DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.18231  BrowserJavaVersion: 11.71.2
Run by breta at 11:40:20 on 2016-03-24
Microsoft Windows 7 Home Premium   6.1.7601.1.1250.420.1029.18.3767.1620 [GMT 1:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
C:\Program Files (x86)\USB Safely Remove\USBSRService.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\taskhost.exe
C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
C:\Program Files\Acer\Acer Updater\UpdaterService.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = www.google.com
uDefault_Page_URL = hxxp://acer.msn.com
mWinlogon: Userinit = userinit.exe,
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [USB Safely Remove] C:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe /startup
uRun: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
uRun: [uTorrent] "C:\Users\breta\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
mRun: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"                                                                                                                                                                                                                       
mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
dRunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
mExplorerRun: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
uPolicies-Explorer: NoSimpleNetIDList = dword:1
uPolicies-Explorer: NoDriveTypeAutoRun = dword:221
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: SoftwareSASGeneration = dword:1
mPolicies-Windows\System: EnableSmartScreen = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45} : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45}\34A5E4564764275656D416274796E656B6 : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45}\3596361313 : DHCPNameServer = 10.0.0.138
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45}\35F6E6970285075627961602479607F6F526561656 : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45}\35F6E6970285075627961602479607F6F526561656 : DHCPNameServer = 192.168.43.1
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45}\44F6C65636F596E6475627E65647 : DHCPNameServer = 213.46.172.37 213.46.172.36
TCP: Interfaces\{8EDAC809-85FE-45EF-95E8-061F76243A45}\4757F6E65647D23796D607C656 : DHCPNameServer = 158.196.0.53 158.196.99.166
TCP: Interfaces\{CB6556A9-0EE8-44A3-B09E-ED7D9F333A75} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{F1206CED-A2F0-48E7-B8BB-CCB0942D63AB} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{F1206CED-A2F0-48E7-B8BB-CCB0942D63AB} : DHCPNameServer = 213.192.40.6 213.192.40.10
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs= C:\Windows\SysWOW64\nvinit.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: ExplorerWnd Helper: {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll
x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
x64-Run: [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
x64-Run: [ShadowPlay] "C:\Windows\System32\rundll32.exe" C:\Windows\System32\nvspcap64.dll,ShadowPlayOnSystemStart
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\lhs0m2x8.default\
FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\breta\AppData\Local\Citrix\Plugins\104\npappdetector.dll
FF - plugin: C:\Users\breta\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
FF - plugin: E:\VLC\npvlc.dll
.
---- FIREFOX POLICIES ----
﻿FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2013-12-15 74544]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswvmm.sys [2013-12-15 287016]
R0 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;C:\Windows\System32\drivers\btath_bus.sys [2014-10-27 35016]
R0 iaStorA;iaStorA;C:\Windows\System32\drivers\iaStorA.sys [2013-11-21 632168]
R0 iaStorF;iaStorF;C:\Windows\System32\drivers\iaStorF.sys [2013-11-21 28008]
R0 nvpciflt;nvpciflt;C:\Windows\System32\drivers\nvpciflt.sys [2016-2-15 38336]
R1 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2016-3-23 37144]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswsnx.sys [2013-12-15 1070904]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswsp.sys [2013-12-15 463744]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver;C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2016-1-10 26528]
R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys [2011-7-21 22648]
R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys [2011-7-21 20520]
R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys [2011-7-21 62776]
R2 AdvancedSystemCareService9;Advanced SystemCare Service 9;C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [2016-1-11 827680]
R2 aswHwid;avast! HardwareID;C:\Windows\System32\drivers\aswHwid.sys [2014-5-11 37656]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswmonflt.sys [2013-12-15 107792]
R2 aswStm;aswStm;C:\Windows\System32\drivers\aswStm.sys [2014-1-1 165344]
R2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe [2014-10-27 322176]
R2 avast! Antivirus;Avast Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-2-10 237096]
R2 DiagTrack;Diagnostics Tracking Service;C:\Windows\System32\svchost.exe -k utcsvc [2009-7-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service;C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-10-1 1163200]
R2 Live Updater Service;Live Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-7-21 244624]
R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2011-6-17 255744]
R2 NvNetworkService;NVIDIA Network Service;C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-1-8 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service;C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-8-14 4812736]
R2 USBSafelyRemoveService;USB Safely Remove Assistant;C:\Program Files (x86)\USB Safely Remove\USBSRService.exe [2013-10-13 1521464]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2011-7-21 56344]
R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2011-7-21 158976]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2013-10-14 317440]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\k57nd60a.sys [2016-1-11 458960]
R3 NvStreamKms;NvStreamKms;C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-6-12 26560]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service;C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-8-14 6308288]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);C:\Windows\System32\drivers\nvvad64v.sys [2016-2-2 47760]
R3 SmbDrvI;SmbDrvI;C:\Windows\System32\drivers\Smb_driver_Intel.sys [2016-1-11 32936]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-5 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-5 125112]
S2 LiveUpdateSvc;LiveUpdate;C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2016-1-11 2934048]
S3 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-7-21 321104]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2015-10-28 1357104]
S3 GeneStor;Genesys Logic Storage Driver;C:\Windows\System32\drivers\GeneStor.sys [2016-1-11 60928]
S3 ggflt;SOMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2016-1-27 16088]
S3 ggsomc;SOMC USB Flash Driver;C:\Windows\System32\drivers\ggsomc.sys [2016-1-27 30424]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2016-3-9 114688]
S3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-8-28 25816]
S3 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-8-28 1135416]
S3 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-8-28 1513784]
S3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-8-28 63704]
S3 pwdrvio;pwdrvio;C:\Windows\System32\pwdrvio.sys [2013-10-12 19152]
S3 pwdspio;pwdspio;C:\Windows\System32\pwdspio.sys [2013-10-12 12504]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-10-12 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2011-7-21 243712]
S3 Service KMSELDI;Service KMSELDI;C:\Program Files\KMSpico\Service_KMS.exe [2015-10-18 971968]
S3 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-7-9 327296]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:\Windows\System32\drivers\ssadbus.sys [2011-5-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:\Windows\System32\drivers\ssadmdfl.sys [2011-5-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:\Windows\System32\drivers\ssadmdm.sys [2011-5-13 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:\Windows\System32\drivers\ssadserd.sys [2011-5-13 146920]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-2-16 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2013-10-12 30208]
S3 ttscp;Text-to-Speech system Epos;C:\Program Files (x86)\Epos\epos-2.4.85\src\epos.exe [2013-12-5 1620480]
S3 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-7-21 2320920]
S3 WatAdminSvc;Sluba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-10-12 1255736]
S3 WSDScan;Podpora skenovn WSD pes UMB;C:\Windows\System32\drivers\WSDScan.sys [2009-7-14 25088]
S3 ZAtheros Wlan Agent;ZAtheros Wlan Agent;C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe [2013-10-15 57344]
S4 EgisTec Ticket Service;EgisTec Ticket Service;C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-4-2 173424]
S4 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2013-10-12 867712]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-23 57184]
.
=============== File Associations ===============
.
ShellExec: SZBrowser.exe: open="C:\Program Files\AVAST Software\SZBrowser\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2016-03-23 06:43:04	37144	----a-w-	C:\Windows\System32\drivers\aswKbd.sys
2016-03-22 06:56:28	11249080	----a-w-	C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2016-03-22 06:56:05	11249080	----a-w-	C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6070695B-41B5-447C-94E2-38AEA30B718B}\mpengine.dll
2016-03-09 09:40:35	1684416	----a-w-	C:\Windows\System32\drivers\ntfs.sys
2016-03-09 09:39:24	5572032	----a-w-	C:\Windows\System32\ntoskrnl.exe
2016-03-09 09:38:58	7680	----a-w-	C:\Windows\SysWow64\instnm.exe
2016-03-09 09:37:55	381440	----a-w-	C:\Windows\System32\mfds.dll
.
==================== Find3M  ====================
.
2016-03-09 19:13:26	107792	----a-w-	C:\Windows\System32\drivers\aswmonflt.sys
2016-03-09 19:13:26	1070904	----a-w-	C:\Windows\System32\drivers\aswsnx.sys
2016-02-19 19:02:43	38336	----a-w-	C:\Windows\System32\CompatTelRunner.exe
2016-02-19 18:54:11	1168896	----a-w-	C:\Windows\System32\aeinv.dll
2016-02-19 14:07:35	1373184	----a-w-	C:\Windows\System32\appraiser.dll
2016-02-12 18:52:23	98816	----a-w-	C:\Windows\System32\wudriver.dll
2016-02-12 18:52:23	3169792	----a-w-	C:\Windows\System32\wucltux.dll
2016-02-12 18:52:23	192512	----a-w-	C:\Windows\System32\wuwebv.dll
2016-02-12 18:44:43	91136	----a-w-	C:\Windows\System32\WinSetupUI.dll
2016-02-12 18:39:55	174080	----a-w-	C:\Windows\SysWow64\wuwebv.dll
2016-02-12 18:18:22	37888	----a-w-	C:\Windows\System32\wuapp.exe
2016-02-12 18:18:05	12288	----a-w-	C:\Windows\System32\wu.upgrade.ps.dll
2016-02-12 18:05:17	93696	----a-w-	C:\Windows\SysWow64\wudriver.dll
2016-02-12 18:05:13	35328	----a-w-	C:\Windows\SysWow64\wuapp.exe
2016-02-11 18:56:26	95680	----a-w-	C:\Windows\System32\drivers\ksecdd.sys
2016-02-11 18:56:26	154560	----a-w-	C:\Windows\System32\drivers\ksecpkg.sys
2016-02-11 18:52:52	1733592	----a-w-	C:\Windows\System32\ntdll.dll
2016-02-11 18:49:42	362496	----a-w-	C:\Windows\System32\wow64win.dll
2016-02-11 18:49:42	243712	----a-w-	C:\Windows\System32\wow64.dll
2016-02-11 18:49:42	13312	----a-w-	C:\Windows\System32\wow64cpu.dll
2016-02-11 18:49:24	215040	----a-w-	C:\Windows\System32\winsrv.dll
2016-02-11 18:49:19	210432	----a-w-	C:\Windows\System32\wdigest.dll
2016-02-11 18:49:08	86528	----a-w-	C:\Windows\System32\TSpkg.dll
2016-02-11 18:49:00	28672	----a-w-	C:\Windows\System32\sspisrv.dll
2016-02-11 18:49:00	135680	----a-w-	C:\Windows\System32\sspicli.dll
2016-02-11 18:48:58	503808	----a-w-	C:\Windows\System32\srcore.dll
2016-02-11 18:48:58	50176	----a-w-	C:\Windows\System32\srclient.dll
2016-02-11 18:48:16	28160	----a-w-	C:\Windows\System32\secur32.dll
2016-02-11 18:48:14	344064	----a-w-	C:\Windows\System32\schannel.dll
2016-02-11 18:48:12	1214464	----a-w-	C:\Windows\System32\rpcrt4.dll
2016-02-11 18:47:33	16384	----a-w-	C:\Windows\System32\ntvdm64.dll
2016-02-11 18:45:59	312320	----a-w-	C:\Windows\System32\ncrypt.dll
2016-02-11 18:45:56	315392	----a-w-	C:\Windows\System32\msv1_0.dll
2016-02-11 18:45:51	60416	----a-w-	C:\Windows\System32\msobjs.dll
2016-02-11 18:45:35	146432	----a-w-	C:\Windows\System32\msaudite.dll
2016-02-11 18:44:45	3994560	----a-w-	C:\Windows\SysWow64\ntkrnlpa.exe
2016-02-11 18:44:45	3938240	----a-w-	C:\Windows\SysWow64\ntoskrnl.exe
2016-02-11 18:44:42	1461248	----a-w-	C:\Windows\System32\lsasrv.dll
2016-02-11 18:44:34	730112	----a-w-	C:\Windows\System32\kerberos.dll
2016-02-11 18:44:34	422400	----a-w-	C:\Windows\System32\KernelBase.dll
2016-02-11 18:42:25	43520	----a-w-	C:\Windows\System32\csrsrv.dll
2016-02-11 18:42:24	43520	----a-w-	C:\Windows\System32\cryptbase.dll
2016-02-11 18:42:24	22016	----a-w-	C:\Windows\System32\credssp.dll
2016-02-11 18:38:24	96768	----a-w-	C:\Windows\SysWow64\sspicli.dll
2016-02-11 18:38:24	665088	----a-w-	C:\Windows\SysWow64\rpcrt4.dll
2016-02-11 18:38:24	5120	----a-w-	C:\Windows\SysWow64\wow32.dll
2016-02-11 18:38:23	275456	----a-w-	C:\Windows\SysWow64\KernelBase.dll
2016-02-11 18:38:07	171520	----a-w-	C:\Windows\SysWow64\wdigest.dll
2016-02-11 18:38:00	65536	----a-w-	C:\Windows\SysWow64\TSpkg.dll
2016-02-11 18:37:53	43008	----a-w-	C:\Windows\SysWow64\srclient.dll
2016-02-11 18:37:11	22016	----a-w-	C:\Windows\SysWow64\secur32.dll
2016-02-11 18:37:09	251392	----a-w-	C:\Windows\SysWow64\schannel.dll
2016-02-11 18:35:14	223232	----a-w-	C:\Windows\SysWow64\ncrypt.dll
2016-02-11 18:35:09	259584	----a-w-	C:\Windows\SysWow64\msv1_0.dll
2016-02-11 18:35:06	60416	----a-w-	C:\Windows\SysWow64\msobjs.dll
2016-02-11 18:34:26	146432	----a-w-	C:\Windows\SysWow64\msaudite.dll
2016-02-11 18:33:30	553472	----a-w-	C:\Windows\SysWow64\kerberos.dll
2016-02-11 18:31:25	17408	----a-w-	C:\Windows\SysWow64\credssp.dll
2016-02-11 17:48:11	64000	----a-w-	C:\Windows\System32\auditpol.exe
2016-02-11 17:43:48	50176	----a-w-	C:\Windows\SysWow64\auditpol.exe
2016-02-11 17:41:42	338432	----a-w-	C:\Windows\System32\conhost.exe
2016-02-11 17:40:09	296960	----a-w-	C:\Windows\System32\rstrui.exe
2016-02-11 17:34:45	159232	----a-w-	C:\Windows\System32\drivers\mrxsmb.sys
2016-02-11 17:34:01	290816	----a-w-	C:\Windows\System32\drivers\mrxsmb10.sys
2016-02-11 17:33:54	129024	----a-w-	C:\Windows\System32\drivers\mrxsmb20.sys
2016-02-11 17:32:46	25600	----a-w-	C:\Windows\SysWow64\setup16.exe
2016-02-11 17:32:45	14336	----a-w-	C:\Windows\SysWow64\ntvdm64.dll
2016-02-11 17:32:43	2048	----a-w-	C:\Windows\SysWow64\user.exe
2016-02-11 17:32:25	30720	----a-w-	C:\Windows\System32\lsass.exe
2016-02-11 17:32:18	112640	----a-w-	C:\Windows\System32\smss.exe
2016-02-11 17:31:01	36352	----a-w-	C:\Windows\SysWow64\cryptbase.dll
2016-02-11 17:30:47	6144	---ha-w-	C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2016-02-11 17:30:47	4608	---ha-w-	C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-11 17:30:47	3584	---ha-w-	C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-11 17:30:47	3072	---ha-w-	C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2016-02-11 14:07:46	689152	----a-w-	C:\Windows\System32\generaltel.dll
2016-02-10 19:13:33	287016	----a-w-	C:\Windows\System32\drivers\aswvmm.sys
2016-02-10 07:12:28	165344	----a-w-	C:\Windows\System32\drivers\aswStm.sys
2016-02-10 07:12:27	74544	----a-w-	C:\Windows\System32\drivers\aswRvrt.sys
2016-02-10 07:12:27	37656	----a-w-	C:\Windows\System32\drivers\aswHwid.sys
2016-02-10 07:12:26	103064	----a-w-	C:\Windows\System32\drivers\aswRdr2.sys
2016-02-10 07:12:19	52184	----a-w-	C:\Windows\avastSS.scr
2016-02-09 09:57:08	12625920	----a-w-	C:\Windows\System32\wmploc.DLL
2016-02-09 09:56:09	5120	----a-w-	C:\Windows\System32\msdxm.ocx
2016-02-09 09:56:09	5120	----a-w-	C:\Windows\System32\dxmasf.dll
2016-02-09 09:55:34	30720	----a-w-	C:\Windows\System32\seclogon.dll
2016-02-09 09:54:38	9728	----a-w-	C:\Windows\System32\spwmp.dll
2016-02-09 09:51:32	12625408	----a-w-	C:\Windows\SysWow64\wmploc.DLL
2016-02-09 09:13:14	4096	----a-w-	C:\Windows\SysWow64\msdxm.ocx
2016-02-09 09:13:14	4096	----a-w-	C:\Windows\SysWow64\dxmasf.dll
2016-02-09 09:13:10	8192	----a-w-	C:\Windows\SysWow64\spwmp.dll
2016-02-09 05:41:27	6368824	----a-w-	C:\Windows\System32\nvcpl.dll
2016-02-09 05:41:27	2993720	----a-w-	C:\Windows\System32\nvsvc64.dll
2016-02-09 05:41:25	81856	----a-w-	C:\Windows\System32\nv3dappshextr.dll
2016-02-09 05:41:25	69568	----a-w-	C:\Windows\System32\nvshext.dll
2016-02-09 05:41:25	530368	----a-w-	C:\Windows\System32\nv3dappshext.dll
2016-02-09 05:41:25	392128	----a-w-	C:\Windows\System32\nvmctray.dll
2016-02-09 05:41:25	2563128	----a-w-	C:\Windows\System32\nvsvcr.dll
2016-02-09 05:41:25	1264696	----a-w-	C:\Windows\System32\nvvsvc.exe
2016-02-08 20:51:13	2724864	----a-w-	C:\Windows\SysWow64\mshtml.tlb
.
============= FINISH: 11:42:59,56 ===============
