Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Po odpojení NB z elektriky sa spomalí internet

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Po odpojení NB z elektriky sa spomalí internet

#1 Příspěvek od Tristan »

Dobrý deň.

Po odpojení NB z elektriky sa mi spomalí internet z 10Mbps na okolo 300kbps a niekedy až nejde a mám pocit že mám v počítači nezvaného hosťa (spustí sa mi cmd a niečo mi tam rýchlo nabehne a potom sa to vypne)

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tristan at 2015-03-16 17:57:47
Microsoft Windows 8.1
System drive C: has 192 GB (21%) free of 936 GB
Total RAM: 8124 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:58:21, on 16.3.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tristan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache64 - Apache Software Foundation - c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe
O23 - Service: wampmysqld64 - Unknown owner - c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11203 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe"
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 110382515872
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {3b32d137-c450-42b6-a61832fb2a910c7b}
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 1bfb227c-7d3d-4b15-9e8e-cf8d7009d0b6 1
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe" /Task
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4736.0.1886855882\1008863638" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3368 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4736 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4736.2.1577808248\1298172596" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4736 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4736.3.717316677\134578081" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4736 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4736.4.264330137\21403513" /prefetch:673131151
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /ANDREA_BF_BYPASS
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
taskeng.exe {FE3C0644-2ACF-400A-86C6-19B4709EBE86}
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe" /SkipUac
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4736 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4736.20.796248556\529027753" /prefetch:673131151
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4736 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4736.22.520810988\1007532488" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4736 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4736.32.972294941\1501644966" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe9_ Global\UsGthrCtrlFltPipeMssGthrPipe9 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 560 564 572 65536 568

"C:\Users\Tristan\Downloads\RSITx64.exe"
taskeng.exe {6469080C-933A-4C05-B649-02948B0D4C50}

======Scheduled tasks folder======

C:\Windows\tasks\ASC8_SkipUac_Tristan.job - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe /SkipUac
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForTristan.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForTristan (null)
C:\Windows\tasks\Uninstaller_SkipUac_Tristan.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-11-19 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-01-11 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-01-11 771056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-01-11 770032]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-02-17 2818800]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-02-17 7660760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-02-17 1396592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-02-19 2874048]
"AdobeBridge"= []
"Advanced SystemCare 8"=C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2014-11-07 2425632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2013-10-08 1045304]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-11-17 448856]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17 508800]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-11-29 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-16 17:57:47 ----D---- C:\rsit
2015-03-16 17:57:47 ----D---- C:\Program Files\trend micro
2015-03-15 21:04:35 ----D---- C:\Users\Tristan\AppData\Roaming\Applied Acoustics Systems
2015-03-15 21:03:43 ----D---- C:\Users\Tristan\AppData\Roaming\SynthMaker
2015-03-15 21:02:18 ----D---- C:\Users\Tristan\AppData\Roaming\Acoustica
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files\Propellerhead Software
2015-03-15 21:01:20 ----D---- C:\Program Files (x86)\VST
2015-03-15 20:59:35 ----D---- C:\ProgramData\Acoustica
2015-03-15 20:59:35 ----D---- C:\Program Files\Acoustica Mixcraft 7
2015-03-13 20:51:46 ----D---- C:\Users\Tristan\AppData\Roaming\FFsplit
2015-03-13 19:07:23 ----D---- C:\Program Files (x86)\FFsplit
2015-03-13 17:48:21 ----D---- C:\Users\Tristan\AppData\Roaming\DarkWave Studio
2015-03-13 17:38:40 ----D---- C:\Windows\Downloaded Installations
2015-03-13 17:38:26 ----D---- C:\Program Files (x86)\Lenovo
2015-03-13 17:38:11 ----D---- C:\Users\Tristan\AppData\Roaming\OpenCandy
2015-03-13 17:38:11 ----D---- C:\Program Files (x86)\ExperimentalScene
2015-03-12 18:05:02 ----D---- C:\Users\Tristan\AppData\Roaming\Image-Line
2015-03-12 16:56:58 ----D---- C:\Users\Tristan\AppData\Roaming\Publish Providers
2015-03-12 16:52:21 ----D---- C:\ProgramData\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files (x86)\Sony
2015-03-12 16:51:12 ----D---- C:\Users\Tristan\AppData\Roaming\Sony
2015-03-12 16:45:52 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2015-03-12 16:45:34 ----D---- C:\Program Files (x86)\VstPlugins
2015-03-12 16:45:34 ----A---- C:\Windows\SYSWOW64\rewire.dll
2015-03-12 16:45:21 ----D---- C:\Program Files (x86)\Outsim
2015-03-12 16:41:33 ----D---- C:\Program Files (x86)\Image-Line
2015-03-12 07:11:54 ----D---- C:\Program Files (x86)\Zombie Studios
2015-03-11 12:54:16 ----D---- C:\Program Files\Adobe
2015-03-11 11:02:41 ----D---- C:\ProgramData\Steam
2015-03-11 11:02:41 ----D---- C:\ProgramData\Orbit
2015-03-11 09:51:07 ----D---- C:\Program Files (x86)\Assassins Creed IV Black Flag
2015-03-11 09:45:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-03-10 21:51:41 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2015-03-10 21:34:15 ----D---- C:\Program Files\Echobit
2015-03-10 21:34:00 ----D---- C:\ProgramData\Echobit
2015-03-10 21:10:02 ----D---- C:\ProgramData\SplitMediaLabs
2015-03-10 21:10:02 ----D---- C:\Program Files (x86)\SplitmediaLabs
2015-03-10 21:08:11 ----D---- C:\Users\Tristan\AppData\Roaming\SplitmediaLabs
2015-03-10 20:17:50 ----A---- C:\Windows\system32\msctf.dll
2015-03-10 20:17:49 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-10 20:17:48 ----A---- C:\Windows\SYSWOW64\calc.exe
2015-03-10 20:17:48 ----A---- C:\Windows\system32\calc.exe
2015-03-10 20:17:45 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdNisDrv.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2015-03-10 20:17:42 ----A---- C:\Windows\SYSWOW64\winshfhc.dll
2015-03-10 20:17:42 ----A---- C:\Windows\system32\winshfhc.dll
2015-03-10 20:17:18 ----A---- C:\Windows\system32\SHCore.dll
2015-03-10 20:17:17 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\photowiz.dll
2015-03-10 20:17:01 ----A---- C:\Windows\system32\win32k.sys
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmfd.dll
2015-03-10 20:16:59 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-03-10 20:16:50 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\win32spl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\localspl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\dwmcore.dll
2015-03-10 20:16:49 ----AC---- C:\Windows\system32\drivers\hidbth.sys
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\atlthunk.dll
2015-03-10 20:16:48 ----A---- C:\Windows\system32\mfc42.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:42 ----A---- C:\Windows\SYSWOW64\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\authui.dll
2015-03-10 20:16:31 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntdll.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\ubpm.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapp3hst.dll
2015-03-10 20:13:44 ----A---- C:\Windows\system32\mshtml.dll
2015-03-10 20:13:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-10 20:13:41 ----A---- C:\Windows\system32\jscript9.dll
2015-03-10 20:13:40 ----A---- C:\Windows\system32\ieframe.dll
2015-03-10 20:13:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\wininet.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\iertutil.dll
2015-03-10 20:13:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\inetcomm.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\vbscript.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\iepeers.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\actxprxy.dll
2015-03-10 20:12:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-10 20:12:30 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-10 20:11:57 ----A---- C:\Windows\system32\LockScreenContentServer.exe
2015-03-10 20:11:48 ----A---- C:\Windows\system32\shell32.dll
2015-03-10 20:11:47 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-10 20:11:18 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-10 20:11:18 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-10 20:11:10 ----A---- C:\Windows\SYSWOW64\explorer.exe
2015-03-10 20:11:10 ----A---- C:\Windows\explorer.exe
2015-03-10 20:11:02 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2015-03-10 20:11:02 ----A---- C:\Windows\system32\MrmCoreR.dll
2015-03-06 10:05:37 ----D---- C:\Users\Tristan\AppData\Roaming\Theta
2015-03-06 09:46:16 ----D---- C:\Program Files (x86)\Assassins Creed III
2015-02-20 15:37:56 ----ASH---- C:\pagefile.sys
2015-02-17 23:10:34 ----A---- C:\Windows\system32\drivers\rtwlane.sys
2015-02-17 23:10:05 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2015-02-17 23:09:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-02-17 23:09:39 ----D---- C:\Program Files\Realtek
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSWOW64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSTSX64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRRPTR64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRAPO64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtPgEx64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2015-02-17 23:09:19 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCfg64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkApi64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEP64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEL64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEG64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEED64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtDataProc64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RTCOM64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DHT64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DAA64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RltkAPO64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoRes64.dat
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoInstII64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CX64APO.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAR64.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAC64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\drivers\Rt630x64.sys
2015-02-17 23:08:16 ----A---- C:\Windows\system32\drivers\TeeDriverx64.sys
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPCo20.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPAPI.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\drivers\SynTP.sys
2015-02-17 23:07:18 ----A---- C:\Windows\SYSWOW64\SynCom.dll
2015-02-17 23:07:17 ----A---- C:\Windows\system32\SynCOM.dll
2015-02-17 23:06:46 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2015-02-17 22:58:23 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2015-02-17 22:58:21 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2015-02-17 22:56:49 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-02-17 16:04:46 ----A---- C:\Windows\SYSWOW64\FM20.DLL

======List of files/folders modified in the last 1 month======

2015-03-16 17:58:01 ----D---- C:\Windows\Prefetch
2015-03-16 17:57:47 ----RD---- C:\Program Files
2015-03-16 17:51:03 ----D---- C:\Program Files (x86)\Common Files
2015-03-16 17:49:30 ----D---- C:\Program Files (x86)\Steam
2015-03-16 17:02:00 ----D---- C:\Windows\system32\sru
2015-03-16 15:23:21 ----D---- C:\Users\Tristan\AppData\Roaming\uTorrent
2015-03-16 15:23:20 ----D---- C:\Windows\Temp
2015-03-16 03:34:40 ----D---- C:\Windows\Microsoft.NET
2015-03-15 22:37:31 ----D---- C:\ProgramData\ProductData
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files
2015-03-15 21:01:20 ----RD---- C:\Program Files (x86)
2015-03-15 20:59:35 ----HD---- C:\ProgramData
2015-03-14 18:53:55 ----D---- C:\Windows\AppReadiness
2015-03-14 15:14:49 ----SHD---- C:\System Volume Information
2015-03-14 12:02:25 ----HD---- C:\Program Files\WindowsApps
2015-03-13 19:08:26 ----D---- C:\Windows\SYSWOW64\directx
2015-03-13 19:08:18 ----HD---- C:\Windows\msdownld.tmp
2015-03-13 18:49:45 ----D---- C:\Users\Tristan\AppData\Roaming\TS3Client
2015-03-13 17:39:02 ----SHD---- C:\Windows\Installer
2015-03-13 17:38:57 ----RSD---- C:\Windows\assembly
2015-03-13 17:38:54 ----D---- C:\Windows\system32\Tasks
2015-03-13 17:38:40 ----D---- C:\Windows
2015-03-13 03:42:21 ----D---- C:\Windows\system32\config
2015-03-12 19:08:50 ----RSD---- C:\Windows\Fonts
2015-03-12 18:15:18 ----SD---- C:\Users\Tristan\AppData\Roaming\Microsoft
2015-03-12 18:15:18 ----SD---- C:\ProgramData\Microsoft
2015-03-12 16:52:50 ----RD---- C:\Windows\System32
2015-03-12 16:52:44 ----D---- C:\Windows\SysWOW64
2015-03-12 16:52:13 ----D---- C:\Windows\WinSxS
2015-03-12 16:29:22 ----D---- C:\Windows\Inf
2015-03-12 16:29:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-12 03:46:31 ----D---- C:\Windows\system32\DriverStore
2015-03-11 19:00:12 ----D---- C:\Users\Tristan\AppData\Roaming\vlc
2015-03-11 12:54:23 ----D---- C:\Program Files\Common Files\Adobe
2015-03-11 12:40:27 ----D---- C:\Windows\rescache
2015-03-11 12:31:50 ----D---- C:\ProgramData\Adobe
2015-03-11 09:49:59 ----D---- C:\Program Files\OBS
2015-03-11 09:49:59 ----D---- C:\Program Files (x86)\OBS
2015-03-11 09:45:44 ----D---- C:\Windows\SoftwareDistribution
2015-03-11 09:44:24 ----D---- C:\Windows\system32\catroot2
2015-03-11 09:44:01 ----D---- C:\Windows\debug
2015-03-11 07:24:38 ----D---- C:\Windows\system32\drivers
2015-03-11 07:24:38 ----D---- C:\Program Files\Windows Defender
2015-03-11 07:24:38 ----D---- C:\Program Files (x86)\Windows Defender
2015-03-11 07:24:36 ----RD---- C:\Windows\ToastData
2015-03-11 07:24:36 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 07:24:36 ----D---- C:\Windows\system32\sk-SK
2015-03-11 07:24:35 ----D---- C:\Windows\WinStore
2015-03-11 07:24:33 ----D---- C:\Program Files\Internet Explorer
2015-03-11 07:24:33 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-10 23:08:46 ----D---- C:\Windows\CbsTemp
2015-03-10 23:07:57 ----D---- C:\ProgramData\Microsoft Help
2015-03-10 22:57:21 ----D---- C:\Windows\system32\MRT
2015-03-10 22:57:18 ----A---- C:\Windows\system32\MRT.exe
2015-03-10 21:54:28 ----D---- C:\ProgramData\CyberLink
2015-03-10 21:36:47 ----D---- C:\Windows\Logs
2015-03-10 21:06:28 ----D---- C:\Users\Tristan\AppData\Roaming\OBS
2015-03-06 10:46:42 ----D---- C:\Users\Tristan\AppData\Roaming\DAEMON Tools Lite
2015-03-06 09:46:25 ----D---- C:\Games
2015-02-24 00:20:10 ----D---- C:\Users\Tristan\AppData\Roaming\FileZilla
2015-02-20 15:38:59 ----D---- C:\Windows\Minidump
2015-02-20 15:36:11 ----D---- C:\Program Files (x86)\IObit
2015-02-17 23:12:23 ----D---- C:\Windows\system32\catroot
2015-02-17 22:57:12 ----D---- C:\Users\Tristan\AppData\Roaming\IObit
2015-02-17 22:56:50 ----D---- C:\ProgramData\IObit
2015-02-17 22:56:49 ----D---- C:\Windows\SYSWOW64\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 dtsoftbus01;@oem20.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-10-12 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-17 26528]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 clwvd;@oem19.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-11-29 4209152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-02-17 4263128]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-10-29 27032]
R3 MEIx64;@oem45.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-02-17 125952]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-02-05 10284872]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;@oem38.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8168;@oem46.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2015-02-17 874712]
R3 RTWlanE;@oem49.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2015-02-17 3759320]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-02-17 31472]
R3 SynTP;@oem44.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2015-02-17 544496]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 cpuz137;cpuz137; \??\C:\Users\Tristan\AppData\Local\Temp\cpuz137\cpuz137_x64.sys []
S3 dot4;@oem27.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem28.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\Windows\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem27.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-10-29 39320]
S3 IntcDAud;@oem48.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-02-17 455440]
S3 RSP2STOR;@oem14.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-08-22 20992]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\Windows\System32\drivers\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2014-11-04 815392]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2015-02-17 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2014-01-13 92160]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2013-10-08 1039160]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-01-16 2724128]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-05 935056]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-02-17 292568]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-02-17 191728]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-08 15720]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-01-11 279024]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 wampapache64;wampapache64; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [2014-05-01 24576]
S3 wampmysqld64;wampmysqld64; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [2014-05-01 12942848]

-----------------EOF-----------------


Vopred ďakujem za prípadné vyriešenie problémov :)

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#3 Příspěvek od Tristan »

# AdwCleaner v4.112 - Logfile created 16/03/2015 at 18:23:31
# Updated 09/03/2015 by Xplode
# Database : 2015-03-15.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Tristan - RICHARD
# Running from : C:\Users\Tristan\Desktop\adwcleaner_4.112.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Tristan\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Tristan\Desktop\Save
Folder Deleted : C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Folder Deleted : C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
File Deleted : C:\END
File Deleted : C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKCU\Software\systweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v41.0.2272.89

[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&q={searchTerms}&gu=33723b33d721405ba47cacc1d33ae6b0&tu=10G90006A2B000c&sku=&tstsId=&ver=&
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=112060&tt=300912_TORP_3912_3&babsrc=SP_ss&mntrId=e406ae9e0000000000003e4bd6f88a47
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=112060&tt=300912_TORP_3912_3&babsrc=SP_ss&mntrId=e406ae9e0000000000003e4bd6f88a47
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_SK&apn_uid=6e2e13e5-8d24-478b-848c-d94a217cfcae&apn_ptnrs=%5EAGY&apn_sauid=6DE5272B-8747-4C86-BD7F-F1F52D74C8E6&apn_dtid=%5EYYYYYY%5EYY%5ESK&q={searchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_SK&apn_uid=6e2e13e5-8d24-478b-848c-d94a217cfcae&apn_ptnrs=%5EAGY&apn_sauid=6DE5272B-8747-4C86-BD7F-F1F52D74C8E6&apn_dtid=%5EYYYYYY%5EYY%5ESK&q={searchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.funmoods.com/results.php?f=4&a=ironto&q={searchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&cui=UN29266851357622155&ctid=CT3176921&UM=2
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.soft-quick.info/?l=1&q={searchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.00000&barid={AB31C6D1-2356-11E2-BF2D-485B39EA2375}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1410 ... earchTerms}
[C:\Users\Tristan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.gboxapp.com/?q={searchTerms}

*************************

AdwCleaner[R0].txt - [4911 bytes] - [16/03/2015 18:23:11]
AdwCleaner[S0].txt - [4844 bytes] - [16/03/2015 18:23:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4903 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#5 Příspěvek od Tristan »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tristan at 2015-03-16 19:44:17
Microsoft Windows 8.1
System drive C: has 192 GB (21%) free of 936 GB
Total RAM: 8124 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:44:20, on 16.3.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\syswow64\wwahost.exe
C:\Program Files\trend micro\Tristan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache64 - Apache Software Foundation - c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe
O23 - Service: wampmysqld64 - Unknown owner - c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10688 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 870608391424
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {0e1ac000-6363-47f7-8d9ac8375faf383f}
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 1bfb227c-7d3d-4b15-9e8e-cf8d7009d0b6 1
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
\??\C:\Windows\system32\conhost.exe 0x4
taskhostex.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe" /Task
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /ANDREA_BF_BYPASS
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 568 572 580 65536 576
"C:\Windows\syswow64\wwahost.exe" -ServerName:App.wwa

C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Tristan\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\ASC8_SkipUac_Tristan.job - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe /SkipUac
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForTristan.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForTristan (null)
C:\Windows\tasks\Uninstaller_SkipUac_Tristan.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-11-19 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-01-11 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-01-11 771056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-01-11 770032]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-02-17 2818800]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-02-17 7660760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-02-17 1396592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-02-19 2874048]
"AdobeBridge"= []
"Advanced SystemCare 8"=C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2014-11-07 2425632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2013-10-08 1045304]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-11-17 448856]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17 508800]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-11-29 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-16 18:18:43 ----D---- C:\AdwCleaner
2015-03-16 17:57:47 ----D---- C:\rsit
2015-03-16 17:57:47 ----D---- C:\Program Files\trend micro
2015-03-15 21:04:35 ----D---- C:\Users\Tristan\AppData\Roaming\Applied Acoustics Systems
2015-03-15 21:03:43 ----D---- C:\Users\Tristan\AppData\Roaming\SynthMaker
2015-03-15 21:02:18 ----D---- C:\Users\Tristan\AppData\Roaming\Acoustica
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files\Propellerhead Software
2015-03-15 21:01:20 ----D---- C:\Program Files (x86)\VST
2015-03-15 20:59:35 ----D---- C:\ProgramData\Acoustica
2015-03-15 20:59:35 ----D---- C:\Program Files\Acoustica Mixcraft 7
2015-03-13 20:51:46 ----D---- C:\Users\Tristan\AppData\Roaming\FFsplit
2015-03-13 19:07:23 ----D---- C:\Program Files (x86)\FFsplit
2015-03-13 17:48:21 ----D---- C:\Users\Tristan\AppData\Roaming\DarkWave Studio
2015-03-13 17:38:40 ----D---- C:\Windows\Downloaded Installations
2015-03-13 17:38:26 ----D---- C:\Program Files (x86)\Lenovo
2015-03-13 17:38:11 ----D---- C:\Program Files (x86)\ExperimentalScene
2015-03-12 18:05:02 ----D---- C:\Users\Tristan\AppData\Roaming\Image-Line
2015-03-12 16:56:58 ----D---- C:\Users\Tristan\AppData\Roaming\Publish Providers
2015-03-12 16:52:21 ----D---- C:\ProgramData\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files (x86)\Sony
2015-03-12 16:51:12 ----D---- C:\Users\Tristan\AppData\Roaming\Sony
2015-03-12 16:45:52 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2015-03-12 16:45:34 ----D---- C:\Program Files (x86)\VstPlugins
2015-03-12 16:45:34 ----A---- C:\Windows\SYSWOW64\rewire.dll
2015-03-12 16:45:21 ----D---- C:\Program Files (x86)\Outsim
2015-03-12 16:41:33 ----D---- C:\Program Files (x86)\Image-Line
2015-03-12 07:11:54 ----D---- C:\Program Files (x86)\Zombie Studios
2015-03-11 12:54:16 ----D---- C:\Program Files\Adobe
2015-03-11 11:02:41 ----D---- C:\ProgramData\Steam
2015-03-11 11:02:41 ----D---- C:\ProgramData\Orbit
2015-03-11 09:51:07 ----D---- C:\Program Files (x86)\Assassins Creed IV Black Flag
2015-03-11 09:45:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-03-10 21:51:41 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2015-03-10 21:34:15 ----D---- C:\Program Files\Echobit
2015-03-10 21:34:00 ----D---- C:\ProgramData\Echobit
2015-03-10 21:10:02 ----D---- C:\ProgramData\SplitMediaLabs
2015-03-10 21:10:02 ----D---- C:\Program Files (x86)\SplitmediaLabs
2015-03-10 21:08:11 ----D---- C:\Users\Tristan\AppData\Roaming\SplitmediaLabs
2015-03-10 20:17:50 ----A---- C:\Windows\system32\msctf.dll
2015-03-10 20:17:49 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-10 20:17:48 ----A---- C:\Windows\SYSWOW64\calc.exe
2015-03-10 20:17:48 ----A---- C:\Windows\system32\calc.exe
2015-03-10 20:17:45 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdNisDrv.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2015-03-10 20:17:42 ----A---- C:\Windows\SYSWOW64\winshfhc.dll
2015-03-10 20:17:42 ----A---- C:\Windows\system32\winshfhc.dll
2015-03-10 20:17:18 ----A---- C:\Windows\system32\SHCore.dll
2015-03-10 20:17:17 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\photowiz.dll
2015-03-10 20:17:01 ----A---- C:\Windows\system32\win32k.sys
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmfd.dll
2015-03-10 20:16:59 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-03-10 20:16:50 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\win32spl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\localspl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\dwmcore.dll
2015-03-10 20:16:49 ----AC---- C:\Windows\system32\drivers\hidbth.sys
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\atlthunk.dll
2015-03-10 20:16:48 ----A---- C:\Windows\system32\mfc42.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:42 ----A---- C:\Windows\SYSWOW64\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\authui.dll
2015-03-10 20:16:31 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntdll.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\ubpm.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapp3hst.dll
2015-03-10 20:13:44 ----A---- C:\Windows\system32\mshtml.dll
2015-03-10 20:13:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-10 20:13:41 ----A---- C:\Windows\system32\jscript9.dll
2015-03-10 20:13:40 ----A---- C:\Windows\system32\ieframe.dll
2015-03-10 20:13:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\wininet.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\iertutil.dll
2015-03-10 20:13:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\inetcomm.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\vbscript.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\iepeers.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\actxprxy.dll
2015-03-10 20:12:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-10 20:12:30 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-10 20:11:57 ----A---- C:\Windows\system32\LockScreenContentServer.exe
2015-03-10 20:11:48 ----A---- C:\Windows\system32\shell32.dll
2015-03-10 20:11:47 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-10 20:11:18 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-10 20:11:18 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-10 20:11:10 ----A---- C:\Windows\SYSWOW64\explorer.exe
2015-03-10 20:11:10 ----A---- C:\Windows\explorer.exe
2015-03-10 20:11:02 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2015-03-10 20:11:02 ----A---- C:\Windows\system32\MrmCoreR.dll
2015-03-06 10:05:37 ----D---- C:\Users\Tristan\AppData\Roaming\Theta
2015-03-06 09:46:16 ----D---- C:\Program Files (x86)\Assassins Creed III
2015-02-20 15:37:56 ----ASH---- C:\pagefile.sys
2015-02-17 23:10:34 ----A---- C:\Windows\system32\drivers\rtwlane.sys
2015-02-17 23:10:05 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2015-02-17 23:09:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-02-17 23:09:39 ----D---- C:\Program Files\Realtek
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSWOW64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSTSX64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRRPTR64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRAPO64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtPgEx64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2015-02-17 23:09:19 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCfg64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkApi64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEP64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEL64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEG64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEED64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtDataProc64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RTCOM64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DHT64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DAA64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RltkAPO64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoRes64.dat
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoInstII64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CX64APO.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAR64.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAC64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\drivers\Rt630x64.sys
2015-02-17 23:08:16 ----A---- C:\Windows\system32\drivers\TeeDriverx64.sys
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPCo20.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPAPI.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\drivers\SynTP.sys
2015-02-17 23:07:18 ----A---- C:\Windows\SYSWOW64\SynCom.dll
2015-02-17 23:07:17 ----A---- C:\Windows\system32\SynCOM.dll
2015-02-17 23:06:46 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2015-02-17 22:58:23 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2015-02-17 22:58:21 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2015-02-17 22:56:49 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-02-17 16:04:46 ----A---- C:\Windows\SYSWOW64\FM20.DLL

======List of files/folders modified in the last 1 month======

2015-03-16 19:44:04 ----D---- C:\Windows\Prefetch
2015-03-16 19:43:29 ----D---- C:\Windows\Temp
2015-03-16 19:00:02 ----D---- C:\Windows\system32\sru
2015-03-16 18:26:17 ----D---- C:\Program Files (x86)\Steam
2015-03-16 17:57:47 ----RD---- C:\Program Files
2015-03-16 17:51:03 ----D---- C:\Program Files (x86)\Common Files
2015-03-16 15:23:21 ----D---- C:\Users\Tristan\AppData\Roaming\uTorrent
2015-03-16 03:34:40 ----D---- C:\Windows\Microsoft.NET
2015-03-15 22:37:31 ----D---- C:\ProgramData\ProductData
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files
2015-03-15 21:01:20 ----RD---- C:\Program Files (x86)
2015-03-15 20:59:35 ----HD---- C:\ProgramData
2015-03-14 18:53:55 ----D---- C:\Windows\AppReadiness
2015-03-14 15:14:49 ----SHD---- C:\System Volume Information
2015-03-14 12:02:25 ----HD---- C:\Program Files\WindowsApps
2015-03-13 19:08:26 ----D---- C:\Windows\SYSWOW64\directx
2015-03-13 19:08:18 ----HD---- C:\Windows\msdownld.tmp
2015-03-13 18:49:45 ----D---- C:\Users\Tristan\AppData\Roaming\TS3Client
2015-03-13 17:39:02 ----SHD---- C:\Windows\Installer
2015-03-13 17:38:57 ----RSD---- C:\Windows\assembly
2015-03-13 17:38:54 ----D---- C:\Windows\system32\Tasks
2015-03-13 17:38:40 ----D---- C:\Windows
2015-03-13 03:42:21 ----D---- C:\Windows\system32\config
2015-03-12 19:08:50 ----RSD---- C:\Windows\Fonts
2015-03-12 18:15:18 ----SD---- C:\Users\Tristan\AppData\Roaming\Microsoft
2015-03-12 18:15:18 ----SD---- C:\ProgramData\Microsoft
2015-03-12 16:52:50 ----RD---- C:\Windows\System32
2015-03-12 16:52:44 ----D---- C:\Windows\SysWOW64
2015-03-12 16:52:13 ----D---- C:\Windows\WinSxS
2015-03-12 16:29:22 ----D---- C:\Windows\Inf
2015-03-12 16:29:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-12 03:46:31 ----D---- C:\Windows\system32\DriverStore
2015-03-11 19:00:12 ----D---- C:\Users\Tristan\AppData\Roaming\vlc
2015-03-11 12:54:23 ----D---- C:\Program Files\Common Files\Adobe
2015-03-11 12:40:27 ----D---- C:\Windows\rescache
2015-03-11 12:31:50 ----D---- C:\ProgramData\Adobe
2015-03-11 09:49:59 ----D---- C:\Program Files\OBS
2015-03-11 09:49:59 ----D---- C:\Program Files (x86)\OBS
2015-03-11 09:47:05 ----D---- C:\Users\Tristan\AppData\Roaming\DAEMON Tools Lite
2015-03-11 09:45:44 ----D---- C:\Windows\SoftwareDistribution
2015-03-11 09:44:24 ----D---- C:\Windows\system32\catroot2
2015-03-11 09:44:01 ----D---- C:\Windows\debug
2015-03-11 07:24:38 ----D---- C:\Windows\system32\drivers
2015-03-11 07:24:38 ----D---- C:\Program Files\Windows Defender
2015-03-11 07:24:38 ----D---- C:\Program Files (x86)\Windows Defender
2015-03-11 07:24:36 ----RD---- C:\Windows\ToastData
2015-03-11 07:24:36 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 07:24:36 ----D---- C:\Windows\system32\sk-SK
2015-03-11 07:24:35 ----D---- C:\Windows\WinStore
2015-03-11 07:24:33 ----D---- C:\Program Files\Internet Explorer
2015-03-11 07:24:33 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-10 23:08:46 ----D---- C:\Windows\CbsTemp
2015-03-10 23:07:57 ----D---- C:\ProgramData\Microsoft Help
2015-03-10 23:01:42 ----D---- C:\Windows\system32\MRT
2015-03-10 22:57:18 ----A---- C:\Windows\system32\MRT.exe
2015-03-10 21:54:28 ----D---- C:\ProgramData\CyberLink
2015-03-10 21:36:47 ----D---- C:\Windows\Logs
2015-03-10 21:06:28 ----D---- C:\Users\Tristan\AppData\Roaming\OBS
2015-03-06 09:46:25 ----D---- C:\Games
2015-02-24 00:20:10 ----D---- C:\Users\Tristan\AppData\Roaming\FileZilla
2015-02-20 15:38:59 ----D---- C:\Windows\Minidump
2015-02-20 15:36:11 ----D---- C:\Program Files (x86)\IObit
2015-02-17 23:12:23 ----D---- C:\Windows\system32\catroot
2015-02-17 22:57:12 ----D---- C:\Users\Tristan\AppData\Roaming\IObit
2015-02-17 22:56:50 ----D---- C:\ProgramData\IObit
2015-02-17 22:56:49 ----D---- C:\Windows\SYSWOW64\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 dtsoftbus01;@oem20.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-10-12 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-17 26528]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 clwvd;@oem19.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-11-29 4209152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-02-17 4263128]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-10-29 27032]
R3 MEIx64;@oem45.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-02-17 125952]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-02-05 10284872]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;@oem38.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8168;@oem46.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2015-02-17 874712]
R3 RTWlanE;@oem49.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2015-02-17 3759320]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-02-17 31472]
R3 SynTP;@oem44.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2015-02-17 544496]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 cpuz137;cpuz137; \??\C:\Users\Tristan\AppData\Local\Temp\cpuz137\cpuz137_x64.sys []
S3 dot4;@oem27.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem28.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\Windows\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem27.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-10-29 39320]
S3 IntcDAud;@oem48.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-02-17 455440]
S3 RSP2STOR;@oem14.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-08-22 20992]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\Windows\System32\drivers\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2014-11-04 815392]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2015-02-17 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2014-01-13 92160]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2013-10-08 1039160]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-08 15720]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-01-16 2724128]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-05 935056]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-02-17 292568]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-02-17 191728]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-01-11 279024]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 wampapache64;wampapache64; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [2014-05-01 24576]
S3 wampmysqld64;wampmysqld64; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [2014-05-01 12942848]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Doporučuji odinstalovat AdvancedSystemCare. Důvod: viewtopic.php?f=14&t=127320&hilit=iobit .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#7 Příspěvek od Tristan »

OTM

All processes killed
========== FILES ==========
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57311 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: Tristan
->Temp folder emptied: 458120399 bytes
->Temporary Internet Files folder emptied: 31969689 bytes
->Java cache emptied: 7766179 bytes
->Google Chrome cache emptied: 93641659 bytes
->Flash cache emptied: 769 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 200704 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 13386314 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 577,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

User: Tristan
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 03162015_212232

Files moved on Reboot...
C:\Users\Tristan\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#8 Příspěvek od Tristan »

RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tristan at 2015-03-16 21:27:24
Microsoft Windows 8.1
System drive C: has 191 GB (20%) free of 936 GB
Total RAM: 8124 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:27:29, on 16.3.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Tristan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe
C:\Program Files\trend micro\Tristan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache64 - Apache Software Foundation - c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe
O23 - Service: wampmysqld64 - Unknown owner - c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10501 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 820912548368
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {7fe72314-936b-4267-b4833836d1128b29}
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 1bfb227c-7d3d-4b15-9e8e-cf8d7009d0b6 1
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
\??\C:\Windows\system32\conhost.exe 0x4
taskhostex.exe
taskeng.exe {1A72EE4F-C78D-401F-8464-62A9EF115F65}
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 568 572 580 65536 576
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Users\Tristan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /ANDREA_BF_BYPASS
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4152.0.2003166981\103669398" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3368 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4152 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4152.2.2014239956\656408558" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4152 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4152.3.692633618\130962219" /prefetch:673131151
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4152 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4152.4.1945408474\210963757" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4152 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4152.5.612393861\1839512957" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4152.7.1286083306\204030224" --ppapi-flash-args=enable_hw_video_decode=1 --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe" /d speedup
"C:\Users\Tristan\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\HPCeeScheduleForTristan.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForTristan (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-01-11 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-01-11 771056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-01-11 770032]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-02-17 2818800]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-02-17 7660760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-02-17 1396592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-02-19 2874048]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2013-10-08 1045304]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-11-17 448856]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-11-29 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-16 21:22:32 ----D---- C:\_OTM
2015-03-16 18:18:43 ----D---- C:\AdwCleaner
2015-03-16 17:57:47 ----D---- C:\rsit
2015-03-16 17:57:47 ----D---- C:\Program Files\trend micro
2015-03-15 21:04:35 ----D---- C:\Users\Tristan\AppData\Roaming\Applied Acoustics Systems
2015-03-15 21:03:43 ----D---- C:\Users\Tristan\AppData\Roaming\SynthMaker
2015-03-15 21:02:18 ----D---- C:\Users\Tristan\AppData\Roaming\Acoustica
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files\Propellerhead Software
2015-03-15 21:01:20 ----D---- C:\Program Files (x86)\VST
2015-03-15 20:59:35 ----D---- C:\ProgramData\Acoustica
2015-03-15 20:59:35 ----D---- C:\Program Files\Acoustica Mixcraft 7
2015-03-13 20:51:46 ----D---- C:\Users\Tristan\AppData\Roaming\FFsplit
2015-03-13 19:07:23 ----D---- C:\Program Files (x86)\FFsplit
2015-03-13 17:48:21 ----D---- C:\Users\Tristan\AppData\Roaming\DarkWave Studio
2015-03-13 17:38:40 ----D---- C:\Windows\Downloaded Installations
2015-03-13 17:38:26 ----D---- C:\Program Files (x86)\Lenovo
2015-03-13 17:38:11 ----D---- C:\Program Files (x86)\ExperimentalScene
2015-03-12 18:05:02 ----D---- C:\Users\Tristan\AppData\Roaming\Image-Line
2015-03-12 16:56:58 ----D---- C:\Users\Tristan\AppData\Roaming\Publish Providers
2015-03-12 16:52:21 ----D---- C:\ProgramData\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files (x86)\Sony
2015-03-12 16:51:12 ----D---- C:\Users\Tristan\AppData\Roaming\Sony
2015-03-12 16:45:52 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2015-03-12 16:45:34 ----D---- C:\Program Files (x86)\VstPlugins
2015-03-12 16:45:34 ----A---- C:\Windows\SYSWOW64\rewire.dll
2015-03-12 16:45:21 ----D---- C:\Program Files (x86)\Outsim
2015-03-12 16:41:33 ----D---- C:\Program Files (x86)\Image-Line
2015-03-12 07:11:54 ----D---- C:\Program Files (x86)\Zombie Studios
2015-03-11 12:54:16 ----D---- C:\Program Files\Adobe
2015-03-11 11:02:41 ----D---- C:\ProgramData\Steam
2015-03-11 11:02:41 ----D---- C:\ProgramData\Orbit
2015-03-11 09:51:07 ----D---- C:\Program Files (x86)\Assassins Creed IV Black Flag
2015-03-11 09:45:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-03-10 21:51:41 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2015-03-10 21:34:15 ----D---- C:\Program Files\Echobit
2015-03-10 21:34:00 ----D---- C:\ProgramData\Echobit
2015-03-10 21:10:02 ----D---- C:\ProgramData\SplitMediaLabs
2015-03-10 21:10:02 ----D---- C:\Program Files (x86)\SplitmediaLabs
2015-03-10 21:08:11 ----D---- C:\Users\Tristan\AppData\Roaming\SplitmediaLabs
2015-03-10 20:17:50 ----A---- C:\Windows\system32\msctf.dll
2015-03-10 20:17:49 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-10 20:17:48 ----A---- C:\Windows\SYSWOW64\calc.exe
2015-03-10 20:17:48 ----A---- C:\Windows\system32\calc.exe
2015-03-10 20:17:45 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdNisDrv.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2015-03-10 20:17:42 ----A---- C:\Windows\SYSWOW64\winshfhc.dll
2015-03-10 20:17:42 ----A---- C:\Windows\system32\winshfhc.dll
2015-03-10 20:17:18 ----A---- C:\Windows\system32\SHCore.dll
2015-03-10 20:17:17 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\photowiz.dll
2015-03-10 20:17:01 ----A---- C:\Windows\system32\win32k.sys
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmfd.dll
2015-03-10 20:16:59 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-03-10 20:16:50 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\win32spl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\localspl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\dwmcore.dll
2015-03-10 20:16:49 ----AC---- C:\Windows\system32\drivers\hidbth.sys
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\atlthunk.dll
2015-03-10 20:16:48 ----A---- C:\Windows\system32\mfc42.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:42 ----A---- C:\Windows\SYSWOW64\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\authui.dll
2015-03-10 20:16:31 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntdll.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\ubpm.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapp3hst.dll
2015-03-10 20:13:44 ----A---- C:\Windows\system32\mshtml.dll
2015-03-10 20:13:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-10 20:13:41 ----A---- C:\Windows\system32\jscript9.dll
2015-03-10 20:13:40 ----A---- C:\Windows\system32\ieframe.dll
2015-03-10 20:13:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\wininet.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\iertutil.dll
2015-03-10 20:13:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\inetcomm.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\vbscript.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\iepeers.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\actxprxy.dll
2015-03-10 20:12:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-10 20:12:30 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-10 20:11:57 ----A---- C:\Windows\system32\LockScreenContentServer.exe
2015-03-10 20:11:48 ----A---- C:\Windows\system32\shell32.dll
2015-03-10 20:11:47 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-10 20:11:18 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-10 20:11:18 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-10 20:11:10 ----A---- C:\Windows\SYSWOW64\explorer.exe
2015-03-10 20:11:10 ----A---- C:\Windows\explorer.exe
2015-03-10 20:11:02 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2015-03-10 20:11:02 ----A---- C:\Windows\system32\MrmCoreR.dll
2015-03-06 10:05:37 ----D---- C:\Users\Tristan\AppData\Roaming\Theta
2015-03-06 09:46:16 ----D---- C:\Program Files (x86)\Assassins Creed III
2015-02-20 15:37:56 ----ASH---- C:\pagefile.sys
2015-02-17 23:10:34 ----A---- C:\Windows\system32\drivers\rtwlane.sys
2015-02-17 23:10:05 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2015-02-17 23:09:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-02-17 23:09:39 ----D---- C:\Program Files\Realtek
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSWOW64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSTSX64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRRPTR64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRAPO64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtPgEx64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2015-02-17 23:09:19 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCfg64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkApi64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEP64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEL64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEG64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEED64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtDataProc64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RTCOM64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DHT64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DAA64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RltkAPO64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoRes64.dat
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoInstII64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CX64APO.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAR64.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAC64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\drivers\Rt630x64.sys
2015-02-17 23:08:16 ----A---- C:\Windows\system32\drivers\TeeDriverx64.sys
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPCo20.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPAPI.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\drivers\SynTP.sys
2015-02-17 23:07:18 ----A---- C:\Windows\SYSWOW64\SynCom.dll
2015-02-17 23:07:17 ----A---- C:\Windows\system32\SynCOM.dll
2015-02-17 23:06:46 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2015-02-17 22:58:23 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2015-02-17 22:58:21 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2015-02-17 22:56:49 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-02-17 16:04:46 ----A---- C:\Windows\SYSWOW64\FM20.DLL

======List of files/folders modified in the last 1 month======

2015-03-16 21:26:37 ----D---- C:\Windows\Prefetch
2015-03-16 21:26:12 ----D---- C:\Users\Tristan\AppData\Roaming\TS3Client
2015-03-16 21:25:58 ----D---- C:\Program Files (x86)\Steam
2015-03-16 21:24:43 ----D---- C:\Windows\Temp
2015-03-16 21:23:01 ----D---- C:\Windows
2015-03-16 21:22:32 ----D---- C:\Windows\Tasks
2015-03-16 21:19:17 ----D---- C:\Program Files (x86)\IObit
2015-03-16 21:19:15 ----D---- C:\Windows\system32\Tasks
2015-03-16 21:10:19 ----D---- C:\Users\Tristan\AppData\Roaming\vlc
2015-03-16 21:00:00 ----D---- C:\Windows\system32\sru
2015-03-16 17:57:47 ----RD---- C:\Program Files
2015-03-16 17:51:03 ----D---- C:\Program Files (x86)\Common Files
2015-03-16 15:23:21 ----D---- C:\Users\Tristan\AppData\Roaming\uTorrent
2015-03-16 03:34:40 ----D---- C:\Windows\Microsoft.NET
2015-03-15 22:37:31 ----D---- C:\ProgramData\ProductData
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files
2015-03-15 21:01:20 ----RD---- C:\Program Files (x86)
2015-03-15 20:59:35 ----HD---- C:\ProgramData
2015-03-14 18:53:55 ----D---- C:\Windows\AppReadiness
2015-03-14 15:14:49 ----SHD---- C:\System Volume Information
2015-03-14 12:02:25 ----HD---- C:\Program Files\WindowsApps
2015-03-13 19:08:26 ----D---- C:\Windows\SYSWOW64\directx
2015-03-13 17:39:02 ----SHD---- C:\Windows\Installer
2015-03-13 17:38:57 ----RSD---- C:\Windows\assembly
2015-03-13 03:42:21 ----D---- C:\Windows\system32\config
2015-03-12 19:08:50 ----RSD---- C:\Windows\Fonts
2015-03-12 18:15:18 ----SD---- C:\Users\Tristan\AppData\Roaming\Microsoft
2015-03-12 18:15:18 ----SD---- C:\ProgramData\Microsoft
2015-03-12 16:52:50 ----RD---- C:\Windows\System32
2015-03-12 16:52:44 ----D---- C:\Windows\SysWOW64
2015-03-12 16:52:13 ----D---- C:\Windows\WinSxS
2015-03-12 16:29:22 ----D---- C:\Windows\Inf
2015-03-12 16:29:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-12 03:46:31 ----D---- C:\Windows\system32\DriverStore
2015-03-11 12:54:23 ----D---- C:\Program Files\Common Files\Adobe
2015-03-11 12:40:27 ----D---- C:\Windows\rescache
2015-03-11 12:31:50 ----D---- C:\ProgramData\Adobe
2015-03-11 09:49:59 ----D---- C:\Program Files\OBS
2015-03-11 09:49:59 ----D---- C:\Program Files (x86)\OBS
2015-03-11 09:47:05 ----D---- C:\Users\Tristan\AppData\Roaming\DAEMON Tools Lite
2015-03-11 09:45:44 ----D---- C:\Windows\SoftwareDistribution
2015-03-11 09:44:24 ----D---- C:\Windows\system32\catroot2
2015-03-11 09:44:01 ----D---- C:\Windows\debug
2015-03-11 07:24:38 ----D---- C:\Windows\system32\drivers
2015-03-11 07:24:38 ----D---- C:\Program Files\Windows Defender
2015-03-11 07:24:38 ----D---- C:\Program Files (x86)\Windows Defender
2015-03-11 07:24:36 ----RD---- C:\Windows\ToastData
2015-03-11 07:24:36 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 07:24:36 ----D---- C:\Windows\system32\sk-SK
2015-03-11 07:24:35 ----D---- C:\Windows\WinStore
2015-03-11 07:24:33 ----D---- C:\Program Files\Internet Explorer
2015-03-11 07:24:33 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-10 23:08:46 ----D---- C:\Windows\CbsTemp
2015-03-10 23:07:57 ----D---- C:\ProgramData\Microsoft Help
2015-03-10 23:01:42 ----D---- C:\Windows\system32\MRT
2015-03-10 22:57:18 ----A---- C:\Windows\system32\MRT.exe
2015-03-10 21:54:28 ----D---- C:\ProgramData\CyberLink
2015-03-10 21:36:47 ----D---- C:\Windows\Logs
2015-03-10 21:06:28 ----D---- C:\Users\Tristan\AppData\Roaming\OBS
2015-03-06 09:46:25 ----D---- C:\Games
2015-02-24 00:20:10 ----D---- C:\Users\Tristan\AppData\Roaming\FileZilla
2015-02-20 15:38:59 ----D---- C:\Windows\Minidump
2015-02-17 23:12:23 ----D---- C:\Windows\system32\catroot
2015-02-17 22:57:12 ----D---- C:\Users\Tristan\AppData\Roaming\IObit
2015-02-17 22:56:50 ----D---- C:\ProgramData\IObit
2015-02-17 22:56:49 ----D---- C:\Windows\SYSWOW64\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 dtsoftbus01;@oem20.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-10-12 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-17 26528]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 clwvd;@oem19.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-11-29 4209152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-02-17 4263128]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-10-29 27032]
R3 MEIx64;@oem45.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-02-17 125952]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-02-05 10284872]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;@oem38.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8168;@oem46.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2015-02-17 874712]
R3 RTWlanE;@oem49.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2015-02-17 3759320]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-02-17 31472]
R3 SynTP;@oem44.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2015-02-17 544496]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 cpuz137;cpuz137; \??\C:\Users\Tristan\AppData\Local\Temp\cpuz137\cpuz137_x64.sys []
S3 dot4;@oem27.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem28.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\Windows\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem27.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-10-29 39320]
S3 IntcDAud;@oem48.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-02-17 455440]
S3 RSP2STOR;@oem14.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-08-22 20992]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\Windows\System32\drivers\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2015-02-17 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2014-01-13 92160]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2013-10-08 1039160]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-08 15720]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-05 935056]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-02-17 292568]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-02-17 191728]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-01-11 279024]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 wampapache64;wampapache64; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [2014-05-01 24576]
S3 wampmysqld64;wampmysqld64; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [2014-05-01 12942848]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2014-10-29 38792]

-----------------EOF-----------------

Odinštaloval som AdvancedSystemCare. A chcem sa spýtať či by ste mi mohli odporučiť nejaký taký podobný program alebo potrebujem vôbec niečo také ?

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#9 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\Tristan.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#10 Příspěvek od Tristan »

Zrýchlilo mi to internet z tých okolo 200 kbps na 500kbps ale stále to nie je tých 10Mbps čo by som mal mať :) ..
Posielam log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tristan at 2015-03-16 23:10:50
Microsoft Windows 8.1
System drive C: has 191 GB (20%) free of 936 GB
Total RAM: 8124 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:10:54, on 16.3.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Tristan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\syswow64\wwahost.exe
C:\Program Files\trend micro\Tristan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: HP SimplePass Service (omniserv) - Softex Inc. - C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache64 - Apache Software Foundation - c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe
O23 - Service: wampmysqld64 - Unknown owner - c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10297 bytes

======Listing Processes======





wininit.exe


winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 68613046320
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {bcd66b11-2d93-4b11-b0173aecd007abf8}
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 1bfb227c-7d3d-4b15-9e8e-cf8d7009d0b6 1
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\Explorer.EXE
taskhostex.exe
taskeng.exe {6132BA09-A2D8-4BB4-ACE6-3197A374FD57}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Users\Tristan\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe"
"C:\Program Files\Hewlett-Packard\SimplePass\opbhobrokerdsktop.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /ANDREA_BF_BYPASS
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3532.0.1277831161\1802303097" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3368 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3532 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3532.1.353139466\825148593" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3532 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3532.2.558888139\2023013909" /prefetch:673131151
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A3_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Disable/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_54/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3532 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3532.3.245070498\164479005" /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3532.7.35549449\276699265" --ppapi-flash-args=enable_hw_video_decode=1 --lang=sk --ignored=" --type=renderer " /prefetch:-632637702

C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Windows\syswow64\wwahost.exe" -ServerName:App.wwa
"C:\Users\Tristan\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\HPCeeScheduleForTristan.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForTristan (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-01-11 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-01-11 771056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2014-01-11 770032]
"SimplePass"=C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [2014-03-28 3962936]
"OPBHOBroker"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [2014-03-28 415288]
"OPBHOBrokerDesktop"=C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [2014-03-28 415288]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-02-17 2818800]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-02-17 7660760]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-02-17 1396592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-02-19 2874048]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2013-10-08 1045304]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-11-17 448856]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-11-29 624640]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-16 23:10:50 ----D---- C:\rsit
2015-03-16 18:18:43 ----D---- C:\AdwCleaner
2015-03-16 17:57:47 ----D---- C:\Program Files\trend micro
2015-03-15 21:04:35 ----D---- C:\Users\Tristan\AppData\Roaming\Applied Acoustics Systems
2015-03-15 21:03:43 ----D---- C:\Users\Tristan\AppData\Roaming\SynthMaker
2015-03-15 21:02:18 ----D---- C:\Users\Tristan\AppData\Roaming\Acoustica
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files\Propellerhead Software
2015-03-15 21:01:20 ----D---- C:\Program Files (x86)\VST
2015-03-15 20:59:35 ----D---- C:\ProgramData\Acoustica
2015-03-15 20:59:35 ----D---- C:\Program Files\Acoustica Mixcraft 7
2015-03-13 20:51:46 ----D---- C:\Users\Tristan\AppData\Roaming\FFsplit
2015-03-13 19:07:23 ----D---- C:\Program Files (x86)\FFsplit
2015-03-13 17:48:21 ----D---- C:\Users\Tristan\AppData\Roaming\DarkWave Studio
2015-03-13 17:38:40 ----D---- C:\Windows\Downloaded Installations
2015-03-13 17:38:26 ----D---- C:\Program Files (x86)\Lenovo
2015-03-13 17:38:11 ----D---- C:\Program Files (x86)\ExperimentalScene
2015-03-12 18:05:02 ----D---- C:\Users\Tristan\AppData\Roaming\Image-Line
2015-03-12 16:56:58 ----D---- C:\Users\Tristan\AppData\Roaming\Publish Providers
2015-03-12 16:52:21 ----D---- C:\ProgramData\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files\Sony
2015-03-12 16:52:21 ----D---- C:\Program Files (x86)\Sony
2015-03-12 16:51:12 ----D---- C:\Users\Tristan\AppData\Roaming\Sony
2015-03-12 16:45:52 ----D---- C:\Program Files (x86)\ASIO4ALL v2
2015-03-12 16:45:34 ----D---- C:\Program Files (x86)\VstPlugins
2015-03-12 16:45:34 ----A---- C:\Windows\SYSWOW64\rewire.dll
2015-03-12 16:45:21 ----D---- C:\Program Files (x86)\Outsim
2015-03-12 16:41:33 ----D---- C:\Program Files (x86)\Image-Line
2015-03-12 07:11:54 ----D---- C:\Program Files (x86)\Zombie Studios
2015-03-11 12:54:16 ----D---- C:\Program Files\Adobe
2015-03-11 11:02:41 ----D---- C:\ProgramData\Steam
2015-03-11 11:02:41 ----D---- C:\ProgramData\Orbit
2015-03-11 09:51:07 ----D---- C:\Program Files (x86)\Assassins Creed IV Black Flag
2015-03-11 09:45:00 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-03-10 21:51:41 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2015-03-10 21:34:15 ----D---- C:\Program Files\Echobit
2015-03-10 21:34:00 ----D---- C:\ProgramData\Echobit
2015-03-10 21:10:02 ----D---- C:\ProgramData\SplitMediaLabs
2015-03-10 21:10:02 ----D---- C:\Program Files (x86)\SplitmediaLabs
2015-03-10 21:08:11 ----D---- C:\Users\Tristan\AppData\Roaming\SplitmediaLabs
2015-03-10 20:17:50 ----A---- C:\Windows\system32\msctf.dll
2015-03-10 20:17:49 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-10 20:17:48 ----A---- C:\Windows\SYSWOW64\calc.exe
2015-03-10 20:17:48 ----A---- C:\Windows\system32\calc.exe
2015-03-10 20:17:45 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdNisDrv.sys
2015-03-10 20:17:44 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2015-03-10 20:17:42 ----A---- C:\Windows\SYSWOW64\winshfhc.dll
2015-03-10 20:17:42 ----A---- C:\Windows\system32\winshfhc.dll
2015-03-10 20:17:18 ----A---- C:\Windows\system32\SHCore.dll
2015-03-10 20:17:17 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\schannel.dll
2015-03-10 20:17:02 ----A---- C:\Windows\system32\photowiz.dll
2015-03-10 20:17:01 ----A---- C:\Windows\system32\win32k.sys
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\msftedit.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmlib.dll
2015-03-10 20:17:00 ----A---- C:\Windows\system32\atmfd.dll
2015-03-10 20:16:59 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-03-10 20:16:50 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\win32spl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\localspl.dll
2015-03-10 20:16:50 ----A---- C:\Windows\system32\dwmcore.dll
2015-03-10 20:16:49 ----AC---- C:\Windows\system32\drivers\hidbth.sys
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\mfc42u.dll
2015-03-10 20:16:49 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2015-03-10 20:16:48 ----A---- C:\Windows\SYSWOW64\atlthunk.dll
2015-03-10 20:16:48 ----A---- C:\Windows\system32\mfc42.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\WSShared.dll
2015-03-10 20:16:43 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:16:42 ----A---- C:\Windows\SYSWOW64\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\StorageContextHandler.dll
2015-03-10 20:16:41 ----A---- C:\Windows\system32\authui.dll
2015-03-10 20:16:31 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-10 20:16:31 ----A---- C:\Windows\system32\ntdll.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\ubpm.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapphost.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappgnui.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eappcfg.dll
2015-03-10 20:16:07 ----A---- C:\Windows\system32\eapp3hst.dll
2015-03-10 20:13:44 ----A---- C:\Windows\system32\mshtml.dll
2015-03-10 20:13:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-10 20:13:41 ----A---- C:\Windows\system32\jscript9.dll
2015-03-10 20:13:40 ----A---- C:\Windows\system32\ieframe.dll
2015-03-10 20:13:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-10 20:13:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\wininet.dll
2015-03-10 20:13:38 ----A---- C:\Windows\system32\iertutil.dll
2015-03-10 20:13:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\urlmon.dll
2015-03-10 20:13:37 ----A---- C:\Windows\system32\inetcomm.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-10 20:13:36 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\vbscript.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\iepeers.dll
2015-03-10 20:13:35 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-03-10 20:13:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\webcheck.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\jscript.dll
2015-03-10 20:13:34 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-03-10 20:13:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-10 20:13:33 ----A---- C:\Windows\system32\actxprxy.dll
2015-03-10 20:12:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-10 20:12:30 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-10 20:11:57 ----A---- C:\Windows\system32\LockScreenContentServer.exe
2015-03-10 20:11:48 ----A---- C:\Windows\system32\shell32.dll
2015-03-10 20:11:47 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-10 20:11:18 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-10 20:11:18 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-10 20:11:10 ----A---- C:\Windows\SYSWOW64\explorer.exe
2015-03-10 20:11:10 ----A---- C:\Windows\explorer.exe
2015-03-10 20:11:02 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2015-03-10 20:11:02 ----A---- C:\Windows\system32\MrmCoreR.dll
2015-03-06 10:05:37 ----D---- C:\Users\Tristan\AppData\Roaming\Theta
2015-03-06 09:46:16 ----D---- C:\Program Files (x86)\Assassins Creed III
2015-02-20 15:37:56 ----ASH---- C:\pagefile.sys
2015-02-17 23:10:34 ----A---- C:\Windows\system32\drivers\rtwlane.sys
2015-02-17 23:10:05 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2015-02-17 23:09:39 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-02-17 23:09:39 ----D---- C:\Program Files\Realtek
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSWOW64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRSTSX64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRRPTR64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM64.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRCOM.dll
2015-02-17 23:09:22 ----A---- C:\Windows\system32\SRAPO64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtPgEx64.dll
2015-02-17 23:09:20 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2015-02-17 23:09:19 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkCfg64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtkApi64.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEP64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEL64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEEG64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RTEED64A.dll
2015-02-17 23:09:18 ----A---- C:\Windows\system32\RtDataProc64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RTCOM64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DHT64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RP3DAA64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RltkAPO64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoRes64.dat
2015-02-17 23:09:17 ----A---- C:\Windows\system32\RCoInstII64.dll
2015-02-17 23:09:17 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CX64APO.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAR64.dll
2015-02-17 23:09:12 ----A---- C:\Windows\system32\AERTAC64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-02-17 23:08:26 ----A---- C:\Windows\system32\drivers\Rt630x64.sys
2015-02-17 23:08:16 ----A---- C:\Windows\system32\drivers\TeeDriverx64.sys
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPCo20.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\SynTPAPI.dll
2015-02-17 23:07:19 ----A---- C:\Windows\system32\drivers\SynTP.sys
2015-02-17 23:07:18 ----A---- C:\Windows\SYSWOW64\SynCom.dll
2015-02-17 23:07:17 ----A---- C:\Windows\system32\SynCOM.dll
2015-02-17 23:06:46 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2015-02-17 22:58:23 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2015-02-17 22:58:21 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2015-02-17 22:56:49 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-02-17 16:04:46 ----A---- C:\Windows\SYSWOW64\FM20.DLL

======List of files/folders modified in the last 1 month======

2015-03-16 23:08:35 ----D---- C:\Program Files (x86)\Steam
2015-03-16 23:05:11 ----D---- C:\Windows\Temp
2015-03-16 23:00:00 ----D---- C:\Windows\system32\sru
2015-03-16 22:56:59 ----D---- C:\Windows\Prefetch
2015-03-16 22:55:05 ----D---- C:\Users\Tristan\AppData\Roaming\TS3Client
2015-03-16 22:37:44 ----D---- C:\Windows\Inf
2015-03-16 21:23:01 ----D---- C:\Windows
2015-03-16 21:22:32 ----D---- C:\Windows\Tasks
2015-03-16 21:19:17 ----D---- C:\Program Files (x86)\IObit
2015-03-16 21:19:15 ----D---- C:\Windows\system32\Tasks
2015-03-16 21:10:19 ----D---- C:\Users\Tristan\AppData\Roaming\vlc
2015-03-16 17:57:47 ----RD---- C:\Program Files
2015-03-16 17:51:03 ----D---- C:\Program Files (x86)\Common Files
2015-03-16 15:23:21 ----D---- C:\Users\Tristan\AppData\Roaming\uTorrent
2015-03-16 03:34:40 ----D---- C:\Windows\Microsoft.NET
2015-03-15 22:37:31 ----D---- C:\ProgramData\ProductData
2015-03-15 21:02:02 ----D---- C:\Program Files\Common Files
2015-03-15 21:01:20 ----RD---- C:\Program Files (x86)
2015-03-15 20:59:35 ----HD---- C:\ProgramData
2015-03-14 18:53:55 ----D---- C:\Windows\AppReadiness
2015-03-14 15:14:49 ----SHD---- C:\System Volume Information
2015-03-14 12:02:25 ----HD---- C:\Program Files\WindowsApps
2015-03-13 19:08:26 ----D---- C:\Windows\SYSWOW64\directx
2015-03-13 17:39:02 ----SHD---- C:\Windows\Installer
2015-03-13 17:38:57 ----RSD---- C:\Windows\assembly
2015-03-13 03:42:21 ----D---- C:\Windows\system32\config
2015-03-12 19:08:50 ----RSD---- C:\Windows\Fonts
2015-03-12 18:15:18 ----SD---- C:\Users\Tristan\AppData\Roaming\Microsoft
2015-03-12 18:15:18 ----SD---- C:\ProgramData\Microsoft
2015-03-12 16:52:50 ----RD---- C:\Windows\System32
2015-03-12 16:52:44 ----D---- C:\Windows\SysWOW64
2015-03-12 16:52:13 ----D---- C:\Windows\WinSxS
2015-03-12 16:29:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-12 03:46:31 ----D---- C:\Windows\system32\DriverStore
2015-03-11 12:54:23 ----D---- C:\Program Files\Common Files\Adobe
2015-03-11 12:40:27 ----D---- C:\Windows\rescache
2015-03-11 12:31:50 ----D---- C:\ProgramData\Adobe
2015-03-11 09:49:59 ----D---- C:\Program Files\OBS
2015-03-11 09:49:59 ----D---- C:\Program Files (x86)\OBS
2015-03-11 09:47:05 ----D---- C:\Users\Tristan\AppData\Roaming\DAEMON Tools Lite
2015-03-11 09:45:44 ----D---- C:\Windows\SoftwareDistribution
2015-03-11 09:44:24 ----D---- C:\Windows\system32\catroot2
2015-03-11 09:44:01 ----D---- C:\Windows\debug
2015-03-11 07:24:38 ----D---- C:\Windows\system32\drivers
2015-03-11 07:24:38 ----D---- C:\Program Files\Windows Defender
2015-03-11 07:24:38 ----D---- C:\Program Files (x86)\Windows Defender
2015-03-11 07:24:36 ----RD---- C:\Windows\ToastData
2015-03-11 07:24:36 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-11 07:24:36 ----D---- C:\Windows\system32\sk-SK
2015-03-11 07:24:35 ----D---- C:\Windows\WinStore
2015-03-11 07:24:33 ----D---- C:\Program Files\Internet Explorer
2015-03-11 07:24:33 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-10 23:08:46 ----D---- C:\Windows\CbsTemp
2015-03-10 23:07:57 ----D---- C:\ProgramData\Microsoft Help
2015-03-10 23:01:42 ----D---- C:\Windows\system32\MRT
2015-03-10 22:57:18 ----A---- C:\Windows\system32\MRT.exe
2015-03-10 21:54:28 ----D---- C:\ProgramData\CyberLink
2015-03-10 21:36:47 ----D---- C:\Windows\Logs
2015-03-10 21:06:28 ----D---- C:\Users\Tristan\AppData\Roaming\OBS
2015-03-06 09:46:25 ----D---- C:\Games
2015-02-24 00:20:10 ----D---- C:\Users\Tristan\AppData\Roaming\FileZilla
2015-02-20 15:38:59 ----D---- C:\Windows\Minidump
2015-02-17 23:12:23 ----D---- C:\Windows\system32\catroot
2015-02-17 22:57:12 ----D---- C:\Users\Tristan\AppData\Roaming\IObit
2015-02-17 22:56:50 ----D---- C:\ProgramData\IObit
2015-02-17 22:56:49 ----D---- C:\Windows\SYSWOW64\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-06 632168]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 dtsoftbus01;@oem20.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-10-12 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-17 26528]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 clwvd;@oem19.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2014-01-28 41704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-11-29 4209152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-02-17 4263128]
R3 iwdbus;@oem10.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2013-10-29 27032]
R3 MEIx64;@oem45.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-02-17 125952]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-02-05 10284872]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;@oem38.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8168;@oem46.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2015-02-17 874712]
R3 RTWlanE;@oem49.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2015-02-17 3759320]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-02-17 31472]
R3 SynTP;@oem44.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2015-02-17 544496]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
S3 cpuz137;cpuz137; \??\C:\Users\Tristan\AppData\Local\Temp\cpuz137\cpuz137_x64.sys []
S3 dot4;@oem27.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem28.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\Windows\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem27.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem9.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2013-10-29 39320]
S3 IntcDAud;@oem48.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-02-17 455440]
S3 RSP2STOR;@oem14.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-04 291544]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-12-13 29936]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-08-22 20992]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\Windows\System32\drivers\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2015-02-17 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2014-10-29 38792]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2014-01-13 92160]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2013-10-08 1039160]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-08 15720]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-05 935056]
R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-03-28 88064]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-02-17 292568]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-02-17 191728]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-01-11 279024]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater; C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-12 107912]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 w3logsvc;@%windir%\system32\inetsrv\iisres.dll,-30014; C:\Windows\system32\svchost.exe [2014-10-29 38792]
S3 wampapache64;wampapache64; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [2014-05-01 24576]
S3 wampmysqld64;wampmysqld64; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [2014-05-01 12942848]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2014-10-29 38792]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#11 Příspěvek od Rudy »

Smazáno. Zkuste přeinstalovat Avast.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#12 Příspěvek od Tristan »

Odinštaloval som si Avast a vyskúšal som bez neho ako pôjde internet... Žiadna zmena, stále ide rýchlostou 0,5Mbps.. Avast som si potom späť nainštaloval.. Ako mám ďalej pokračovať ? Čo môže byť chyba spomalenia internetu keď som iba na batérií ?

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#13 Příspěvek od Rudy »

Při chodu na baterii se spíše zpomalí NB samotný. Kvůli spotřebě se podtaktuje procesor. To by ovšem nemělo znamenat zpomalení rychlosti připojení. Virový problém to ale není. Jedině, co mohu ještě poradit, přeinstalovat ovladač síť. adaptéru.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Tristan
Návštěvník
Návštěvník
Příspěvky: 34
Registrován: 19 led 2013 19:42

Re: Po odpojení NB z elektriky sa spomalí internet

#14 Příspěvek od Tristan »

Mohol by som Vás poprosiť o návod ako by som ho mohol preinštalovať ?

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Po odpojení NB z elektriky sa spomalí internet

#15 Příspěvek od Rudy »

Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno