VIRY.CZ

Dobrý den,
občas mi přijde, že výkon procesoru je neadekvatni spuštěným aplikacím (ve správci úloh vidím výkon v grafu např. 95% a přitom mi běží jen firefox a soupis běžících procesů dává dohromady sotva 50%), tak si říkám, jestli jsem někde nenakoupil nějakej miner nebo jinou havěť. Vím, že moje železo už patří do starýho železa, ale aby se PC zadejchával i při spuštění jednoho okna firefoxu...?
Prosím tedy pěkně o kontrolu přiloženého logu.
Díky!
Ch.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Chrudos at 2018-10-08 20:13:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 11 GB (11%) free of 102 GB
Total RAM: 3326 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:13:52, on 8.10.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19130)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\Norton 360\Engine\22.15.1.8\NortonSecurity.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\tsnpstd3.exe
C:\Windows\vsnpstd3.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\Games\World_of_Tanks\WargamingGameUpdater.exe
C:\Program Files\AMD\ATI.ACE\Core-Static\MOM.exe
C:\Users\Chrudos\AppData\Roaming\uTorrent\utorrent.exe
C:\Program Files\Sony\Xperia Companion\XperiaCompanionAgent.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files\AMD\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\taskmgr.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Chrudos\Desktop\RSIT.exe
C:\Program Files\trend micro\Chrudos.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Norton Identity Safety - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\22.15.1.8\coIEPlg.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_181\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_181\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\22.15.1.8\coIEPlg.dll
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Chrudos\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [World of Tanks] "D:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Chrudos\AppData\Roaming\uTorrent\utorrent.exe"
O4 - HKCU\..\Run: [XperiaCompanionAgent] "C:\Program Files\Sony\Xperia Companion\XperiaCompanionAgent.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://portal.gondrand-logistics.com/d ... Client.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - D:\SteamLibrary\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Symantec Eraser Service (EraserSvc11720) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\EENGINE\N360.exe (file missing)
O23 - Service: GalaxyService - GOG.com - C:\Program Files\GalaxyClient\GalaxyService.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Norton Security (NortonSecurity) - Symantec Corporation - C:\Program Files\Norton 360\Engine\22.15.1.8\NortonSecurity.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Plays.tv Update Service (PlaysService) - Plays.tv, LLC - C:\Program Files\Raptr Inc\PlaysTV\plays_service.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Služba Xperia Companion (XperiaCompanionService) - Sony - C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe

--
End of file - 11028 bytes

======Scheduled tasks folder======

C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-2619245234-508670994-2240632080-1000Core.job - C:\Users\Chrudos\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-2619245234-508670994-2240632080-1000UA.job - C:\Users\Chrudos\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Chrudos\AppData\Roaming\Mozilla\Firefox\Profiles\sngqshkj.default-1480763298627

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 31.0.0.108 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_31_0_0_108.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.181.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.181.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_181\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\components\
IICAClient.xpt

C:\Program Files\Mozilla Firefox\plugins\
CCMSDK.dll
cgpcfg.dll
CgpCore.dll
confmgr.dll
ctxlogging.dll
ctxmui.dll
ICAClObj.class
icafile.dll
icalogon.dll
npicaN.dll
nppdf32.dll
sslsdk_b.dll
TcpPServ.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Safety - C:\Program Files\Norton 360\Engine\22.15.1.8\coIEPlg.dll [2018-09-07 952848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_181\bin\ssv.dll [2018-07-21 480120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-07-21 194424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\22.15.1.8\coIEPlg.dll [2018-09-07 952848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"tsnpstd3"=C:\Windows\tsnpstd3.exe [2006-06-19 262144]
"snpstd3"=C:\Windows\vsnpstd3.exe [2006-05-12 831488]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2013-03-30 180224]
"StartCCC"=C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [2015-08-04 748744]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2018-07-07 601424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Dropbox Update"=C:\Users\Chrudos\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-04 143144]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler []
"World of Tanks"=D:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-06-25 3139936]
"uTorrent"=C:\Users\Chrudos\AppData\Roaming\uTorrent\utorrent.exe [2015-02-22 416168]
"XperiaCompanionAgent"=C:\Program Files\Sony\Xperia Companion\XperiaCompanionAgent.exe [2018-05-29 2132320]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [2012-12-04 773728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConnectionCenter]
C:\Program Files\Citrix\ICA Client\concentr.exe [2012-03-28 309184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2013-11-02 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlaysTV]
C:\Program Files\Raptr Inc\PlaysTV\playstv_launcher.exe [2016-04-05 71440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr]
C:\Program Files\Raptr Inc\Raptr\raptrstub.exe --startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\World of Tanks]
D:\Games\World_of_Tanks\WargamingGameUpdater.exe [2018-06-25 3139936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2012-12-04 773728]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NofolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-10-08 19:48:08 ----D---- C:\FRST
2018-10-01 19:11:11 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2018-10-01 19:02:56 ----D---- C:\ProgramData\RogueKiller
2018-09-23 16:01:37 ----D---- C:\Program Files\AGEIA Technologies
2018-09-12 12:46:59 ----A---- C:\Windows\system32\mshtml.dll
2018-09-12 12:46:56 ----A---- C:\Windows\system32\jscript9.dll
2018-09-12 12:46:55 ----A---- C:\Windows\system32\shell32.dll
2018-09-12 12:46:55 ----A---- C:\Windows\system32\msxml6.dll
2018-09-12 12:46:54 ----A---- C:\Windows\system32\urlmon.dll
2018-09-12 12:46:54 ----A---- C:\Windows\system32\msxml3.dll
2018-09-12 12:46:54 ----A---- C:\Windows\system32\drivers\ks.sys
2018-09-12 12:46:53 ----A---- C:\Windows\system32\drivers\tcpip.sys
2018-09-12 12:46:52 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-09-12 12:46:52 ----A---- C:\Windows\system32\ntdll.dll
2018-09-12 12:46:52 ----A---- C:\Windows\system32\msjet40.dll
2018-09-12 12:46:51 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-09-12 12:46:50 ----A---- C:\Windows\system32\schedsvc.dll
2018-09-12 12:46:50 ----A---- C:\Windows\system32\msexcl40.dll
2018-09-12 12:46:50 ----A---- C:\Windows\system32\gdi32.dll
2018-09-12 12:46:50 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-09-12 12:46:49 ----A---- C:\Windows\system32\iedkcs32.dll
2018-09-12 12:46:49 ----A---- C:\Windows\system32\drivers\bowser.sys
2018-09-12 12:46:48 ----A---- C:\Windows\system32\halmacpi.dll
2018-09-12 12:46:48 ----A---- C:\Windows\system32\hal.dll
2018-09-12 12:46:48 ----A---- C:\Windows\system32\drivers\netio.sys
2018-09-12 12:46:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-09-12 12:46:48 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2018-09-12 12:46:47 ----A---- C:\Windows\system32\WindowsCodecs.dll
2018-09-12 12:46:47 ----A---- C:\Windows\system32\t2embed.dll
2018-09-12 12:46:47 ----A---- C:\Windows\system32\jscript.dll
2018-09-12 12:46:47 ----A---- C:\Windows\system32\atmfd.dll
2018-09-12 12:46:46 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-09-12 12:46:46 ----A---- C:\Windows\system32\mf3216.dll
2018-09-12 12:46:46 ----A---- C:\Windows\system32\halacpi.dll
2018-09-12 12:46:45 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-09-12 12:46:44 ----A---- C:\Windows\system32\rstrui.exe
2018-09-12 12:46:44 ----A---- C:\Windows\system32\rpcrt4.dll
2018-09-12 12:46:44 ----A---- C:\Windows\system32\lsasrv.dll
2018-09-12 12:46:44 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-09-12 12:46:44 ----A---- C:\Windows\system32\advapi32.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\wdigest.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\TSpkg.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\srcore.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\smss.exe
2018-09-12 12:46:43 ----A---- C:\Windows\system32\schannel.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\rpchttp.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\msv1_0.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\kerberos.dll
2018-09-12 12:46:43 ----A---- C:\Windows\system32\drivers\intelppm.sys
2018-09-12 12:46:42 ----A---- C:\Windows\system32\ncrypt.dll
2018-09-12 12:46:42 ----A---- C:\Windows\system32\drivers\viac7.sys
2018-09-12 12:46:42 ----A---- C:\Windows\system32\drivers\processr.sys
2018-09-12 12:46:42 ----A---- C:\Windows\system32\drivers\amdppm.sys
2018-09-12 12:46:42 ----A---- C:\Windows\system32\drivers\amdk8.sys
2018-09-12 12:46:41 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-09-12 12:46:41 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-09-12 12:46:41 ----A---- C:\Windows\system32\csrsrv.dll
2018-09-12 12:46:41 ----A---- C:\Windows\system32\auditpol.exe
2018-09-12 12:46:41 ----A---- C:\Windows\system32\appidsvc.dll
2018-09-12 12:46:41 ----A---- C:\Windows\system32\appidapi.dll
2018-09-12 12:46:40 ----A---- C:\Windows\system32\wininet.dll
2018-09-12 12:46:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-09-12 12:46:40 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-09-12 12:46:40 ----A---- C:\Windows\system32\apisetschema.dll
2018-09-12 12:46:39 ----A---- C:\Windows\system32\ieframe.dll
2018-09-12 12:46:38 ----A---- C:\Windows\system32\sspicli.dll
2018-09-12 12:46:38 ----A---- C:\Windows\system32\srclient.dll
2018-09-12 12:46:38 ----A---- C:\Windows\system32\lsass.exe
2018-09-12 12:46:38 ----A---- C:\Windows\system32\iertutil.dll
2018-09-12 12:46:38 ----A---- C:\Windows\system32\drivers\appid.sys
2018-09-12 12:46:38 ----A---- C:\Windows\system32\bcrypt.dll
2018-09-12 12:46:37 ----A---- C:\Windows\system32\vbscript.dll
2018-09-12 12:46:37 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-09-12 12:46:37 ----A---- C:\Windows\system32\cryptbase.dll
2018-09-12 12:46:36 ----A---- C:\Windows\system32\sspisrv.dll
2018-09-12 12:46:36 ----A---- C:\Windows\system32\secur32.dll
2018-09-12 12:46:36 ----A---- C:\Windows\system32\msfeeds.dll
2018-09-12 12:46:36 ----A---- C:\Windows\system32\credssp.dll
2018-09-12 12:46:36 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-09-12 12:46:35 ----A---- C:\Windows\system32\msobjs.dll
2018-09-12 12:46:35 ----A---- C:\Windows\system32\msaudite.dll
2018-09-12 12:46:34 ----A---- C:\Windows\system32\ieui.dll
2018-09-12 12:46:34 ----A---- C:\Windows\system32\ieapfltr.dll
2018-09-12 12:46:34 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-09-12 12:46:33 ----A---- C:\Windows\system32\adtschema.dll
2018-09-12 12:46:32 ----A---- C:\Windows\system32\webcheck.dll
2018-09-12 12:46:31 ----A---- C:\Windows\system32\mshtmled.dll
2018-09-12 12:46:31 ----A---- C:\Windows\system32\jscript9diag.dll
2018-09-12 12:46:31 ----A---- C:\Windows\system32\dxtrans.dll
2018-09-12 12:46:30 ----A---- C:\Windows\system32\occache.dll
2018-09-12 12:46:30 ----A---- C:\Windows\system32\msrating.dll
2018-09-12 12:46:30 ----A---- C:\Windows\system32\jsproxy.dll
2018-09-12 12:46:30 ----A---- C:\Windows\system32\dxtmsft.dll
2018-09-12 12:46:29 ----A---- C:\Windows\system32\ieUnatt.exe
2018-09-12 12:46:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-09-12 12:46:29 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-09-12 12:46:28 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-09-12 12:46:28 ----A---- C:\Windows\system32\MPSSVC.dll
2018-09-12 12:46:28 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-09-12 12:46:28 ----A---- C:\Windows\system32\inseng.dll
2018-09-12 12:46:27 ----A---- C:\Windows\system32\ie4uinit.exe
2018-09-12 12:46:27 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-09-12 12:46:26 ----A---- C:\Windows\system32\iesetup.dll
2018-09-12 12:46:26 ----A---- C:\Windows\system32\iernonce.dll
2018-09-12 12:46:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-09-12 12:46:25 ----A---- C:\Windows\system32\wfapigp.dll
2018-09-12 12:46:25 ----A---- C:\Windows\system32\lpk.dll
2018-09-12 12:46:25 ----A---- C:\Windows\system32\icfupgd.dll
2018-09-12 12:46:25 ----A---- C:\Windows\system32\fontsub.dll
2018-09-12 12:46:24 ----A---- C:\Windows\system32\msimg32.dll
2018-09-12 12:46:24 ----A---- C:\Windows\system32\dciman32.dll
2018-09-12 12:46:22 ----A---- C:\Windows\system32\netevent.dll
2018-09-12 12:46:21 ----A---- C:\Windows\system32\atmlib.dll
2018-09-12 12:46:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-09-12 12:46:13 ----A---- C:\Windows\system32\msxml6r.dll
2018-09-12 12:46:13 ----A---- C:\Windows\system32\msxml3r.dll

======List of files/folders modified in the last 1 month======

2018-10-08 20:13:50 ----D---- C:\Program Files\trend micro
2018-10-08 20:13:49 ----D---- C:\Windows\Temp
2018-10-08 20:13:39 ----D---- C:\Users\Chrudos\AppData\Roaming\uTorrent
2018-10-08 19:48:37 ----D---- C:\Windows\system32\config
2018-10-08 19:48:15 ----D---- C:\Windows
2018-10-08 19:47:58 ----A---- C:\Windows\ntbtlog.txt
2018-10-08 19:30:02 ----SHD---- C:\System Volume Information
2018-10-08 19:19:51 ----RD---- C:\Program Files
2018-10-08 19:17:59 ----D---- C:\Windows\system32\drivers
2018-10-08 17:44:30 ----D---- C:\Program Files\Mozilla Firefox
2018-10-08 06:44:18 ----D---- C:\Program Files\Steam
2018-10-08 00:39:05 ----D---- C:\Windows\system32\Tasks
2018-10-07 09:11:24 ----D---- C:\Windows\system32\catroot
2018-10-05 06:30:43 ----D---- C:\Windows\system32\catroot2
2018-10-04 16:29:10 ----D---- C:\Program Files\Mozilla Maintenance Service
2018-10-03 20:40:27 ----D---- C:\Program Files\Common Files\AV
2018-10-03 17:09:17 ----SHD---- C:\Windows\Installer
2018-10-03 17:03:44 ----D---- C:\Windows\System32
2018-10-01 19:02:56 ----HD---- C:\ProgramData
2018-10-01 18:36:37 ----D---- C:\Windows\Prefetch
2018-10-01 18:31:57 ----D---- C:\Program Files\NortonInstaller
2018-10-01 16:36:56 ----D---- C:\Windows\system32\drivers\NGC
2018-09-30 19:13:41 ----D---- C:\Windows\inf
2018-09-30 19:13:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-09-30 14:30:17 ----D---- C:\Users\Chrudos\AppData\Roaming\Dropbox
2018-09-23 17:04:20 ----D---- C:\Users\Chrudos\AppData\Roaming\Omerta
2018-09-23 12:01:07 ----D---- C:\Program Files\Common Files
2018-09-23 11:58:27 ----D---- C:\Program Files\Raptr Inc
2018-09-23 11:10:43 ----D---- C:\Program Files\Alawarhry.cz
2018-09-16 18:57:20 ----HD---- C:\Program Files\InstallShield Installation Information
2018-09-16 00:30:50 ----D---- C:\Program Files\Common Files\Steam
2018-09-15 21:50:03 ----D---- C:\Users\Chrudos\AppData\Roaming\SmartSteamEmu
2018-09-15 05:33:02 ----D---- C:\Windows\rescache
2018-09-15 00:54:14 ----RSD---- C:\Windows\assembly
2018-09-12 18:52:46 ----D---- C:\Windows\Microsoft.NET
2018-09-12 18:40:07 ----D---- C:\Windows\winsxs
2018-09-12 18:35:19 ----D---- C:\Program Files\Internet Explorer
2018-09-12 18:35:18 ----D---- C:\Windows\system32\cs-CZ
2018-09-12 18:35:17 ----D---- C:\Windows\system32\en-US
2018-09-12 18:35:14 ----D---- C:\Windows\AppPatch
2018-09-12 18:35:10 ----D---- C:\Windows\system32\DriverStore
2018-09-12 13:35:11 ----D---- C:\Windows\system32\MRT
2018-09-12 13:15:00 ----AC---- C:\Windows\system32\MRT.exe
2018-09-11 21:54:31 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2018-09-11 21:54:00 ----D---- C:\Windows\system32\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R0 SymEFASI;Symantec Extended File Attributes (SI); C:\Windows\system32\drivers\NGC\160F010.008\SYMEFASI.SYS [2018-09-07 1476776]
R1 BHDrvx86;BHDrvx86; \??\C:\Program Files\Norton 360\NortonData\22.7.0.76\Definitions\BASHDefs\20181002.004\BHDrvx86.sys [2018-09-20 1414128]
R1 ccSet_NGC;NGC Settings Manager; C:\Windows\system32\drivers\NGC\160F010.008\ccSetx86.sys [2018-09-07 149464]
R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2012-03-19 64800]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2018-10-08 399344]
R1 IDSVix86;IDSVix86; \??\C:\Program Files\Norton 360\NortonData\22.7.0.76\Definitions\IPSDefs\20181005.061\IDSvix86.sys [2018-08-14 1092576]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2012-12-09 113168]
R1 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\NGC\160F010.008\SRTSP.SYS [2018-09-07 703456]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\NGC\160F010.008\SRTSPX.SYS [2018-09-07 42464]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NGC\160F010.008\Ironx86.SYS [2018-09-07 243272]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NGC\160F010.008\symnets.sys [2018-09-07 423552]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 mi2c;mi2c; \??\C:\Windows\system32\drivers\mi2c.sys [2016-07-12 18224]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2011-02-11 35088]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-08-04 19503104]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-08-04 532480]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2016-02-24 78848]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2018-10-08 121840]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 Neo_VPN;VPN Client Device Driver - VPN; C:\Windows\system32\DRIVERS\Neo_0089.sys [2018-03-19 38144]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 SNPSTD3;StarCam Clip; C:\Windows\system32\DRIVERS\snpstd3.sys [2006-06-27 10148480]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2018-06-16 85072]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2018-02-10 52928]
S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2015-09-06 13528]
S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2015-09-06 26328]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 23040]
S3 MBAMSwissArmy;MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys []
S3 NAVENG;NAVENG; \??\C:\Program Files\Norton 360\NortonData\22.7.0.76\Definitions\SDSDefs\20160623.008\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Program Files\Norton 360\NortonData\22.7.0.76\Definitions\SDSDefs\20160623.008\NAVEX15.SYS []
S3 netr73;RT73 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr73.sys [2011-10-05 564800]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2012-01-09 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2012-01-09 8576]
S3 OSFMount;OSFMount; \??\C:\Program Files\OSFMount\OSFMount.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-06-11 19072]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2018-02-10 51904]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 28160]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2018-02-10 52928]
S3 ViaC7;Ovladač procesoru VIA C7; C:\Windows\system32\drivers\viac7.sys [2018-08-10 53248]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 wpCtrlDrv_NGC;Symantec Webcam Control functional driver; C:\Windows\System32\Drivers\NGC\160F010.008\wpCtrlDrv.sys [2018-09-07 781152]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-08-14 83984]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-08-04 214528]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [2015-08-04 276992]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe [2014-04-02 87368]
R2 NortonSecurity;Norton Security; C:\Program Files\Norton 360\Engine\22.15.1.8\NortonSecurity.exe [2018-09-07 288936]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 PlaysService;Plays.tv Update Service; C:\Program Files\Raptr Inc\PlaysTV\plays_service.exe [2016-04-05 32528]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-03-26 105096]
S2 EraserSvc11720;Symantec Eraser Service; C:\Program Files\Common Files\Symantec Shared\EENGINE\N360.exe /h ccCommon []
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2017-10-31 153168]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-05-23 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-09-11 335872]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-03-26 45688]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; D:\SteamLibrary\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [2013-12-24 25832]
S3 GalaxyService;GalaxyService; C:\Program Files\GalaxyClient\GalaxyService.exe [2014-09-18 2191648]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2017-10-31 153168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-08-23 104960]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 553288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2018-10-03 178128]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2018-09-08 1684256]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-10 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-03-26 135800]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-03-26 135800]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-03-26 135800]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Dobré odpoledne, tady je log:

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-10-04.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-09-2018
# Duration: 00:00:22
# OS: Windows 7 Home Premium
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1249 octets] - [16/06/2018 14:03:10]
AdwCleaner[S01].txt - [1310 octets] - [16/06/2018 14:04:47]
AdwCleaner[S02].txt - [1379 octets] - [09/10/2018 00:07:33]
AdwCleaner[S03].txt - [1440 octets] - [09/10/2018 00:16:34]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:services
Bonjour Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== SERVICES/DRIVERS ==========
Service Bonjour Service stopped successfully!
Service Bonjour Service deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Chrudos
->Temp folder emptied: 19016560 bytes
->Temporary Internet Files folder emptied: 2923225 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 794770804 bytes
->Flash cache emptied: 17692 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mcx1-CHRUDOS-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 401408 bytes
%systemroot%\System32 .tmp files removed: 1564672 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2157 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 2854 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 781,00 mb


[EMPTYFLASH]

User: All Users

User: Chrudos
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: Mcx1-CHRUDOS-PC

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 10092018_170736

Files moved on Reboot...
C:\Windows\temp\xperiacompanion\admin_log_2018_10_09T14_31_57Z.txt moved successfully.

Registry entries deleted on Reboot...

Smazáno. Nastala nějaká změna?

Subjektivně mi to přijde o trochu rychlejší, např. otevirani nových panelů ve ff. Ale koukám, svým laickým pohledem, že programy nenalezly nic extra škodlivého, je tedy možné, že železo už fakt přestává stíhat i prohližeč s více okny či panely...

Ano, nalezly víceméně zbytečnosti. Ještě můžeme provést hloubkový sken. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 11.10.18
Čas skenování: 18:22
Logovací soubor: dc4ed5e4-cd71-11e8-8007-001a4d4ae63b.json

-Informace o softwaru-
Verze: 3.6.1.2711
Verze komponentů: 1.0.463
Aktualizovat verzi balíku komponent: 1.0.7301
Licence: Bezplatný

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x86
Systém souborů: NTFS
Uživatel: Chrudos-PC\Chrudos

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 239866
Zjištěné hrozby: 0
Hrozby umístěné do karantény: 0
Uplynulý čas: 28 min, 0 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Je to OK. Malware určitě nezpůsobuje nárůst výkonu procesoru. Ještě můžete zkusit defragmentovat disk.

Super, defragmentovat zkusim (jen co se mi podari uvolnit nejaky misto na diskach ).
Děkuju mockrát za poskytnutou péči a přeju hezký večer!

Hezký den i vám a nemáte zač!