17:29 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2017-11-05 14:17:29 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2017-11-05 14:17:29 ----A---- C:\Windows\system32\xinput1_1.dll
2017-11-05 14:17:29 ----A---- C:\Windows\system32\xactengine2_1.dll
2017-11-05 14:17:28 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2017-11-05 14:17:28 ----A---- C:\Windows\system32\d3dx9_30.dll
2017-11-05 14:17:27 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2017-11-05 14:17:27 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2017-11-05 14:17:27 ----A---- C:\Windows\system32\xactengine2_0.dll
2017-11-05 14:17:27 ----A---- C:\Windows\system32\x3daudio1_0.dll
2017-11-05 14:17:26 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2017-11-05 14:17:26 ----A---- C:\Windows\system32\d3dx9_29.dll
2017-11-05 14:17:25 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2017-11-05 14:17:25 ----A---- C:\Windows\system32\d3dx9_28.dll
2017-11-05 14:17:24 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2017-11-05 14:17:24 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2017-11-05 14:17:24 ----A---- C:\Windows\system32\d3dx9_27.dll
2017-11-05 14:17:24 ----A---- C:\Windows\system32\d3dx9_26.dll
2017-11-05 14:17:23 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2017-11-05 14:17:23 ----A---- C:\Windows\system32\d3dx9_25.dll
2017-11-05 14:17:22 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2017-11-05 14:17:22 ----A---- C:\Windows\system32\d3dx9_24.dll

======List of files/folders modified in the last 1 month======

2017-12-04 08:44:30 ----D---- C:\Windows\Temp
2017-12-04 08:44:29 ----RD---- C:\Program Files
2017-12-04 08:44:24 ----D---- C:\Windows\Prefetch
2017-12-04 08:42:25 ----D---- C:\ProgramData\NVIDIA
2017-12-04 08:42:07 ----SHD---- C:\Windows\Installer
2017-12-04 08:42:07 ----D---- C:\Windows\system32\Tasks
2017-12-04 08:41:38 ----D---- C:\Windows\System32
2017-12-04 08:39:11 ----D---- C:\Windows\system32\drivers
2017-12-04 08:38:32 ----D---- C:\Windows\system32\sru
2017-12-04 08:34:30 ----D---- C:\Windows\AppReadiness
2017-12-04 08:34:17 ----HD---- C:\Program Files\WindowsApps
2017-12-04 08:33:47 ----D---- C:\Windows\DeliveryOptimization
2017-12-04 08:30:09 ----D---- C:\Windows\system32\SleepStudy
2017-12-04 00:00:00 ----D---- C:\Windows\system32\LogFiles
2017-12-03 20:28:27 ----D---- C:\Windows\system32\config
2017-12-03 20:28:21 ----RD---- C:\Windows\Microsoft.NET
2017-12-01 15:33:24 ----D---- C:\Windows\INF
2017-12-01 15:23:18 ----HD---- C:\ProgramData
2017-12-01 14:28:14 ----D---- C:\Windows
2017-12-01 14:26:11 ----SHD---- C:\System Volume Information
2017-12-01 14:00:49 ----D---- C:\Windows\WinSxS
2017-12-01 14:00:29 ----D---- C:\Windows\SoftwareDistribution
2017-12-01 13:59:26 ----RD---- C:\Program Files (x86)
2017-12-01 13:13:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-12-01 13:13:16 ----D---- C:\Program Files (x86)\GIGABYTE
2017-12-01 12:42:25 ----D---- C:\ProgramData\ProductData
2017-12-01 12:40:36 ----D---- C:\Users\BEZPOX\AppData\Roaming\TS3Client
2017-12-01 12:40:36 ----D---- C:\Program Files (x86)\Steam
2017-12-01 10:55:39 ----D---- C:\Windows\Logs
2017-11-30 08:53:35 ----D---- C:\Windows\system32\NDF
2017-11-30 08:43:53 ----D---- C:\Windows\SysWOW64
2017-11-24 09:09:07 ----D---- C:\Program Files (x86)\Opera
2017-11-24 08:53:40 ----D---- C:\Program Files (x86)\Common Files
2017-11-23 13:49:01 ----D---- C:\Windows\debug
2017-11-23 11:09:58 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-21 12:37:20 ----D---- C:\Windows\system32\DriverStore
2017-11-21 11:34:15 ----D---- C:\Windows\system32\catroot2
2017-11-21 11:24:44 ----N---- C:\Windows\system32\MpSigStub.exe
2017-11-20 11:44:14 ----SD---- C:\Users\BEZPOX\AppData\Roaming\Microsoft
2017-11-20 08:45:49 ----D---- C:\Windows\rescache
2017-11-19 13:04:40 ----D---- C:\Users\BEZPOX\AppData\Roaming\Mozilla
2017-11-19 13:04:39 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-11-16 09:42:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-15 13:41:24 ----D---- C:\Windows\system32\MRT
2017-11-15 13:37:33 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-11-15 13:37:25 ----AC---- C:\Windows\system32\MRT.exe
2017-11-15 13:25:44 ----SD---- C:\Windows\SYSWOW64\F12
2017-11-15 13:25:44 ----D---- C:\Windows\TextInput
2017-11-15 13:25:44 ----D---- C:\Windows\SYSWOW64\Dism
2017-11-15 13:25:43 ----SD---- C:\Windows\system32\F12
2017-11-15 13:25:43 ----D---- C:\Windows\system32\WinBioPlugIns
2017-11-15 13:25:43 ----D---- C:\Windows\system32\migration
2017-11-15 13:25:43 ----D---- C:\Windows\system32\drivers\UMDF
2017-11-15 13:25:43 ----D---- C:\Windows\system32\Dism
2017-11-15 13:25:43 ----D---- C:\Windows\system32\appraiser
2017-11-15 13:25:43 ----D---- C:\Windows\apppatch
2017-11-15 10:31:34 ----D---- C:\Windows\CbsTemp
2017-11-14 10:20:07 ----D---- C:\Windows\system32\Macromed
2017-11-14 10:20:06 ----D---- C:\Windows\SYSWOW64\Macromed
2017-11-09 11:11:24 ----RD---- C:\Windows\assembly
2017-11-09 10:20:03 ----SHD---- C:\$Recycle.Bin
2017-11-09 10:19:43 ----SD---- C:\ProgramData\Microsoft
2017-11-09 07:48:21 ----D---- C:\Windows\SYSWOW64\RTCOM
2017-11-08 08:11:09 ----D---- C:\Windows\system32\CatRoot
2017-11-07 08:26:36 ----D---- C:\Windows\SYSWOW64\en-US
2017-11-07 08:26:36 ----D---- C:\Windows\system32\en-US
2017-11-07 08:26:33 ----RSD---- C:\Windows\Fonts
2017-11-07 08:22:08 ----D---- C:\Windows\twain_32
2017-11-07 08:08:28 ----D---- C:\Windows\Tasks
2017-11-06 14:09:43 ----D---- C:\Windows\system32\WDI
2017-11-06 13:58:58 ----D---- C:\ProgramData\Package Cache
2017-11-06 13:58:48 ----D---- C:\Program Files\Common Files\microsoft shared
2017-11-06 13:50:54 ----D---- C:\Users\BEZPOX\AppData\Roaming\Adobe
2017-11-06 11:57:26 ----D---- C:\totalcmd
2017-11-05 19:01:38 ----D---- C:\Program Files (x86)\PDFCreator
2017-11-05 19:01:30 ----D---- C:\Windows\Panther
2017-11-05 18:05:50 ----D---- C:\Program Files\Common Files
2017-11-05 18:05:35 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-11-05 18:05:25 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-11-05 18:04:42 ----SD---- C:\Windows\system32\Microsoft
2017-11-05 18:03:37 ----A---- C:\Windows\win.ini
2017-11-05 18:03:36 ----D---- C:\Program Files\Common Files\system
2017-11-05 08:09:17 ----D---- C:\ProgramData\Adobe
2017-11-05 07:59:58 ----D---- C:\Windows\system32\WinBioDatabase
2017-11-05 07:59:37 ----D---- C:\Windows\appcompat
2017-11-05 07:57:44 ----D---- C:\Users\BEZPOX\AppData\Roaming\DivX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;@oem21.inf,%iaStorA.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\Windows\System32\drivers\iaStorA.sys [2017-11-04 891392]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2017-09-29 56728]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\Windows\system32\drivers\bam.sys [2017-09-29 60312]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2017-09-29 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2017-09-29 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2017-11-04 27552]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2015-10-08 127760]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2017-09-29 384000]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2017-09-29 43520]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2017-09-29 79872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2017-08-10 5897184]
R3 MEIx64;@oem31.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2017-07-27 206496]
R3 mvusbews;@oem23.inf,%mvusbews.SvcDesc%;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2012-11-08 19968]
R3 NVHDA;@oem15.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2017-10-27 225208]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_f936d37e592b25aa\nvlddmkm.sys [2017-10-28 16936048]
R3 nvvad_WaveExtensible;@oem2.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2017-10-11 50808]
R3 nvvhci;@oem4.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\Windows\System32\drivers\nvvhci.sys [2017-10-27 57976]
R3 rt640x64;@oem22.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2017-11-04 1009128]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\Windows\System32\drivers\bttflt.sys [2017-09-29 37784]
S0 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2017-09-29 357272]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2017-09-29 123800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2017-09-29 103320]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2017-09-29 63520]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2017-09-29 58776]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2017-09-29 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\Windows\system32\DRIVERS\ramdisk.sys [2017-09-29 39832]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2017-09-29 118168]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2017-10-25 45464]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2017-09-29 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2017-09-29 18432]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2017-09-29 39424]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2017-09-29 60312]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2017-09-29 122368]
S3 cpuz140;cpuz140; \??\C:\Windows\TEMP\cpuz140\cpuz140_x64.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2017-12-01 26192]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2017-09-29 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2017-09-29 50584]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2017-09-29 73112]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\Windows\System32\Drivers\mshwnclx.sys [2017-09-29 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2017-09-29 1723288]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2017-09-29 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2017-09-29 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2017-09-29 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-09-29 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2017-09-29 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-09-29 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2017-09-29 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2017-09-29 39424]
S3 invdimm;@invdimm.inf,%invdimm.SvcDesc%;Microsoft iNVDIMM device driver; C:\Windows\System32\drivers\invdimm.sys [2017-09-29 38912]
S3 IPT;IPT; C:\Windows\System32\drivers\ipt.sys [2017-09-29 26112]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2017-09-29 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2017-09-29 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2017-09-29 55840]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2017-09-29 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2017-09-29 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2017-09-29 132608]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\Windows\System32\drivers\nvdimmn.sys [2017-09-29 88576]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-10-11 30328]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2017-09-29 100352]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\Windows\System32\drivers\pnpmem.sys [2017-09-29 16896]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2017-09-29 936856]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\Windows\System32\drivers\rhproxy.sys [2017-09-29 103936]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2017-09-29 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\Windows\System32\drivers\SpatialGraphFilter.sys [2017-09-30 56216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R2 CDPUserSvc_39f0d;CDPUserSvc_39f0d; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2017-09-29 48688]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\System32\svchost.exe [2017-09-29 48688]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\Windows\System32\svchost.exe [2017-09-29 48688]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2012-11-08 126856]
R2 LHelperSvc;Local Helper Service; C:\Windows\System32\svchost.exe [2017-09-29 48688]
R2 MppSvc;Windows Service; C:\Windows\System32\svchost.exe [2017-09-29 48688]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518264]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-10-27 462968]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-10-11 460920]
R2 OneSyncSvc_39f0d;OneSyncSvc_39f0d; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\Windows\system32\SecurityHealthService.exe [2017-09-29 518640]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2017-09-29 48688]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R3 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2017-09-29 48688]
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2017-11-04 10752]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc_39f0d;DevicesFlowUserSvc_39f0d; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-09-29 85504]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2017-11-04 526888]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-09-28 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2017-05-19 342456]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2015-06-03 217888]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService_39f0d;MessagingService_39f0d; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-11-19 175568]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518264]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-01-25 178760]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 PimIndexMaintenanceSvc_39f0d;PimIndexMaintenanceSvc_39f0d; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc_39f0d;PrintWorkflowUserSvc_39f0d; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\Windows\System32\svchost.exe [2017-09-29 48688]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2017-09-29 1288704]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2017-09-29 48688]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\Windows\system32\spectrum.exe [2017-10-25 956416]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-10-31 1641248]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2017-09-29 302592]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\Windows\System32\svchost.exe [2017-09-29 48688]

-----------------EOF-----------------

ahoj,
skus to najprv vycistit s Adwcleanerom
Nemozes sa divit, po pokusoch s nelegalnym SW ,,,

Ahoj, ďakujem za pomoc, prešiel som to ním a aj inými softami nič nenašlo, skúšal som aj pár antivi, všeličo sem doporučené, alebo návody čo som našiel na nete, ale tento browser hijacker či čo to je proste neviem nájsť v pc aby som ho zničil, ešte som win nekupoval je to nový PC, nedávno postavený.

pouzi zoek https://forum.viry.cz/viewtopic.php?f=1 ... k#p1494630

Zoek.exe v5.0.0.1 Updated 24-October-2017
Tool run by BEZPOX on ut 05. 12. 2017 at 8:50:32,97.
Microsoft Windows 10 Home 10.0.16299 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\BEZPOX\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

5. 12. 2017 8:51:15 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== FireFox Fix ======================

Deleted from C:\Users\BEZPOX\AppData\Roaming\Mozilla\Firefox\Profiles\t93u4nb8.default\prefs.js:
user_pref("browser.startup.homepage", "https://mail.google.com/mail/u/0/?shva=1#inbox");

Added to C:\Users\BEZPOX\AppData\Roaming\Mozilla\Firefox\Profiles\t93u4nb8.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\BEZPOX\AppData\Roaming\Mozilla\Firefox\Profiles\t93u4nb8.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"quickprint@hp.com"="C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension" [26. 01. 2011 14:27]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\BEZPOX\AppData\Roaming\Mozilla\Firefox\Profiles\t93u4nb8.default
C26CAF62FBD202016B0EBAE5C8CF0A37 - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1231201.dll - Shockwave for Director / Shockwave for Director
6745B601D1F1FAB82C7AF08B20250D85 - C:\Users\BEZPOX\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll - Google Update


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.apusx.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.apusx.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IE8SRC

==== Reset Google Chrome ======================

C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Preferences.bak was reset successfully
C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.bak was reset successfully
C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\BEZPOX\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\BEZPOX\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\BEZPOX\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\BEZPOX\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\BEZPOX\AppData\Local\Mozilla\Firefox\Profiles\t93u4nb8.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\BEZPOX\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\BEZPOX\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== Empty Temp Folders ======================

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\BEZPOX\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ut 05. 12. 2017 at 8:53:14,89 ======================


Nepomohlo, zaujímavé je teda aspoň pre mňa, že keď spustím browser ako správca tak ide normálne bez redirectu.

pozri si prelinkovanie suboru >> ikona - vlastnosti
niekde mas >> "C:\Users\BEZPOX\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.apusx.com

Práve to tam nie je v ikonke vo vlastnostiach je normálne uvedené
Ceiľ: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
Začať v priečinku: "C:\Program Files (x86)\Google\Chrome\Application"

A priamo na aplikácii je len
Umiestnenie: C:\Program Files (x86)\Google\Chrome\Application


Proste sa k tomu neviem dopátrať, prešiel som to minimálne týmito softami: Zeman AntiMalware, Malwarebytes, HitManPro...v žiadom ani zmienka o apusx alebo parallaxsearch.

Zatiaľ som nastavil priamo na browseroch cez ikonky, že spúšťať ako správca, tak to funguje normálne, ale dúfam, že niekde na pozadí sa to nebude nejako šíriť.

skus JRT https://filehippo.com/download_junkware_removal_tool/

Stále to nepomohlo tu je log po tom:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by BEZPOX (Administrator) on ut 05. 12. 2017 at 11:02:57,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 2

Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\BEZPOX\AppData\Roaming\pdfforge (Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ut 05. 12. 2017 at 11:04:37,91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

https://www.emsisoft.com/en/software/antimalware/
+
restart PC

Nepomohlo to, ono dalo by sa žiť aj s tým, ale všimol som si, že ak to aj spustím ako administrátor a ide prehliadač normálne, tak ak napríklad v klientovi League of Legends kliknem na odkaz, tak mi to napíše, že Google Chrome nereaguje a pritom ho mám spustený. Ak ma to bude ešte chvíľu dráždiť a nevyriešime to tak skúsim asi reinstall win + original key. Ale mám obavy, že aj potom by mi to tam ostalo, teda ak by som nešiel úplne clean instal.

Každopádne ďakujem za trpezlivosť a pomoc, čo ešte vyskúšame?

Odinstaluj Chrome, vycisti znovu s JRT a CCleanerom
a pouzivas docasne MSIE
Odomna vsetko, nebudem dalej mrhat cas nelegalnym OS