Preventivka

Zpráva

konasek · #1 Příspěvek od **konasek** » 04 zář 2017 17:40

Prosím o kontrolu
Předem díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by kubaj at 2017-09-04 18:32:49
Microsoft Windows 10 Home
System drive C: has 563 GB (60%) free of 938 GB
Total RAM: 8131 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:32:54, on 04.09.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Twitch.exe
C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe
C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe
C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe
C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files\trend micro\kubaj.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [iCloudServices] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
O4 - HKCU\..\RunOnce: [Uninstall 17.3.6943.0625\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\kubaj\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64"
O4 - HKCU\..\RunOnce: [Uninstall 17.3.6943.0625] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\kubaj\AppData\Local\Microsoft\OneDrive\17.3.6943.0625"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: TMMonitor.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{dfdf22d4-db9a-43d5-b5bf-e15180d6c05b}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: DESlock+ Service (dlpsrv) - DESlock Limited. - C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10576 bytes

======Listing Processes======

winlogon.exe

C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
"fontdrvhost.exe"
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s hidserv

c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7db30d12-95a6-4783-ab59-8d8a80316e27 -SystemEventPortName:HostProcess-7d216b78-0976-4738-bff3-bc2f502e1982 -IoCancelEventPortName:HostProcess-f40fd0c1-445e-43c6-a9c4-47cef78b8906 -NonStateChangingEventPortName:HostProcess-57e6ae88-a52d-4a2e-b426-1c75a20806ce -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:9cc6fb72-7951-4c48-b9d6-0820a48390d6 -DeviceGroupId:WpdFsGroup
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k localservice -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -s netprofm
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
c:\windows\system32\svchost.exe -k localservicenonetwork -s NcdAutoSetup
C:\WINDOWS\system32\svchost.exe -k LocalService
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s FDResPub
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc
"C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k netsvcs -s SENS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s FontCache
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s HomeGroupProvider
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
dashost.exe {3735868f-9f7f-44c6-b3ffd95ecff2b4a1}
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
c:\windows\system32\svchost.exe -k netsvcs -s IKEEXT
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain
"C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe"
c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
c:\windows\system32\svchost.exe -k localservice -s W32Time
c:\windows\system32\svchost.exe -k netsvcs -s WpnService

"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer

c:\windows\system32\svchost.exe -k localservice -s CDPSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NgcSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s NgcCtnrSvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -s PolicyAgent
c:\windows\system32\svchost.exe -k netsvcs -s DoSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
"C:\Program Files\ESET\ESET Security\egui.exe" /hide
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
C:\WINDOWS\Explorer.EXE
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\IDT\WDM\Beats64.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Twitch.exe"
"C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe" --hostPort=50048 --contentPort=50048 --wsPort=50049 --windowWidth=1000 --windowHeight=661 --windowTop=10 --windowLeft=180 --windowMaximized=False --hostPath="C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Twitch.exe" --launchMode=Normal --enable-logging --enable-transparent-visuals --disable-smooth-scrolling --dataPath="C:\Users\kubaj\AppData\Roaming\Curse Client" --locale=cs-CZ --branch=1 --url=http://127.0.0.1:50048/?branch=1&locale ... port=50049
"C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe" --type=gpu-process --channel="9736.0.1734078058\1928260218" --mojo-application-channel-token=D4E3ECC9BA24A049210EA772EF0EBD24 --enable-logging --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=5,14,18,31,56,70 --gpu-vendor-id=0x10de --gpu-device-id=0x1382 --gpu-driver-vendor=NVIDIA --gpu-driver-version=22.21.13.8494 --gpu-driver-date=7-18-2017 --enable-logging --mojo-platform-channel-handle=1452 /prefetch:2
"C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe" --reporter-url=http://127.0.0.1:50048/ --application-name=Twitch "--crashes-directory=C:\Users\kubaj\AppData\Local\Temp\Twitch Crashes" --v=1
"C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\TwitchUI.exe" --type=renderer --disable-smooth-scrolling --enable-logging --no-sandbox --primordial-pipe-token=9B78556C46010D4711F96AE7CEA17E12 --lang=cs --app-user-model-id=Twitch --node-integration=true --preload="C:\Users\kubaj\AppData\Roaming\Curse Client\Bin\Electron\resources\app.asar\preload.js" --background-color=#17141f --enable-blink-features=AudioOutputDevices --hidden-page --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=96AE68C634C673E678A9F07D584D5FAA --mojo-application-channel-token=9B78556C46010D4711F96AE7CEA17E12 --channel="9736.1.335868428\611647669" --mojo-platform-channel-handle=2080 /prefetch:1
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" "-lang=cs_CZ" "-cachedir=C:\Users\kubaj\AppData\Local\Steam\htmlcache" "-steampid=8036" "-buildid=1500335472" "-steamid=0" "-clientui=C:\Program Files (x86)\Steam\clientui" --disable-spell-checking --disable-out-of-process-pac --enable-blink-features=ResizeObserver --disable-smooth-scrolling --disable-gpu-compositing --disable-gpu --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=gpu-process --lang=cs-CZ --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --use-gl=swiftshader-webgl --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,20,21,24,43,77 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x10de --gpu-device-id=0x1382 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --lang=cs-CZ --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --service-request-channel-token=617237AA3817BBA10B96E3FC5ED84CFF --mojo-platform-channel-handle=3512 --ignored=" --type=renderer " /prefetch:2
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -s LicenseManager
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --disable-smooth-scrolling --enable-blink-features=ResizeObserver --enable-pinch --service-pipe-token=26EB08B558EEF5F1FAD6DF1A8365391E --lang=en-US --lang=cs-CZ --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --disable-spell-checking --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-gpu-compositing --service-request-channel-token=26EB08B558EEF5F1FAD6DF1A8365391E --renderer-client-id=13 --mojo-platform-channel-handle=2368 /prefetch:1
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
C:\WINDOWS\system32\AUDIODG.EXE 0x478

"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s WdiSystemHost
c:\windows\system32\svchost.exe -k netsvcs -s seclogon
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k netsvcs -s gpsvc
"C:\Program Files\Mozilla Firefox\firefox.exe"
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2244.0.1683597838\298731909" -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" 2244 "\\.\pipe\gecko-crash-server-pipe.2244" gpu
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2244.1.1413327842\1703609508" -childID 1 -isForBrowser -intPrefs 5:50|6:-1|28:1000|33:20|34:10|43:128|44:10000|49:0|51:400|52:1|53:0|54:0|59:0|60:120|61:120|91:2|92:1|106:5000|117:0|119:0|130:10000|142:-1|147:128|148:10000|149:0|155:24|156:32768|158:0|159:0|167:5|171:1048576|172:100|173:5000|175:600|177:1|186:1|190:0|200:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|35:1|36:0|37:0|38:0|41:1|42:1|45:0|46:0|47:0|48:0|50:0|55:1|56:1|57:0|58:1|62:1|63:1|64:0|65:1|66:1|67:0|68:1|71:0|72:0|75:1|76:1|80:1|81:1|82:1|83:0|85:0|86:0|87:1|88:0|93:1|94:0|100:0|105:0|108:1|109:1|112:1|114:1|118:0|121:1|124:1|125:1|131:0|132:0|133:1|135:0|141:0|143:1|144:0|145:1|146:0|153:0|154:0|157:1|160:1|162:1|164:1|165:0|170:0|174:1|179:0|180:0|181:0|182:1|183:0|184:0|185:1|188:0|192:0|193:0|194:1|195:1|196:0|197:1|198:1|199:1|201:0|202:0|204:1|212:1|213:1|214:0|215:0|216:0| -stringPrefs "3:7;release|134:3;1.0|151:332; ¼½¾ǃː̷̸։֊׃״؉؊٪۔܁܂܃܄ᅟᅠ᜵ ‎‏‐’․‧  ‪‫‬‭‮ ‹›⁁⁄⁒ ⅓⅔⅕⅖⅗⅘⅙⅚⅛⅜⅝⅞⅟∕∶⎮╱⧶⧸⫻⫽⿰⿱⿲⿳⿴⿵⿶⿷⿸⿹⿺⿻　。〔〕〳゠ㅤ㈝㈞㎮㎯㏆㏟꞉︔︕︿﹝﹞．／｡ﾠ￹￺￻�|152:8;moderate|187:38;{237b0519-4009-4dc1-a0a9-2ba51c3625e7}|" -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" 2244 "\\.\pipe\gecko-crash-server-pipe.2244" tab
C:\WINDOWS\system32\msiexec.exe /V
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 700 708 716 8192 712
C:\WINDOWS\system32\svchost.exe -k netsvcs -s wlidsvc
"C:\Users\kubaj\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.141.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.141.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_141\bin\plugin2\npjp2.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-03 210120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_141\bin\ssv.dll [2017-07-23 571968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-03 3226824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-23 235584]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2017-08-18 1923008]
"BeatsOSDApp"=C:\Program Files\IDT\WDM\beats64.exe [2014-01-05 41664]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2017-07-14 303928]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2017-07-14 67384]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall 17.3.6943.0625\amd64"=C:\WINDOWS\system32\cmd.exe [2017-03-18 271872]
"Uninstall 17.3.6943.0625"=C:\WINDOWS\system32\cmd.exe [2017-03-18 271872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ArcSoft Connection Service"=C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-02-06 170496]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-07-12 587288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TMMonitor.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=60

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-09-04 18:32:49 ----D---- C:\rsit
2017-09-04 18:32:49 ----D---- C:\Program Files\trend micro
2017-09-04 18:18:49 ----SHD---- C:\Config.Msi
2017-09-04 17:35:07 ----A---- C:\WINDOWS\system32\default_error_stack-000001-000000.txt
2017-09-04 15:54:04 ----A---- C:\WINDOWS\system32\default_error_stack-000000-000000.txt
2017-08-25 10:43:29 ----D---- C:\AdwCleaner
2017-08-20 11:52:51 ----A---- C:\WINDOWS\system32\drivers\semav6msr64.sys
2017-08-20 11:52:50 ----D---- C:\ProgramData\Intel
2017-08-20 11:52:47 ----D---- C:\Program Files\Intel
2017-08-20 11:52:46 ----D---- C:\Program Files\Intel Driver Update Utility
2017-08-20 11:13:38 ----D---- C:\Program Files (x86)\Realtek
2017-08-19 12:50:55 ----D---- C:\ProgramData\ESET
2017-08-19 12:50:55 ----D---- C:\Program Files\ESET
2017-08-12 19:02:01 ----D---- C:\ProgramData\LogMeIn
2017-08-09 11:24:00 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-08-09 11:24:00 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-08-09 11:24:00 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-08-09 11:24:00 ----A---- C:\WINDOWS\system32\tquery.dll
2017-08-09 11:23:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-08-09 11:23:59 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-08-09 11:23:59 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2017-08-09 11:23:59 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-08-09 11:23:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\msrepl40.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\msjtes40.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\msjetoledb40.dll
2017-08-09 11:23:57 ----A---- C:\WINDOWS\SYSWOW64\msjet40.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\msxbde40.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\mstext40.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\mspbde40.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\msltus40.dll
2017-08-09 11:23:56 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2017-08-09 11:23:55 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2017-08-09 11:23:55 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll
2017-08-09 11:23:55 ----A---- C:\WINDOWS\SYSWOW64\mswdat10.dll
2017-08-09 11:23:55 ----A---- C:\WINDOWS\SYSWOW64\msjter40.dll
2017-08-09 11:23:55 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll
2017-08-09 11:23:55 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\tokenbinding.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\fdeploy.dll
2017-08-09 11:23:54 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2017-08-09 11:23:53 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2017-08-09 11:23:53 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-08-09 11:23:53 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-08-09 11:23:52 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-08-09 11:23:51 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-08-09 11:23:51 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-08-09 11:23:51 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-08-09 11:23:48 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-08-09 11:23:48 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-08-09 11:23:47 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-08-09 11:23:47 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-08-09 11:23:47 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-08-09 11:23:46 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-08-09 11:23:46 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-08-09 11:23:45 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-08-09 11:23:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-08-09 11:23:43 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2017-08-09 11:23:42 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-08-09 11:23:42 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-08-09 11:23:42 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-08-09 11:23:41 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-08-09 11:23:41 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\wersvc.dll
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\wermgr.exe
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\WerFault.exe
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\wer.dll
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\Faultrep.dll
2017-08-09 11:23:40 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-08-09 11:23:39 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-08-09 11:23:39 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-08-09 11:23:39 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-08-09 11:23:39 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-09 11:23:39 ----A---- C:\WINDOWS\system32\msIso.dll
2017-08-09 11:23:39 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-08-09 11:23:38 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-09 11:23:38 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-09 11:23:38 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-08-09 11:23:38 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-08-09 11:23:37 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-09 11:23:37 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-09 11:23:36 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-08-09 11:23:35 ----A---- C:\WINDOWS\system32\scksp.dll
2017-08-09 11:23:35 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-08-09 11:23:35 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-08-09 11:23:35 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-08-09 11:23:35 ----A---- C:\WINDOWS\system32\basecsp.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\werui.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\srvsvc.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\profsvcext.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\fdeploy.dll
2017-08-09 11:23:34 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-08-09 11:23:33 ----A---- C:\WINDOWS\system32\sscore.dll
2017-08-09 11:23:33 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-08-09 11:23:33 ----A---- C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\tokenbinding.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\dmcsps.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\coredpus.dll
2017-08-09 11:23:32 ----A---- C:\WINDOWS\system32\configmanager2.dll
2017-08-07 22:28:14 ----D---- C:\ProgramData\F-Secure
2017-08-07 20:17:02 ----D---- C:\Program Files (x86)\Spyware Terminator
2017-08-07 12:24:15 ----A---- C:\ProgramData\ntuser.dat
2017-08-06 23:20:06 ----A---- C:\WINDOWS\SYSWOW64\IpNatHlpClient.dll
2017-08-06 23:20:06 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2017-08-06 23:20:05 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-08-06 23:20:04 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-08-06 23:20:04 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-08-06 23:20:04 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-08-06 23:20:04 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-08-06 23:20:03 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-08-06 23:20:02 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-08-06 23:20:01 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-08-06 23:20:01 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\mfsensorgroup.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2017-08-06 23:20:00 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-08-06 23:20:00 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2017-08-06 23:20:00 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-08-06 23:20:00 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\shsvcs.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\shlwapi.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\qasf.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\msacm32.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\SYSWOW64\cmintegrator.dll
2017-08-06 23:19:59 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2017-08-06 23:19:59 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2017-08-06 23:19:59 ----A---- C:\WINDOWS\system32\cmintegrator.dll
2017-08-06 23:19:57 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-08-06 23:19:49 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2017-08-06 23:19:49 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-06 23:19:49 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-08-06 23:19:48 ----A---- C:\WINDOWS\system32\VCardParser.dll
2017-08-06 23:19:48 ----A---- C:\WINDOWS\system32\storewuauth.dll
2017-08-06 23:19:46 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-08-06 23:19:46 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-06 23:19:46 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-06 23:19:45 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-08-06 23:19:45 ----A---- C:\WINDOWS\system32\InputService.dll
2017-08-06 23:19:45 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2017-08-06 23:19:45 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-08-06 23:19:42 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-08-06 23:19:42 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2017-08-06 23:19:42 ----A---- C:\WINDOWS\system32\rastlsext.dll
2017-08-06 23:19:41 ----A---- C:\WINDOWS\system32\psmsrv.dll
2017-08-06 23:19:41 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-08-06 23:19:41 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-08-06 23:19:41 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-06 23:19:41 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-06 23:19:40 ----A---- C:\WINDOWS\system32\wudriver.dll
2017-08-06 23:19:40 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-08-06 23:19:40 ----A---- C:\WINDOWS\system32\ole32.dll
2017-08-06 23:19:40 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-08-06 23:19:40 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-08-06 23:19:40 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-08-06 23:19:39 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-06 23:19:39 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\services.exe
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\hal.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-06 23:19:38 ----A---- C:\WINDOWS\system32\bcd.dll
2017-08-06 23:19:37 ----A---- C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-06 23:19:37 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-06 23:19:37 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-06 23:19:37 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\officecsp.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\dwmredir.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-08-06 23:19:36 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-06 23:19:35 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-08-06 23:19:34 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-08-06 23:19:34 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2017-08-06 23:19:33 ----A---- C:\WINDOWS\system32\twinui.dll
2017-08-06 23:19:33 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-08-06 23:19:33 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-06 23:19:32 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-06 23:19:32 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\rastls.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-06 23:19:31 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-06 23:19:30 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-08-06 23:19:30 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-08-06 23:19:30 ----A---- C:\WINDOWS\system32\shell32.dll
2017-08-06 23:19:30 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-08-06 23:19:30 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\wininit.exe
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\efscore.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\dmcmnutils.dll
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\bcdedit.exe
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\bcdboot.exe
2017-08-06 23:19:29 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\untfs.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\ReAgent.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\msacm32.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\lpasvc.dll
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\autochk.exe
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\autofmt.exe
2017-08-06 23:19:28 ----A---- C:\WINDOWS\system32\autoconv.exe
2017-08-06 23:19:27 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\spbcd.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\shsvcs.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\shlwapi.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\qasf.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\ofdeploy.exe
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\dui70.dll
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2017-08-06 23:19:27 ----A---- C:\WINDOWS\system32\BootMenuUX.dll

======List of files/folders modified in the last 1 month======

2017-09-04 18:32:49 ----RD---- C:\Program Files
2017-09-04 18:32:17 ----D---- C:\WINDOWS\Temp
2017-09-04 18:31:25 ----D---- C:\WINDOWS\Prefetch
2017-09-04 18:29:05 ----SHDC---- C:\WINDOWS\Installer
2017-09-04 18:28:57 ----D---- C:\Program Files (x86)\Google
2017-09-04 18:25:21 ----D---- C:\WINDOWS\system32\drivers
2017-09-04 18:25:20 ----D---- C:\WINDOWS\system32\DriverStore
2017-09-04 18:25:20 ----D---- C:\WINDOWS\INF
2017-09-04 18:24:33 ----HD---- C:\Program Files\WindowsApps
2017-09-04 18:24:01 ----D---- C:\Program Files (x86)\Nokia
2017-09-04 18:23:41 ----RD---- C:\Program Files (x86)
2017-09-04 18:23:40 ----DC---- C:\WINDOWS\system32\DRVSTORE
2017-09-04 18:23:38 ----D---- C:\Windows
2017-09-04 18:23:02 ----SHD---- C:\System Volume Information
2017-09-04 18:22:49 ----D---- C:\WINDOWS\system32\config
2017-09-04 18:20:38 ----D---- C:\ProgramData\Nokia
2017-09-04 18:20:38 ----D---- C:\Program Files (x86)\Common Files
2017-09-04 18:20:37 ----D---- C:\WINDOWS\SysWOW64
2017-09-04 18:20:27 ----D---- C:\Users\kubaj\AppData\Roaming\Nokia Suite
2017-09-04 18:20:27 ----D---- C:\Users\kubaj\AppData\Roaming\Nokia
2017-09-04 18:19:57 ----D---- C:\WINDOWS\AppReadiness
2017-09-04 18:19:48 ----D---- C:\WINDOWS\system32\Tasks
2017-09-04 18:19:19 ----D---- C:\ProgramData\Package Cache
2017-09-04 18:08:26 ----AD---- C:\Users\kubaj\AppData\Roaming\Curse Client
2017-09-04 17:52:24 ----D---- C:\Program Files (x86)\Steam
2017-09-04 17:45:34 ----D---- C:\ProgramData\NVIDIA
2017-09-04 17:35:10 ----D---- C:\WINDOWS\system32\sru
2017-09-04 17:35:07 ----D---- C:\WINDOWS\System32
2017-09-04 17:34:55 ----HD---- C:\ProgramData
2017-09-04 17:34:15 ----D---- C:\WINDOWS\system32\catroot2
2017-09-04 17:32:21 ----AD---- C:\Program Files (x86)\Battle.net
2017-09-04 17:31:34 ----RD---- C:\WINDOWS\Microsoft.NET
2017-09-04 17:30:08 ----D---- C:\WINDOWS\system32\SleepStudy
2017-09-04 16:00:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-04 15:53:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-04 15:53:48 ----AD---- C:\Program Files\Mozilla Firefox
2017-09-04 15:46:28 ----D---- C:\WINDOWS\SoftwareDistribution
2017-09-03 19:10:19 ----AD---- C:\Program Files (x86)\World of Warcraft
2017-09-03 15:52:42 ----AD---- C:\Program Files (x86)\World of Warcraft Public Test
2017-09-03 15:51:40 ----D---- C:\WINDOWS\system32\NDF
2017-09-03 15:41:27 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-09-03 15:38:47 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2017-08-26 16:24:11 ----D---- C:\Users\kubaj\AppData\Roaming\vlc
2017-08-25 11:07:49 ----AD---- C:\Program Files\CCleaner
2017-08-25 10:47:27 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-08-25 10:46:43 ----D---- C:\WINDOWS\system32\CatRoot
2017-08-25 10:39:23 ----D---- C:\ProgramData\NVIDIA Corporation
2017-08-25 10:38:52 ----D---- C:\Program Files\NVIDIA Corporation
2017-08-20 11:13:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-08-20 11:10:42 ----SD---- C:\ProgramData\Microsoft
2017-08-19 13:13:30 ----D---- C:\Users\kubaj\AppData\Roaming\.minecraft
2017-08-19 13:00:59 ----D---- C:\Users\kubaj\AppData\Roaming\ESET
2017-08-19 12:53:44 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2017-08-19 12:51:24 ----HD---- C:\WINDOWS\ELAMBKUP
2017-08-19 12:45:07 ----D---- C:\Program Files\Common Files\AV
2017-08-18 06:37:05 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2017-08-18 06:37:05 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2017-08-18 06:37:05 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2017-08-18 06:37:04 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2017-08-18 06:37:04 ----A---- C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-08-18 06:36:59 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2017-08-18 06:36:59 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2017-08-17 20:11:53 ----A---- C:\WINDOWS\NvContainerRecovery.bat
2017-08-17 18:26:51 ----A---- C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-08-13 22:03:04 ----SHD---- C:\$RECYCLE.BIN
2017-08-13 20:18:12 ----D---- C:\Users\kubaj\AppData\Roaming\Notepad++
2017-08-13 20:06:13 ----D---- C:\WINDOWS\debug
2017-08-13 20:04:08 ----D---- C:\ProgramData\AVAST Software
2017-08-11 19:55:39 ----D---- C:\WINDOWS\WinSxS
2017-08-11 19:55:38 ----D---- C:\WINDOWS\rescache
2017-08-09 18:06:13 ----D---- C:\WINDOWS\system32\en-US
2017-08-09 18:06:08 ----D---- C:\WINDOWS\AppPatch
2017-08-09 11:31:50 ----D---- C:\WINDOWS\CbsTemp
2017-08-09 11:29:20 ----D---- C:\WINDOWS\system32\MRT
2017-08-09 11:25:06 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-08-07 21:43:02 ----RD---- C:\WINDOWS\assembly
2017-08-06 23:46:01 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2017-08-06 23:46:00 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-08-06 23:46:00 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-08-06 23:45:51 ----D---- C:\WINDOWS\system32\WinMetadata
2017-08-06 23:45:51 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-08-06 23:45:51 ----D---- C:\WINDOWS\system32\oobe
2017-08-06 23:45:49 ----D---- C:\WINDOWS\system32\cs-CZ
2017-08-06 23:45:39 ----D---- C:\WINDOWS\ShellExperiences
2017-08-06 23:45:30 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-08-06 23:45:30 ----D---- C:\Program Files\Windows Photo Viewer
2017-08-06 23:45:30 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-08-06 23:45:17 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-08-05 23:16:39 ----D---- C:\Users\kubaj\AppData\Roaming\Samsung
2017-08-05 23:16:39 ----D---- C:\Program Files (x86)\Samsung
2017-08-05 23:16:38 ----D---- C:\ProgramData\Samsung

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 DLMFENC;DLMFENC; C:\WINDOWS\system32\DRIVERS\DLMFENC.sys [2016-08-04 179712]
R0 DLPCRYPT;DLPCRYPT; C:\WINDOWS\system32\DRIVERS\dlpcrypt.sys [2016-08-09 121184]
R0 dlpvdisk;dlpvdisk; C:\WINDOWS\system32\DRIVERS\dlpvdisk.sys [2016-08-04 98304]
R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2017-05-04 107344]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-11-12 644968]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2017-06-22 132824]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2017-05-04 178056]
R1 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2017-05-04 78192]
R1 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2017-05-04 101648]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-03-18 54272]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-03-18 8192]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336]
R2 ekbdflt;ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [2017-05-04 50752]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-03-18 50688]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2017-03-18 79872]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 IT9135BDA;@oem17.inf,%IT9135Devcie.FriendlyName%;IT9135 BDA Devices; C:\WINDOWS\System32\Drivers\IT9135BDA.sys [2016-10-21 188280]
R3 MEIx64;@oem67.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2016-02-10 194624]
R3 NVHDA;@oem31.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2017-06-08 218712]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_9de7d87508ae6021\nvlddmkm.sys [2017-07-19 15668664]
R3 nvvad_WaveExtensible;@oem105.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2017-07-26 48064]
R3 nvvhci;@oem7.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys [2017-08-18 57792]
R3 rt640x64;@oem112.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-06-29 984032]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2014-01-05 551936]
S0 eelam;eelam; C:\WINDOWS\system32\DRIVERS\eelam.sys [2017-05-04 14880]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-03-18 123808]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-03-18 103328]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-03-18 58784]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-03-18 61848]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2017-03-18 36760]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 aswHdsKe;aswHdsKe; \??\C:\WINDOWS\system32\drivers\aswHdsKe.sys []
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-03-18 39424]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-03-18 122880]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-03-18 21504]
S3 Hamachi;@oem45.inf,%Hamachi.Service.DispName%;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2017-06-29 45680]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-03-18 51104]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-03-18 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-03-18 526240]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-03-18 842656]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-03-18 108960]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-08-18 30144]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2016-08-27 486968]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys []
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-03-18 936864]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 semav6msr64;semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [2016-10-18 21984]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352]
S3 ssudcdf;SAMSUNG Mobile Mode Changer Device; C:\WINDOWS\System32\drivers\ssudcdf.sys [2014-01-22 36608]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-07-19 83032]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-05-18 2246256]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2017-04-03 83768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 CDPUserSvc_b4764;Uživatelská služba platformy připojených zařízení_b4764; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2017-08-28 4424384]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 dlpsrv;DESlock+ Service; C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe [2016-07-08 540864]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2017-06-13 2625368]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-18 512960]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-07-19 462968]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-08-18 449984]
R2 OneSyncSvc_b4764;Hostitel synchronizace_b4764; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-07-07 336320]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 PimIndexMaintenanceSvc_b4764;Data kontaktů_b4764; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-07-18 1608480]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc_b4764;Tok zařízení_b4764; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2017-07-14 689976]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService_b4764;Služba zasílání zpráv_b4764; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-09-03 194000]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-18 512960]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-08-28 213696]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-18 1284608]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2017-03-18 302592]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S4 SystemUsageReportSvc_QUEENCREEK;Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe []

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 05 zář 2017 17:56

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

konasek · #3 Příspěvek od **konasek** » 05 zář 2017 18:49

# AdwCleaner 7.0.2.1 - Logfile created on Tue Sep 05 17:48:31 2017
# Updated on 2017/29/08 by Malwarebytes
# Database: 09-01-2017.2
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [1657 B] - [2017/8/25 8:46:30]
C:/AdwCleaner/AdwCleaner[C1].txt - [1405 B] - [2017/9/4 13:52:55]
C:/AdwCleaner/AdwCleaner[S0].txt - [1630 B] - [2017/8/25 8:45:48]
C:/AdwCleaner/AdwCleaner[S1].txt - [1245 B] - [2017/9/4 13:52:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt ##########

#4 Příspěvek od **Rudy** » 05 zář 2017 18:51

Toto je OK. Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=30&t=133101 .

konasek · #5 Příspěvek od **konasek** » 05 zář 2017 18:59

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
Ran by kubaj (administrator) on DESKTOP-7TEN4KR (05-09-2017 19:55:30)
Running from C:\Users\kubaj\Desktop
Loaded Profiles: kubaj (Available Profiles: defaultuser0 & kubaj)
Platform: Windows 10 Home Version 1703 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(DESlock Limited.) C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.15063.410_none_9e914f9d2d85dacb\TiWorker.exe
(Farbar) C:\Users\kubaj\Desktop\FRST64(1).exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2014-01-05] (Hewlett-Packard )
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-07-14] (Apple Inc.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [170496 2009-02-06] (ArcSoft Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-59048226-3285921248-4046965806-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-59048226-3285921248-4046965806-1001\...\MountPoints2: {cb1ef629-31ad-11e7-a014-60029222a9f7} - "G:\HiSuiteDownLoader.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk [2016-10-21]
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{dfdf22d4-db9a-43d5-b5bf-e15180d6c05b}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{dfdf22d4-db9a-43d5-b5bf-e15180d6c05b}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-59048226-3285921248-4046965806-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-03] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_141\bin\ssv.dll [2017-07-23] (Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-03] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-23] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-59048226-3285921248-4046965806-1001 -> hxxps://www.google.cz/

FireFox:
========
FF DefaultProfile: 1kstofs4.default
FF ProfilePath: C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default [2017-09-05]
FF Extension: (Privacy Badger) - C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2017-09-04]
FF Extension: (uBlock Origin) - C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default\Extensions\uBlock0@raymondhill.net.xpi [2017-09-03]
FF Extension: (Avast Online Security) - C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default\Extensions\wrc@avast.com.xpi [2017-08-07]
FF Extension: (Adblock Plus) - C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-24]
FF Extension: (Firefox Screenshots) - C:\Users\kubaj\AppData\Roaming\Mozilla\Firefox\Profiles\1kstofs4.default\features\{4589bcd6-bf49-4a46-8a2f-4c242ca18601}\screenshots@mozilla.org.xpi [2017-09-03]
FF Plugin: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-03] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-19] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-19] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2017-07-05]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-08-28] (Microsoft Corporation)
R2 dlpsrv; C:\Program Files\ESET\ESET Secure Data\dlpsrv.exe [540864 2016-07-08] (DESlock Limited.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2625368 2017-06-13] (ESET)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-19] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 DLMFENC; C:\WINDOWS\System32\DRIVERS\DLMFENC.sys [179712 2016-08-04] (DESlock Ltd.)
R0 DLPCRYPT; C:\WINDOWS\System32\DRIVERS\dlpcrypt.sys [121184 2016-08-09] (DESlock Ltd.)
R0 dlpvdisk; C:\WINDOWS\System32\DRIVERS\dlpvdisk.sys [98304 2016-08-04] (DESlock Ltd.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [132824 2017-06-22] (ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [107344 2017-05-04] (ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [14880 2017-05-04] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [178056 2017-05-04] (ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [50752 2017-05-04] (ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [78192 2017-05-04] (ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [101648 2017-05-04] (ESET)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.)
R3 IT9135BDA; C:\WINDOWS\System32\Drivers\IT9135BDA.sys [188280 2016-10-21] (ITE )
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_9de7d87508ae6021\nvlddmkm.sys [15668664 2017-07-19] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-08-18] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [984032 2017-06-29] (Realtek )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudcdf; C:\WINDOWS\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU Co., LTD.(http://www.devguru.co.kr))
R0 VDLPToken2; C:\WINDOWS\System32\DRIVERS\vdlptkn2.sys [135736 2016-08-04] (DESlock Ltd.)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [631200 2017-09-04] (IDRIX)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WUDFWpdComp; C:\WINDOWS\System32\drivers\WUDFRd.sys [220672 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-05 19:55 - 2017-09-05 19:56 - 000013391 _____ C:\Users\kubaj\Desktop\FRST.txt
2017-09-05 19:55 - 2017-09-05 19:55 - 000000000 ____D C:\FRST
2017-09-05 19:54 - 2017-09-05 19:54 - 000015327 _____ C:\Users\kubaj\Desktop\LM.bat
2017-09-05 19:53 - 2017-09-05 19:53 - 002395648 _____ (Farbar) C:\Users\kubaj\Desktop\FRST64(1).exe
2017-09-05 19:53 - 2017-09-05 19:53 - 000112640 _____ (forum.viry.cz) C:\Users\kubaj\Desktop\FRSTLauncher.exe
2017-09-05 19:46 - 2017-09-05 19:46 - 008182736 _____ (Malwarebytes) C:\Users\kubaj\Desktop\adwcleaner_7.0.2.1.exe
2017-09-05 19:16 - 2017-09-05 19:23 - 000001271 _____ C:\Users\kubaj\Desktop\nativelog.txt
2017-09-05 17:53 - 2017-09-05 17:54 - 000000000 ____D C:\Users\kubaj\Documents\The Witcher 3
2017-09-05 17:29 - 2017-09-05 17:29 - 000000000 ___SD C:\WINDOWS\system32\lxss
2017-09-05 15:20 - 2017-09-05 15:20 - 000001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-09-05 15:20 - 2017-09-05 15:20 - 000001051 _____ C:\Users\Public\Desktop\WinRAR.lnk
2017-09-05 15:20 - 2017-09-05 15:20 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-09-05 15:20 - 2017-09-05 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-09-05 15:20 - 2017-09-05 15:20 - 000000000 ____D C:\Program Files\WinRAR
2017-09-05 15:19 - 2017-09-05 15:19 - 002220872 _____ C:\Users\kubaj\Downloads\winrar-x64-550.exe
2017-09-04 19:56 - 2017-09-04 19:56 - 000765375 _____ C:\Users\kubaj\Desktop\test_1
2017-09-04 19:56 - 2017-09-04 19:56 - 000163131 _____ C:\Users\kubaj\Desktop\test
2017-09-04 19:49 - 2017-09-04 19:51 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\VeraCrypt
2017-09-04 19:49 - 2017-09-04 19:49 - 000631200 _____ (IDRIX) C:\WINDOWS\system32\Drivers\veracrypt.sys
2017-09-04 19:49 - 2017-09-04 19:49 - 000000895 _____ C:\Users\Public\Desktop\VeraCrypt.lnk
2017-09-04 19:49 - 2017-09-04 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt
2017-09-04 19:49 - 2017-09-04 19:49 - 000000000 ____D C:\Program Files\VeraCrypt
2017-09-04 18:32 - 2017-09-04 18:33 - 000000000 ____D C:\rsit
2017-09-04 18:32 - 2017-09-04 18:32 - 000000000 ____D C:\Program Files\trend micro
2017-09-04 18:31 - 2017-09-05 19:54 - 000029696 _____ C:\Users\kubaj\AppData\Local\MSGBOX.EXE
2017-09-04 18:30 - 2017-09-04 18:30 - 002395648 _____ (Farbar) C:\Users\kubaj\Downloads\FRST64.exe
2017-09-04 18:20 - 2017-09-04 18:20 - 000000000 ____D C:\Users\kubaj\AppData\Local\NokiaAccount
2017-09-04 18:14 - 2017-09-04 18:14 - 059888456 _____ (Krita Foundation) C:\Users\kubaj\Downloads\krita-3.2.1-x64-setup.exe
2017-09-04 18:03 - 2017-09-04 18:03 - 014360127 _____ C:\Users\kubaj\Documents\potvrzeníá o studi.pdf
2017-09-04 18:01 - 2017-09-04 18:02 - 014356197 _____ C:\Users\kubaj\Documents\Skener_20170904.pdf
2017-09-04 17:35 - 2017-09-04 17:35 - 000002426 _____ C:\WINDOWS\system32\default_error_stack-000001-000000.txt
2017-09-04 15:54 - 2017-09-04 15:54 - 000002426 _____ C:\WINDOWS\system32\default_error_stack-000000-000000.txt
2017-08-26 11:47 - 2017-08-26 12:28 - 592322590 _____ C:\Users\kubaj\Downloads\Jana_Eyrová-Osudová_láska(2006)-2_CZ[@].mp4
2017-08-26 11:36 - 2017-08-26 12:20 - 585034585 _____ C:\Users\kubaj\Downloads\Jana_Eyrová-Osudová_láska(2006)-1_CZ[@].mp4
2017-08-26 11:27 - 2017-08-26 12:12 - 435960348 _____ C:\Users\kubaj\Downloads\Scooby Doo - Souboj psích titánů (anim. 2013)cz IRISA.avi
2017-08-26 11:26 - 2017-08-26 12:40 - 1120285802 _____ C:\Users\kubaj\Downloads\Scooby Doo - Legenda o Fantosaurovi (anim. 2011)cz IRISA.avi
2017-08-26 11:26 - 2017-08-26 11:59 - 434110978 _____ C:\Users\kubaj\Downloads\Scooby Doo a děsivý strašák (anim. 2013)cz IRISA.avi
2017-08-26 11:26 - 2017-08-26 11:47 - 304640688 _____ C:\Users\kubaj\Downloads\Scooby-Doo-a-strašidelné-svátky-(anim.-2012)cz---IRISA.avi
2017-08-26 11:24 - 2017-08-26 12:30 - 975579222 _____ C:\Users\kubaj\Downloads\Kronika-rodu-Spiderwicků-cz-DVD-Rip-720x406.avi
2017-08-25 16:40 - 2017-08-25 16:40 - 002412720 _____ (Kaspersky Lab) C:\Users\kubaj\Desktop\kts18.0.0.405aben_12562.exe
2017-08-25 16:34 - 2017-08-25 16:34 - 009277347 _____ C:\Users\kubaj\Downloads\divka-v-ledu.mobi
2017-08-25 16:27 - 2017-08-25 16:30 - 368559664 _____ C:\Users\kubaj\Downloads\MinePeon-0.2.4.5.img.zip
2017-08-25 15:49 - 2017-08-25 16:17 - 483071286 _____ C:\Users\kubaj\Downloads\Černé.zrcadlo.02x01.Přijdu.hned.DVB-T.CZ.avi
2017-08-25 15:48 - 2017-08-25 16:30 - 742538636 _____ C:\Users\kubaj\Downloads\Černé zrcadlo - 3.Celá-tvá-minulost-(2011).avi
2017-08-25 15:48 - 2017-08-25 16:27 - 712812137 _____ C:\Users\kubaj\Downloads\Černé-zrcadlo-II.---Lovná-zvěř-CZ-dabing-Black-mirror-2-.mkv
2017-08-25 15:37 - 2017-08-25 15:37 - 000840017 _____ C:\Users\kubaj\Downloads\Kruh - Minier, Bernard.epub
2017-08-25 10:45 - 2017-08-25 10:45 - 065942208 _____ (Malwarebytes ) C:\Users\kubaj\Downloads\mb3-setup-consumer-3.2.2.2018.exe
2017-08-25 10:43 - 2017-09-05 19:50 - 000000000 ____D C:\AdwCleaner
2017-08-20 11:52 - 2017-09-04 18:19 - 000000000 ____D C:\Program Files\Intel Driver Update Utility
2017-08-20 11:52 - 2017-09-04 18:19 - 000000000 ____D C:\Program Files\Intel
2017-08-20 11:52 - 2017-08-20 11:53 - 000000000 ____D C:\ProgramData\Intel
2017-08-20 11:52 - 2017-08-20 11:52 - 010461728 _____ (Intel) C:\Users\kubaj\Downloads\Intel Driver Update Utility Installer.exe
2017-08-20 11:52 - 2016-10-18 17:14 - 000021984 _____ C:\WINDOWS\system32\Drivers\semav6msr64.sys
2017-08-20 11:13 - 2017-08-20 11:13 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-08-19 13:04 - 2017-08-19 13:04 - 009145472 _____ (ESET, spol. s r.o.) C:\Users\kubaj\Downloads\eset_sysrescue_live_creator_enu.exe
2017-08-19 13:01 - 2017-08-19 13:01 - 000000000 ____D C:\Users\kubaj\AppData\Local\DESlock+
2017-08-19 12:51 - 2017-08-19 12:51 - 000002065 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2017-08-19 12:50 - 2017-08-19 13:01 - 000000000 ____D C:\Program Files\ESET
2017-08-19 12:50 - 2017-08-19 12:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2017-08-19 12:50 - 2017-08-19 12:50 - 000000000 ____D C:\ProgramData\ESET
2017-08-19 12:41 - 2017-08-19 12:41 - 003151488 _____ (ESET) C:\Users\kubaj\Downloads\eset_smart_security_premium_live_installer.exe
2017-08-13 20:00 - 2017-08-13 20:10 - 163616712 _____ (Kaspersky Lab) C:\Users\kubaj\Downloads\kts18.0.0.405en_full.exe
2017-08-13 19:46 - 2017-08-13 19:46 - 000167296 _____ (Gibson Research Corp.) C:\Users\kubaj\Downloads\DNSBench.exe
2017-08-12 19:26 - 2017-08-12 19:26 - 000000784 _____ C:\Users\kubaj\Desktop\addony.ccip
2017-08-12 19:02 - 2017-08-12 19:02 - 000000000 ____D C:\Users\kubaj\AppData\Local\LogMeIn
2017-08-12 19:02 - 2017-08-12 19:02 - 000000000 ____D C:\ProgramData\LogMeIn
2017-08-12 19:00 - 2017-08-12 19:00 - 009781248 _____ C:\Users\kubaj\Downloads\hamachi.msi
2017-08-09 11:24 - 2017-08-01 04:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-08-09 11:24 - 2017-08-01 04:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-09 11:24 - 2017-08-01 04:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-09 11:24 - 2017-08-01 03:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-09 11:23 - 2017-09-05 17:29 - 000865696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lxcore.sys
2017-08-09 11:23 - 2017-08-01 04:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-09 11:23 - 2017-08-01 04:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-08-09 11:23 - 2017-08-01 04:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-09 11:23 - 2017-08-01 04:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-08-09 11:23 - 2017-08-01 04:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-09 11:23 - 2017-08-01 04:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-08-09 11:23 - 2017-08-01 04:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-08-09 11:23 - 2017-08-01 04:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-09 11:23 - 2017-08-01 04:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-08-09 11:23 - 2017-08-01 04:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-08-09 11:23 - 2017-08-01 04:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-09 11:23 - 2017-08-01 04:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-09 11:23 - 2017-08-01 04:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-09 11:23 - 2017-08-01 04:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-09 11:23 - 2017-08-01 04:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-09 11:23 - 2017-08-01 04:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-08-09 11:23 - 2017-08-01 04:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-09 11:23 - 2017-08-01 04:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-09 11:23 - 2017-08-01 04:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-08-09 11:23 - 2017-08-01 04:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-09 11:23 - 2017-08-01 04:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-09 11:23 - 2017-08-01 04:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-09 11:23 - 2017-08-01 04:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-09 11:23 - 2017-08-01 04:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-09 11:23 - 2017-08-01 04:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-09 11:23 - 2017-08-01 04:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-09 11:23 - 2017-08-01 04:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-09 11:23 - 2017-08-01 04:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-08-09 11:23 - 2017-08-01 04:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-08-09 11:23 - 2017-08-01 04:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-08-09 11:23 - 2017-08-01 04:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-08-09 11:23 - 2017-08-01 04:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-08-09 11:23 - 2017-08-01 04:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-08-09 11:23 - 2017-08-01 04:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-08-09 11:23 - 2017-08-01 04:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-08-09 11:23 - 2017-08-01 04:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-08-09 11:23 - 2017-08-01 04:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-08-09 11:23 - 2017-08-01 04:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-08-09 11:23 - 2017-08-01 04:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-09 11:23 - 2017-08-01 04:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-08-09 11:23 - 2017-08-01 04:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-08-09 11:23 - 2017-08-01 04:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-08-09 11:23 - 2017-08-01 04:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-08-09 11:23 - 2017-08-01 04:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-09 11:23 - 2017-08-01 04:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-09 11:23 - 2017-08-01 04:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-08-09 11:23 - 2017-08-01 04:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-08-09 11:23 - 2017-08-01 04:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-09 11:23 - 2017-08-01 03:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-09 11:23 - 2017-08-01 03:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-09 11:23 - 2017-08-01 03:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-09 11:23 - 2017-08-01 03:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-09 11:23 - 2017-08-01 03:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-09 11:23 - 2017-08-01 03:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-09 11:23 - 2017-08-01 03:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-08-09 11:23 - 2017-08-01 03:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-09 11:23 - 2017-08-01 03:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-09 11:23 - 2017-08-01 03:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-09 11:23 - 2017-08-01 03:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-09 11:23 - 2017-08-01 03:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-09 11:23 - 2017-08-01 03:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-09 11:23 - 2017-08-01 03:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-09 11:23 - 2017-08-01 03:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-09 11:23 - 2017-08-01 03:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-09 11:23 - 2017-08-01 03:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-09 11:23 - 2017-08-01 03:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-09 11:23 - 2017-08-01 03:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-09 11:23 - 2017-08-01 03:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-09 11:23 - 2017-08-01 03:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-09 11:23 - 2017-08-01 03:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-08-09 11:23 - 2017-08-01 03:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-09 11:23 - 2017-08-01 03:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-09 11:23 - 2017-08-01 03:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-09 11:23 - 2017-08-01 03:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-09 11:23 - 2017-08-01 03:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-09 11:23 - 2017-08-01 03:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-09 11:23 - 2017-08-01 03:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-09 11:23 - 2017-08-01 03:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-09 11:23 - 2017-08-01 03:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-09 11:23 - 2017-08-01 03:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-09 11:23 - 2017-08-01 03:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-09 11:23 - 2017-08-01 03:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-09 11:23 - 2017-08-01 03:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-09 11:23 - 2017-08-01 03:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-09 11:23 - 2017-08-01 03:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-09 11:23 - 2017-08-01 03:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-08-09 11:23 - 2017-08-01 03:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-08-09 11:23 - 2017-08-01 03:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-09 11:23 - 2017-08-01 03:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2017-08-09 11:23 - 2017-08-01 03:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-08-09 11:23 - 2017-08-01 03:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-09 11:23 - 2017-08-01 00:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-09 11:05 - 2017-08-09 11:05 - 000051515 _____ C:\Users\kubaj\Downloads\MDK-1.7.10-9.1.0.281.zip
2017-08-07 22:28 - 2017-08-09 10:55 - 000000000 ____D C:\Users\kubaj\AppData\Local\FSDART
2017-08-07 22:28 - 2017-08-07 22:30 - 000000000 ____D C:\ProgramData\F-Secure
2017-08-07 22:28 - 2017-08-07 22:28 - 000524248 _____ (F-Secure Corporation) C:\Users\kubaj\Downloads\F-SecureOnlineScanner.exe
2017-08-07 22:28 - 2017-08-07 22:28 - 000000000 ____D C:\Users\kubaj\AppData\Local\F-Secure
2017-08-07 20:17 - 2017-08-07 20:30 - 000000000 ____D C:\Program Files (x86)\Spyware Terminator
2017-08-07 20:16 - 2017-08-07 20:16 - 009694960 _____ (Crawler Group ) C:\Users\kubaj\Downloads\SpywareTerminatorSetup.exe
2017-08-07 12:22 - 2017-08-07 12:22 - 006948656 _____ (AVAST Software) C:\Users\kubaj\Downloads\avast_free_antivirus_setup_online.exe
2017-08-06 23:20 - 2017-07-28 07:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-06 23:20 - 2017-07-28 07:20 - 000279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-06 23:20 - 2017-07-28 07:15 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-06 23:20 - 2017-07-28 07:07 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-08-06 23:20 - 2017-07-28 06:48 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-08-06 23:20 - 2017-07-28 06:48 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-08-06 23:20 - 2017-07-28 06:47 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-08-06 23:20 - 2017-07-28 06:40 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-08-06 23:20 - 2017-07-28 06:38 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-08-06 23:20 - 2017-07-28 06:37 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-08-06 23:20 - 2017-07-28 06:36 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-08-06 23:20 - 2017-07-28 06:35 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-08-06 23:20 - 2017-07-28 06:33 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-08-06 23:20 - 2017-07-28 06:33 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-08-06 23:20 - 2017-07-28 06:33 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-08-06 23:20 - 2017-07-28 06:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-08-06 23:20 - 2017-07-28 06:20 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IpNatHlpClient.dll
2017-08-06 23:20 - 2017-07-28 06:18 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-08-06 23:20 - 2017-07-28 06:17 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-08-06 23:20 - 2017-07-28 06:16 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-08-06 23:20 - 2017-07-28 06:16 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-08-06 23:20 - 2017-07-28 06:15 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-08-06 23:20 - 2017-07-28 06:15 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-08-06 23:20 - 2017-07-28 06:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-08-06 23:20 - 2017-07-28 06:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-08-06 23:20 - 2017-07-28 06:13 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-08-06 23:20 - 2017-07-28 06:12 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-08-06 23:20 - 2017-07-28 06:12 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-08-06 23:20 - 2017-07-28 06:12 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-06 23:20 - 2017-07-28 06:12 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-08-06 23:20 - 2017-07-28 06:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-08-06 23:20 - 2017-07-28 06:11 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-08-06 23:20 - 2017-07-28 06:10 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-08-06 23:20 - 2017-07-28 06:10 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-08-06 23:20 - 2017-07-28 06:09 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-08-06 23:20 - 2017-07-28 06:08 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-08-06 23:20 - 2017-07-28 06:08 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-08-06 23:20 - 2017-07-28 06:08 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-08-06 23:20 - 2017-07-28 06:08 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-08-06 23:20 - 2017-07-28 06:07 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-08-06 23:20 - 2017-07-28 06:05 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-08-06 23:20 - 2017-07-28 06:05 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-08-06 23:20 - 2017-07-28 06:05 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-08-06 23:20 - 2017-07-28 06:02 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-08-06 23:20 - 2017-07-28 06:02 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-08-06 23:19 - 2017-07-28 07:30 - 001068720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-06 23:19 - 2017-07-28 07:25 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-06 23:19 - 2017-07-28 07:24 - 002327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-06 23:19 - 2017-07-28 07:24 - 000455584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-06 23:19 - 2017-07-28 07:24 - 000119904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-06 23:19 - 2017-07-28 07:24 - 000116280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-06 23:19 - 2017-07-28 07:23 - 002969888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-06 23:19 - 2017-07-28 07:22 - 000923048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-06 23:19 - 2017-07-28 07:17 - 000660680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-06 23:19 - 2017-07-28 07:16 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-06 23:19 - 2017-07-28 07:16 - 000961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-06 23:19 - 2017-07-28 07:15 - 005302968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-06 23:19 - 2017-07-28 07:15 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-06 23:19 - 2017-07-28 07:15 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-06 23:19 - 2017-07-28 07:14 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-06 23:19 - 2017-07-28 07:14 - 000318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-06 23:19 - 2017-07-28 07:13 - 007907344 _____ C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-06 23:19 - 2017-07-28 07:13 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-06 23:19 - 2017-07-28 07:13 - 002604248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-06 23:19 - 2017-07-28 07:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-06 23:19 - 2017-07-28 07:13 - 001033544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-06 23:19 - 2017-07-28 07:13 - 000192264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-06 23:19 - 2017-07-28 07:13 - 000104432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-06 23:19 - 2017-07-28 07:12 - 021353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-06 23:19 - 2017-07-28 07:12 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-06 23:19 - 2017-07-28 07:12 - 001325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-06 23:19 - 2017-07-28 07:12 - 000323936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-06 23:19 - 2017-07-28 07:10 - 002679200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-06 23:19 - 2017-07-28 07:10 - 001114528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-06 23:19 - 2017-07-28 07:09 - 000529992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-06 23:19 - 2017-07-28 07:09 - 000527976 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-06 23:19 - 2017-07-28 07:09 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-08-06 23:19 - 2017-07-28 06:48 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-08-06 23:19 - 2017-07-28 06:40 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-08-06 23:19 - 2017-07-28 06:36 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.dll
2017-08-06 23:19 - 2017-07-28 06:35 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2017-08-06 23:19 - 2017-07-28 06:31 - 003995136 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-06 23:19 - 2017-07-28 06:30 - 001722880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-08-06 23:19 - 2017-07-28 06:29 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-06 23:19 - 2017-07-28 06:29 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-06 23:19 - 2017-07-28 06:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-06 23:19 - 2017-07-28 06:26 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-06 23:19 - 2017-07-28 06:26 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-06 23:19 - 2017-07-28 06:26 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-06 23:19 - 2017-07-28 06:26 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-06 23:19 - 2017-07-28 06:26 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-06 23:19 - 2017-07-28 06:25 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-08-06 23:19 - 2017-07-28 06:25 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-06 23:19 - 2017-07-28 06:25 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-06 23:19 - 2017-07-28 06:25 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-06 23:19 - 2017-07-28 06:24 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-08-06 23:19 - 2017-07-28 06:24 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-06 23:19 - 2017-07-28 06:24 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-06 23:19 - 2017-07-28 06:24 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-08-06 23:19 - 2017-07-28 06:24 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-06 23:19 - 2017-07-28 06:23 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-06 23:19 - 2017-07-28 06:23 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-06 23:19 - 2017-07-28 06:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-06 23:19 - 2017-07-28 06:22 - 000778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-06 23:19 - 2017-07-28 06:22 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-06 23:19 - 2017-07-28 06:22 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-06 23:19 - 2017-07-28 06:22 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-06 23:19 - 2017-07-28 06:22 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-06 23:19 - 2017-07-28 06:22 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-06 23:19 - 2017-07-28 06:22 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-06 23:19 - 2017-07-28 06:22 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-06 23:19 - 2017-07-28 06:21 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-06 23:19 - 2017-07-28 06:21 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-06 23:19 - 2017-07-28 06:21 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-06 23:19 - 2017-07-28 06:21 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-06 23:19 - 2017-07-28 06:21 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-06 23:19 - 2017-07-28 06:21 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-06 23:19 - 2017-07-28 06:21 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2017-08-06 23:19 - 2017-07-28 06:20 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-06 23:19 - 2017-07-28 06:20 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-06 23:19 - 2017-07-28 06:19 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-06 23:19 - 2017-07-28 06:19 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-08-06 23:19 - 2017-07-28 06:19 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2017-08-06 23:19 - 2017-07-28 06:18 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-06 23:19 - 2017-07-28 06:18 - 001298432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-06 23:19 - 2017-07-28 06:18 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-06 23:19 - 2017-07-28 06:18 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-06 23:19 - 2017-07-28 06:18 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-06 23:19 - 2017-07-28 06:18 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-06 23:19 - 2017-07-28 06:18 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-06 23:19 - 2017-07-28 06:17 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-06 23:19 - 2017-07-28 06:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-06 23:19 - 2017-07-28 06:17 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-06 23:19 - 2017-07-28 06:17 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-06 23:19 - 2017-07-28 06:17 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-06 23:19 - 2017-07-28 06:16 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-06 23:19 - 2017-07-28 06:16 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-06 23:19 - 2017-07-28 06:16 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qasf.dll
2017-08-06 23:19 - 2017-07-28 06:15 - 003204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-06 23:19 - 2017-07-28 06:15 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-06 23:19 - 2017-07-28 06:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-06 23:19 - 2017-07-28 06:14 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-06 23:19 - 2017-07-28 06:14 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-06 23:19 - 2017-07-28 06:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-08-06 23:19 - 2017-07-28 06:13 - 004535296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-06 23:19 - 2017-07-28 06:13 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-06 23:19 - 2017-07-28 06:13 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-06 23:19 - 2017-07-28 06:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-08-06 23:19 - 2017-07-28 06:13 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-06 23:19 - 2017-07-28 06:13 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-08-06 23:19 - 2017-07-28 06:12 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-06 23:19 - 2017-07-28 06:12 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-06 23:19 - 2017-07-28 06:12 - 002939392 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-06 23:19 - 2017-07-28 06:12 - 002444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-06 23:19 - 2017-07-28 06:12 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-06 23:19 - 2017-07-28 06:11 - 001357312 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-06 23:19 - 2017-07-28 06:10 - 001706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-06 23:19 - 2017-07-28 06:10 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-06 23:19 - 2017-07-28 06:10 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsvcs.dll
2017-08-06 23:19 - 2017-07-28 06:09 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-06 23:19 - 2017-07-28 06:09 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-06 23:19 - 2017-07-28 06:08 - 000600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-06 23:19 - 2017-07-28 06:08 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-06 23:19 - 2017-07-28 06:07 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-06 23:19 - 2017-07-28 06:07 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-06 23:19 - 2017-07-28 06:07 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-06 23:19 - 2017-07-28 06:07 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-06 23:19 - 2017-07-28 06:06 - 001833984 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-06 23:19 - 2017-07-28 06:06 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-06 23:19 - 2017-07-28 06:06 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-06 23:19 - 2017-07-28 06:05 - 001525760 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-06 23:19 - 2017-07-28 06:05 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-06 23:19 - 2017-07-28 06:05 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-06 23:19 - 2017-07-28 06:05 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-06 23:19 - 2017-07-28 06:05 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-06 23:19 - 2017-07-28 06:02 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-05 19:56 - 2016-12-16 11:53 - 000000000 ____D C:\Users\kubaj\AppData\LocalLow\Mozilla
2017-09-05 19:55 - 2017-04-19 20:50 - 000004208 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E7663852-59DF-4383-820D-A7914B2ABC43}
2017-09-05 19:53 - 2017-04-19 20:32 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-05 19:51 - 2017-04-19 20:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-09-05 19:50 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2017-09-05 19:47 - 2016-10-05 20:34 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\Curse Client
2017-09-05 19:44 - 2016-10-04 21:24 - 000000000 ____D C:\Program Files (x86)\World of Warcraft
2017-09-05 19:44 - 2016-10-04 21:10 - 000000000 ____D C:\Users\kubaj\AppData\Local\Battle.net
2017-09-05 19:23 - 2016-10-22 15:46 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\.minecraft
2017-09-05 19:14 - 2017-04-19 20:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-09-05 17:42 - 2017-04-19 20:34 - 000000000 ____D C:\Users\kubaj
2017-09-05 17:42 - 2017-03-10 16:21 - 000000000 ____D C:\Program Files (x86)\Steam
2017-09-05 17:39 - 2016-10-04 21:06 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-09-05 17:29 - 2017-03-18 22:56 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LxRun.exe
2017-09-05 17:29 - 2017-03-18 22:56 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\bash.exe
2017-09-05 17:29 - 2017-03-18 22:56 - 000017312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lxss.sys
2017-09-05 17:29 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-05 15:23 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF
2017-09-05 15:09 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-04 18:29 - 2016-11-19 11:50 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-04 18:28 - 2016-11-19 11:50 - 000000000 ____D C:\Users\kubaj\AppData\Local\Google
2017-09-04 18:24 - 2017-08-02 14:05 - 000000000 ____D C:\Program Files (x86)\Nokia
2017-09-04 18:24 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-04 18:24 - 2016-10-04 20:32 - 000000000 ____D C:\Users\kubaj\AppData\Local\Packages
2017-09-04 18:20 - 2017-08-02 14:14 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\Nokia Suite
2017-09-04 18:20 - 2017-08-02 14:11 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\Nokia
2017-09-04 18:20 - 2017-08-02 14:09 - 000000000 ____D C:\ProgramData\Nokia
2017-09-04 18:19 - 2017-02-16 19:02 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-04 18:19 - 2016-10-04 20:35 - 000000000 ___RD C:\Users\kubaj\OneDrive
2017-09-04 16:00 - 2017-04-19 20:51 - 003067554 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-04 16:00 - 2017-03-20 06:43 - 001406342 _____ C:\WINDOWS\system32\perfh005.dat
2017-09-04 16:00 - 2017-03-20 06:43 - 000352262 _____ C:\WINDOWS\system32\perfc005.dat
2017-09-04 15:53 - 2017-06-17 12:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-04 15:53 - 2017-06-17 12:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-03 15:52 - 2016-12-04 21:00 - 000000000 ____D C:\Program Files (x86)\World of Warcraft Public Test
2017-09-03 15:51 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-09-03 15:41 - 2016-11-10 18:04 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-09-03 15:38 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-09-03 14:48 - 2016-10-16 12:00 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-26 16:24 - 2016-11-18 21:22 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\vlc
2017-08-25 11:07 - 2016-12-04 11:50 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-25 11:07 - 2016-12-04 11:50 - 000000000 ____D C:\Program Files\CCleaner
2017-08-25 10:47 - 2017-04-19 20:32 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-25 10:39 - 2017-05-22 20:31 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:39 - 2017-04-19 20:50 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:39 - 2017-04-19 20:32 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-25 10:39 - 2017-02-16 19:04 - 000001492 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-08-25 10:38 - 2017-04-19 20:50 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:38 - 2017-04-19 20:50 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:38 - 2017-04-19 20:50 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:38 - 2017-04-19 20:50 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:38 - 2017-04-19 20:50 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:38 - 2017-04-19 20:50 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-25 10:38 - 2017-04-19 20:32 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-20 11:13 - 2016-10-21 16:19 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-19 13:00 - 2017-01-12 17:53 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\ESET
2017-08-19 12:53 - 2017-01-12 17:27 - 000000000 ____D C:\Users\kubaj\AppData\Local\ESET
2017-08-19 12:53 - 2016-10-04 20:53 - 000544424 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-19 12:51 - 2017-03-18 23:03 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-08-19 12:45 - 2017-02-11 16:27 - 000000000 ____D C:\Program Files\Common Files\AV
2017-08-18 06:37 - 2017-04-06 22:18 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-08-18 06:37 - 2017-02-16 19:04 - 001923008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2017-08-18 06:37 - 2017-02-16 19:04 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2017-08-18 06:37 - 2017-02-16 19:04 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2017-08-18 06:37 - 2017-02-16 19:04 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2017-08-18 06:37 - 2017-02-16 19:04 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-08-18 06:36 - 2017-06-24 16:24 - 000179136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2017-08-18 06:36 - 2017-06-24 16:24 - 000146368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2017-08-17 20:11 - 2017-04-19 20:32 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-08-17 18:26 - 2017-04-06 22:25 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-08-13 20:18 - 2016-11-05 19:21 - 000000000 ____D C:\Users\kubaj\AppData\Roaming\Notepad++
2017-08-13 20:04 - 2016-10-04 20:53 - 000000000 ____D C:\ProgramData\AVAST Software
2017-08-11 19:55 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache
2017-08-09 18:08 - 2017-04-19 20:29 - 000380272 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-09 11:29 - 2016-10-04 23:07 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-09 11:25 - 2016-10-04 23:07 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-09 11:11 - 2017-04-19 20:50 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-08-07 12:32 - 2017-06-07 19:00 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-08-07 10:24 - 2016-10-04 20:32 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-06 23:46 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-06 23:45 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

==================== Files in the root of some directories =======

2017-09-04 18:31 - 2017-09-05 19:54 - 000029696 _____ () C:\Users\kubaj\AppData\Local\MSGBOX.EXE

Some files in TEMP:
====================
2017-09-04 18:20 - 2017-09-04 18:20 - 000001536 _____ () C:\Users\kubaj\AppData\Local\Temp\NOSEventMessages.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-09-03 15:05

==================== End of FRST.txt ============================

#6 Příspěvek od **Rudy** » 05 zář 2017 20:02

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-59048226-3285921248-4046965806-1001\...\MountPoints2: {cb1ef629-31ad-11e7-a014-60029222a9f7} - "G:\HiSuiteDownLoader.exe"
C:\Users\kubaj\AppData\Local\Temp

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

konasek · #7 Příspěvek od **konasek** » 06 zář 2017 19:02

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-08-2017
Ran by kubaj (06-09-2017 19:59:49) Run:1
Running from C:\Users\kubaj\Desktop
Loaded Profiles: defaultuser0 & kubaj (Available Profiles: defaultuser0 & kubaj)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-59048226-3285921248-4046965806-1001\...\MountPoints2: {cb1ef629-31ad-11e7-a014-60029222a9f7} - "G:\HiSuiteDownLoader.exe"
C:\Users\kubaj\AppData\Local\Temp

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKU\S-1-5-21-59048226-3285921248-4046965806-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cb1ef629-31ad-11e7-a014-60029222a9f7} => key removed successfully
HKLM\Software\Classes\CLSID\{cb1ef629-31ad-11e7-a014-60029222a9f7} => key not found.

"C:\Users\kubaj\AppData\Local\Temp" folder move:

Could not move "C:\Users\kubaj\AppData\Local\Temp" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 11821056 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 3161160 B
Java, Flash, Steam htmlcache => 349864233 B
Windows/system/drivers => 901992507 B
Edge => 4132 B
Chrome => 0 B
Firefox => 115593810 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 4898 B
NetworkService => 34054144 B
defaultuser0 => 7168 B
kubaj => 182018636 B

RecycleBin => 0 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-09-2017 20:01:40)

C:\Users\kubaj\AppData\Local\Temp => moved successfully

==== End of Fixlog 20:01:44 ====

#8 Příspěvek od **Rudy** » 06 zář 2017 20:05

Smazáno. Log by již měl být OK.

konasek · #9 Příspěvek od **konasek** » 07 zář 2017 18:00

Super díky za váš čas

#10 Příspěvek od **Rudy** » 07 zář 2017 18:02

Rádo se stalo!

VIRY.CZ

Preventivka

Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka