Preventivní

[kouzelnik3]

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jakub at 2015-08-16 12:44:23
Microsoft Windows 10 Home
System drive C: has 66 GB (32%) free of 206 GB
Total RAM: 3767 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:44:46, on 16.8.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
H:\Hry\LoL\League of Legends\RADS\system\rads_user_kernel.exe
H:\Hry\LoL\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.251\deploy\LoLLauncher.exe
H:\Hry\LoL\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.35\deploy\LoLPatcher.exe
H:\Hry\LoL\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.155\deploy\LolClient.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jakub.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... X71NLS9Z8S
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OscarX7Mouse5Mode] "C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_7B684F571039795D9613652596821858] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Jakub\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Vzdálené plochy Chrome (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\44.0.2403.25\remoting_host.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: MySQL - Unknown owner - C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15057 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\44.0.2403.25\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {9f166c5b-91ee-40a6-855b3b9b7a95d94f}
"C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe" --defaults-file="C:\Program Files\MySQL\MySQL Server 5.1\my.ini" MySQL
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMYMOVIES
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\mqsvc.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\WINDOWS\System32\tcpsvcs.exe
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Google\Chrome Remote Desktop\44.0.2403.25\remoting_host.exe" --type=host --daemon-pipe=656
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding

"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6312a84a-7120-4035-bc11-ed310aae4798 -SystemEventPortName:HostProcess-f0b202ae-3381-4fe5-b4b4-37dfbe904cd8 -IoCancelEventPortName:HostProcess-6fa58594-a37f-4510-b683-e7dd7c414fe1 -NonStateChangingEventPortName:HostProcess-972b1c81-5917-4843-85b2-efadda60ab21 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ed732224-73e4-4f46-94d9-eb813a5bf0eb -DeviceGroupId:WudfDefaultDevicePool

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" d883b1d0-22a9-4510-acb5-3cb040e99050
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe" Minimum
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --on-initialized-event-handle=780 --parent-handle=784
"C:\Users\Jakub\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="10136.0.558675854\1842660457" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,9,22,45 --gpu-vendor-id=0x8086 --gpu-device-id=0x0046 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2900 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.1.598137789\2755867" --font-cache-shared-handle=2364 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.2.1615894041\1337280568" --font-cache-shared-handle=2760 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.3.1470116641\2112354451" --font-cache-shared-handle=2876 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.4.173350499\537984617" --font-cache-shared-handle=2908 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.5.1475297909\2142525458" --font-cache-shared-handle=3188 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.6.1448555387\645646623" --font-cache-shared-handle=3460 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.7.1259006930\1604665812" --font-cache-shared-handle=3676 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.9.910798594\1029281472" --font-cache-shared-handle=3976 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.10.2033306292\1202214508" --font-cache-shared-handle=4004 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.11.1947812091\1224561702" --font-cache-shared-handle=2508 /prefetch:673131151
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"fontdrvhost.exe"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\WINDOWS\System32\NetworkUXBroker.exe" -ServerName:Windows.Networking.UX
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
taskhostw.exe
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe" -ServerName:RemindersServer
"H:\Hry\LoL\League of Legends\RADS\system\rads_user_kernel.exe" updateandrun lol_launcher LoLLauncher.exe
LoLLauncher.exe
"H:/Hry/LoL/League of Legends/RADS/projects/lol_patcher/releases/0.0.0.35/deploy/LoLPatcher.exe"
"H:/Hry/LoL/League of Legends/RADS/projects/lol_air_client/releases/0.0.1.155/deploy//LolClient.exe" -runtime .\ -nodebug META-INF\AIR\application.xml .\ -- 8393
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe" -ServerName:SpeechRuntime

"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe" -ServerName:ActionUriServer
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/*CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/*ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.209.964046303\182342099" --font-cache-shared-handle=9240 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/*CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/*ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.214.196523991\386254497" --font-cache-shared-handle=8252 /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe159_ Global\UsGthrCtrlFltPipeMssGthrPipe159 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 628 632 640 8192 636
"C:\Users\Jakub\Desktop\RSITx64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/*AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*BrowserBlacklist/Enabled/*CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/*ReportCertificateErrors/ShowAndPossiblySend/*ReportCertificateErrorsOverHttp/UploadReportsOverHttp/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SdchPersistence/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_19/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="10136.224.232438055\238348850" --font-cache-shared-handle=5444 /prefetch:673131151

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-07-14 219304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-31 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-10 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2015-07-14 2335960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-31 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-07-14 153768]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-01 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-10 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-04-01 672032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL [2015-07-14 1729752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-01 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-11-27 168480]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-11-27 393760]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-11-27 418336]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-08-10 14040792]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-03-31 2735400]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-07-24 1710568]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarX7Mouse5Mode"=C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [2012-03-20 3521024]
"GoogleChromeAutoLaunch_7B684F571039795D9613652596821858"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-08-08 813896]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-07-17 8418584]
"Spotify Web Helper"=C:\Users\Jakub\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-07-24 2017848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-01-06 860040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray]
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2011-06-17 266496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ETDWare]
C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 649608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup]
C:\Users\Jakub\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [2014-08-13 3746120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray2k]
C:\Program Files (x86)\Morgan\Morgan M-JPEG2000 codec V3\MMTray2k.exe [2010-03-14 101888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProgLauncher]
C:\Program Files\ProgDVB\ProgLauncher.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-08-10 14040792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuiteTray]
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-04-02 340848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TV IR]
C:\Program Files (x86)\TV IR\TV IR.exe [2011-04-13 1437184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-09-20 270336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jakub^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Jakub\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jakub^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk]
C:\PROGRA~2\MICROS~4\Office14\ONENOTEM.EXE /tsr []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-08-10 6109776]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5.5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll C:\Windows\System32\nvinitx.dll C:\Windows\System32\nvinitx.dll C:\Windows\System32\nvinitx.dll,C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-11-26 390144]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll
"vidc.MJ2C"=M3JP2K64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-16 12:44:23 ----D---- C:\rsit
2015-08-15 10:10:37 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-15 10:10:36 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-15 01:07:10 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-08-15 01:07:10 ----D---- C:\WINDOWS\system32\NV
2015-08-15 01:06:18 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-08-15 01:06:18 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-15 01:06:18 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-08-15 01:06:17 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-08-15 01:06:17 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-08-15 01:06:16 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-08-15 01:06:16 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-08-15 01:06:14 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-08-15 01:04:42 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2015-08-15 01:04:42 ----A---- C:\WINDOWS\system32\OpenCL.dll
2015-08-15 00:40:25 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-08-15 00:40:25 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2015-08-15 00:40:25 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-15 00:40:25 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2015-08-15 00:40:24 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-08-15 00:40:24 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-08-15 00:40:24 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2015-08-15 00:40:23 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-08-15 00:40:23 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2015-08-15 00:40:23 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-08-15 00:40:23 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-08-15 00:40:23 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-08-15 00:40:23 ----A---- C:\WINDOWS\system32\nvinitx.dll
2015-08-15 00:40:23 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-08-15 00:40:22 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-08-15 00:40:22 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-08-15 00:40:22 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-08-15 00:40:22 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-08-15 00:40:20 ----A---- C:\WINDOWS\system32\nvdispgenco6435560.dll
2015-08-15 00:40:19 ----A---- C:\WINDOWS\system32\nvdispco6435560.dll
2015-08-15 00:40:17 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2015-08-15 00:40:17 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-08-15 00:40:16 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-08-15 00:40:16 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-08-15 00:40:16 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-08-15 00:40:16 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-08-15 00:40:16 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-08-15 00:40:03 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-08-15 00:40:03 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-08-15 00:40:03 ----A---- C:\WINDOWS\system32\nvapi64.dll
2015-08-14 23:56:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-14 23:56:10 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-14 23:56:03 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-14 23:56:01 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-08-14 23:55:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-08-14 23:55:55 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-08-14 23:55:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-08-14 23:55:51 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-08-14 23:55:47 ----A---- C:\WINDOWS\system32\shell32.dll
2015-08-14 23:55:44 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-08-14 23:55:42 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-08-14 23:55:40 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-08-14 23:55:39 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-14 23:55:36 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-14 23:55:35 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-08-14 23:55:35 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-08-14 23:55:35 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-08-14 23:55:33 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-08-14 23:55:32 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-08-14 23:55:32 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-14 23:55:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-08-14 23:55:31 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-08-14 23:55:30 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-08-14 23:55:30 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-14 23:55:30 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-08-14 23:55:30 ----A---- C:\WINDOWS\system32\mf.dll
2015-08-14 23:55:30 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-08-14 23:55:30 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-08-14 23:55:29 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-08-14 23:55:29 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-08-14 23:55:28 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-08-14 23:55:28 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-08-14 23:55:28 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-08-14 23:55:28 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-14 23:55:28 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-08-14 23:55:28 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-08-14 23:55:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-08-14 23:55:27 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-08-14 23:55:26 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-08-14 23:55:25 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\notepad.exe
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-08-14 23:55:25 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-08-14 23:55:25 ----A---- C:\WINDOWS\notepad.exe
2015-08-14 23:55:24 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-08-14 23:55:24 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-08-14 23:55:23 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-14 23:55:23 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-08-14 23:55:23 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-08-14 23:55:20 ----A---- C:\WINDOWS\system32\mfps.dll
2015-08-14 23:55:20 ----A---- C:\WINDOWS\system32\InputService.dll
2015-08-14 23:55:20 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-08-14 23:55:16 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-08-14 23:55:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-08-14 23:55:15 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-08-14 23:55:15 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-14 23:55:15 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-14 23:55:15 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-08-14 23:55:15 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-08-14 23:55:15 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-08-14 23:55:14 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-08-14 23:55:14 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-08-14 23:55:13 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-08-14 23:55:13 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2015-08-14 23:55:13 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-14 23:55:13 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-14 23:55:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-14 13:53:22 ----D---- C:\WINDOWS\PCHEALTH
2015-08-10 14:55:46 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2015-08-10 14:55:33 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2015-08-10 14:55:31 ----A---- C:\WINDOWS\SYSWOW64\RltkAPO.dll
2015-08-10 14:55:30 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2015-08-10 14:55:25 ----A---- C:\WINDOWS\system32\NAHIMICV2apo.dll
2015-08-10 14:55:07 ----A---- C:\WINDOWS\system32\HiFiDAX2API.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DDPP64AF3.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DDPO64AF3.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DDPD64AF3.dll
2015-08-10 14:54:59 ----A---- C:\WINDOWS\system32\DDPA64F3.dll
2015-08-10 14:36:17 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-08-10 14:35:59 ----A---- C:\WINDOWS\avastSS.scr
2015-08-10 14:34:00 ----A---- C:\WINDOWS\system32\YamahaAE2.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\YamahaAE.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\WavesGUILib64.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tossaemaxapo64.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tossaeapo64.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\toseaeapo64.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tosasfapo64.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tosade.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tepeqapo64.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tadefxapo264.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\tadefxapo.dll
2015-08-10 14:33:59 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\SYSWOW64\SRCOM.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRRPTR64.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRCOM64.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRCOM.dll
2015-08-10 14:33:58 ----A---- C:\WINDOWS\system32\SRAPO64.dll
2015-08-10 14:33:57 ----A---- C:\WINDOWS\system32\sltech64.dll
2015-08-10 14:33:57 ----A---- C:\WINDOWS\system32\slprp64.dll
2015-08-10 14:33:55 ----A---- C:\WINDOWS\system32\slcnt64.dll
2015-08-10 14:33:55 ----A---- C:\WINDOWS\system32\sl3apo64.dll
2015-08-10 14:33:55 ----A---- C:\WINDOWS\system32\SFSS_APO.dll
2015-08-10 14:33:54 ----A---- C:\WINDOWS\SYSWOW64\SFCOM.dll
2015-08-10 14:33:54 ----A---- C:\WINDOWS\system32\SFNHK64.dll
2015-08-10 14:33:54 ----A---- C:\WINDOWS\system32\SFCOM64.dll
2015-08-10 14:33:54 ----A---- C:\WINDOWS\system32\SFAPO64.dll
2015-08-10 14:33:54 ----A---- C:\WINDOWS\system32\SEHDRA64.dll
2015-08-10 14:33:54 ----A---- C:\WINDOWS\system32\SECOMN64.dll
2015-08-10 14:33:53 ----A---- C:\WINDOWS\SYSWOW64\SECOMN32.DLL
2015-08-10 14:33:53 ----A---- C:\WINDOWS\system32\SEAPO64.dll
2015-08-10 14:33:51 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2015-08-10 14:33:50 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2015-08-10 14:33:49 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2015-08-10 14:33:48 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2015-08-10 14:33:48 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2015-08-10 14:33:48 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2015-08-10 14:33:48 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2015-08-10 14:33:48 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2015-08-10 14:33:47 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2015-08-10 14:33:46 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2015-08-10 14:33:45 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2015-08-10 14:33:38 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\R4EEP64A.dll
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\R4EEL64A.dll
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\R4EEG64A.dll
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\R4EED64A.dll
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\R4EEA64A.dll
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\NahimicAPONSControl.dll
2015-08-10 14:33:35 ----A---- C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2015-08-10 14:33:34 ----A---- C:\WINDOWS\system32\MISS_APO.dll
2015-08-10 14:33:33 ----A---- C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2015-08-10 14:33:33 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2015-08-10 14:33:33 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2015-08-10 14:33:32 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2015-08-10 14:33:31 ----A---- C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2015-08-10 14:33:31 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2015-08-10 14:33:30 ----A---- C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-08-10 14:33:29 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-08-10 14:33:29 ----A---- C:\WINDOWS\system32\KAAPORT64.dll
2015-08-10 14:33:29 ----A---- C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2015-08-10 14:33:28 ----A---- C:\WINDOWS\system32\IntelSSTAPO.dll
2015-08-10 14:33:28 ----A---- C:\WINDOWS\system32\ICEsoundAPO64.dll
2015-08-10 14:33:27 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSU2PREC64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSU2PLFX64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSU2PGFX64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSLimiterDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSLFXAPO64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSGFXAPONS64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSGFXAPO64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2015-08-10 14:33:26 ----A---- C:\WINDOWS\system32\DTSBoostDLL64.dll
2015-08-10 14:33:25 ----A---- C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2015-08-10 14:33:25 ----A---- C:\WINDOWS\system32\DDPP64A.dll
2015-08-10 14:33:24 ----A---- C:\WINDOWS\system32\DDPO64A.dll
2015-08-10 14:33:24 ----A---- C:\WINDOWS\system32\DDPD64A.dll
2015-08-10 14:33:24 ----A---- C:\WINDOWS\system32\DDPA64.dll
2015-08-10 14:33:24 ----A---- C:\WINDOWS\system32\CX64APO.dll
2015-08-10 14:33:24 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-08-10 14:33:24 ----A---- C:\WINDOWS\system32\audioLibVc.dll
2015-08-10 14:33:23 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2015-08-10 14:33:23 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2015-08-10 14:33:23 ----A---- C:\WINDOWS\system32\AcpiServiceVnA64.dll
2015-08-05 20:56:10 ----A---- C:\WINDOWS\system32\twinui.dll
2015-08-05 20:56:06 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-05 20:56:00 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-08-05 20:55:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-08-05 20:55:55 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-05 20:55:55 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-08-05 20:55:55 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-05 20:55:50 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-05 20:55:50 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-08-05 20:55:49 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-08-05 20:55:49 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-08-05 20:55:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-08-05 20:55:48 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-08-05 20:55:48 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-08-05 20:55:47 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-08-05 20:55:46 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-08-05 20:55:45 ----A---- C:\WINDOWS\system32\winmde.dll
2015-08-05 20:55:45 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-08-05 20:55:45 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-05 20:55:43 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-08-05 20:55:43 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-08-05 20:55:42 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2015-08-05 20:55:42 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-08-05 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-08-05 20:55:41 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-08-05 20:55:41 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-05 20:55:41 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-05 20:55:40 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-08-05 20:55:40 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-08-05 20:55:40 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-08-05 20:55:40 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-08-05 20:55:40 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-08-05 20:55:40 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-08-05 20:55:39 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-08-05 20:55:39 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-08-05 20:55:39 ----A---- C:\WINDOWS\system32\provengine.dll
2015-08-05 20:55:39 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-05 20:55:39 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-08-05 20:55:39 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-05 20:55:38 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-08-05 20:55:37 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\SYSWOW64\VoiceActivationManager.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-08-05 20:55:36 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-08-01 18:22:34 ----D---- C:\WINDOWS\system32\SleepStudy
2015-08-01 03:32:21 ----D---- C:\ProgramData\PreEmptive Solutions
2015-08-01 03:32:12 ----D---- C:\Program Files (x86)\ShellDir
2015-08-01 03:28:51 ----D---- C:\ProgramData\Microsoft DNX
2015-08-01 03:28:51 ----D---- C:\Program Files\Microsoft DNX
2015-08-01 03:24:16 ----D---- C:\Program Files (x86)\Microsoft Web Tools
2015-08-01 03:22:26 ----D---- C:\Program Files\IIS Express
2015-08-01 03:22:26 ----D---- C:\Program Files (x86)\IIS Express
2015-08-01 03:21:55 ----D---- C:\Program Files (x86)\AppInsights
2015-08-01 03:21:28 ----D---- C:\Program Files (x86)\Microsoft Office365 Tools
2015-08-01 03:19:32 ----D---- C:\ProgramData\NuGet
2015-08-01 03:19:32 ----D---- C:\Program Files (x86)\NuGet
2015-08-01 03:19:24 ----D---- C:\Program Files (x86)\Microsoft WCF Data Services
2015-08-01 03:19:02 ----D---- C:\Program Files\IIS
2015-08-01 03:19:01 ----D---- C:\Program Files (x86)\IIS
2015-08-01 03:13:38 ----D---- C:\Program Files\Microsoft Visual Studio 12.0
2015-08-01 03:08:23 ----D---- C:\WINDOWS\symbols
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsRemoteEngine.exe
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsProxyStub.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsExperiment.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsDesktopEngine.exe
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsCapture.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARPDebug.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARP12Debug.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\perf_gputiming.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXToolsReporting.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DxToolsReportGenerator.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXToolsOfflineAnalysis.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXToolsMonitor.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXGIDebug.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXCpl.exe
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXCaptureReplay.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\DXCap.exe
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\d3d12warp.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\d3d11_3SDKLayers.dll
2015-08-01 03:03:42 ----A---- C:\WINDOWS\SYSWOW64\d2d1debug3.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\VsGraphicsExperiment.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\VsGraphicsCapture.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\VSD3DWARPDebug.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXToolsReporting.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXToolsMonitor.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXGIDebug.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXCpl.exe
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXCaptureReplay.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\DXCap.exe
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\d3d12warp.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2015-08-01 03:03:41 ----A---- C:\WINDOWS\system32\d2d1debug3.dll
2015-08-01 03:03:40 ----A---- C:\WINDOWS\system32\VsGraphicsProxyStub.dll
2015-08-01 03:03:40 ----A---- C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2015-08-01 03:03:40 ----A---- C:\WINDOWS\system32\perf_gputiming.dll
2015-08-01 03:03:40 ----A---- C:\WINDOWS\system32\DxToolsReportGenerator.dll
2015-08-01 02:53:59 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-08-01 02:11:11 ----D---- C:\ProgramData\VsTelemetry
2015-08-01 01:47:18 ----A---- C:\WINDOWS\SYSWOW64\REN3B6C.tmp
2015-07-31 11:35:36 ----A---- C:\WINDOWS\system32\drivers\tapoas.sys
2015-07-31 10:20:54 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-07-31 09:39:35 ----A---- C:\WINDOWS\system32\wmp.dll
2015-07-31 09:39:31 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2015-07-31 09:39:31 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-07-31 09:39:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2015-07-31 09:39:09 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-07-31 09:39:08 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-07-31 09:38:54 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-07-31 09:38:41 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-07-31 09:38:38 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-07-31 09:38:32 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-07-31 09:38:28 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-07-31 09:38:20 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2015-07-31 09:38:18 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-07-31 09:38:13 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-07-31 09:38:00 ----A---- C:\WINDOWS\system32\msi.dll
2015-07-31 09:37:40 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-07-31 09:37:38 ----A---- C:\WINDOWS\system32\wininet.dll
2015-07-31 09:37:37 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-07-31 09:37:36 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-07-31 09:37:35 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-07-31 09:37:25 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-07-31 09:37:22 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-07-31 09:37:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-07-31 09:37:13 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-07-31 09:37:13 ----A---- C:\WINDOWS\explorer.exe

[kouzelnik3]

2015-07-31 09:37:10 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-07-31 09:37:09 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-07-31 09:37:08 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-07-31 09:37:07 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-07-31 09:37:03 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-07-31 09:36:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2015-07-31 09:36:56 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-07-31 09:36:55 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-07-31 09:36:54 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-07-31 09:36:53 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2015-07-31 09:36:51 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-07-31 09:36:50 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-07-31 09:36:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-07-31 09:36:47 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-07-31 09:36:46 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-07-31 09:36:42 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-07-31 09:36:41 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-07-31 09:36:40 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-07-31 09:36:39 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-07-31 09:36:38 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-07-31 09:36:36 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-07-31 09:36:35 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-07-31 09:36:33 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-07-31 09:36:33 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-07-31 09:36:31 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-07-31 09:36:30 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-07-31 09:36:28 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-07-31 09:36:27 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2015-07-31 09:36:25 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-07-31 09:36:23 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-07-31 09:36:22 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-07-31 09:36:21 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-07-31 09:36:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2015-07-31 09:36:17 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-07-31 09:36:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2015-07-31 09:36:15 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-07-31 09:36:12 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-07-31 09:36:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-07-31 09:36:05 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-07-31 09:36:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2015-07-31 09:36:04 ----A---- C:\WINDOWS\system32\efscore.dll
2015-07-31 09:36:03 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-07-31 09:36:01 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-31 09:35:59 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-07-31 09:35:58 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-07-31 09:35:56 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-07-31 09:35:55 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-07-31 09:35:50 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-07-31 09:35:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2015-07-31 09:35:49 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-07-31 09:35:47 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-07-31 09:35:45 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-07-31 09:35:44 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-07-31 09:35:43 ----A---- C:\WINDOWS\SYSWOW64\efscore.dll
2015-07-31 09:35:42 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-07-31 09:35:41 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-07-31 09:35:40 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2015-07-31 09:35:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2015-07-31 09:35:33 ----A---- C:\WINDOWS\system32\hal.dll
2015-07-31 09:35:32 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2015-07-31 09:35:30 ----A---- C:\WINDOWS\system32\mos.dll
2015-07-31 09:35:27 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-07-31 09:35:26 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-07-31 09:35:25 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-07-31 09:35:24 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-07-31 09:35:24 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-07-31 09:35:23 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-07-31 09:35:22 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2015-07-31 09:35:21 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-07-31 09:35:21 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-07-31 09:35:21 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-07-31 09:35:20 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-07-31 09:35:17 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-07-31 09:35:16 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-07-31 09:35:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-07-31 09:35:08 ----A---- C:\WINDOWS\SYSWOW64\srumsvc.dll
2015-07-31 09:35:08 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-07-31 09:35:06 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-07-31 09:35:05 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-07-31 09:35:04 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2015-07-31 09:35:03 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2015-07-31 09:35:01 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2015-07-31 09:35:01 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-07-31 09:34:57 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-07-31 09:34:56 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-07-31 09:34:53 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-07-31 09:34:52 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-07-31 09:34:46 ----A---- C:\WINDOWS\system32\ci.dll
2015-07-31 09:34:33 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2015-07-31 09:34:32 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-07-31 09:34:29 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-07-31 09:34:27 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-07-31 09:34:25 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-07-31 09:34:22 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-07-31 09:34:05 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-07-31 09:33:59 ----A---- C:\WINDOWS\system32\winload.exe
2015-07-31 09:33:58 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-07-31 09:33:56 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-07-31 09:33:51 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2015-07-31 09:33:50 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-07-31 09:33:46 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-07-31 09:33:34 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-07-31 09:33:33 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-07-31 09:33:27 ----A---- C:\WINDOWS\system32\winresume.exe
2015-07-31 09:33:12 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-07-31 09:33:10 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-07-31 09:33:04 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-07-31 09:32:58 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-07-31 09:32:53 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-07-31 09:32:52 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2015-07-31 09:32:51 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2015-07-31 09:32:50 ----A---- C:\WINDOWS\system32\wininit.exe
2015-07-31 09:32:49 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-07-31 09:32:47 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-07-31 09:32:42 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-07-31 09:32:40 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-07-31 09:32:38 ----A---- C:\WINDOWS\system32\stobject.dll
2015-07-31 09:32:14 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-07-31 09:32:13 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-07-31 09:32:11 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-07-31 09:32:09 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-07-31 09:32:05 ----A---- C:\WINDOWS\system32\usocore.dll
2015-07-31 09:32:01 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2015-07-31 09:32:00 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-07-31 09:31:55 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-07-31 09:31:54 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-07-31 09:31:53 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-07-31 09:31:53 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-07-31 09:31:52 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2015-07-31 09:31:49 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-07-31 09:31:42 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-07-31 09:31:41 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-07-31 09:31:39 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-07-31 09:31:38 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-07-31 09:31:36 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2015-07-31 09:31:36 ----A---- C:\WINDOWS\system32\calc.exe
2015-07-31 09:31:33 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-07-31 09:31:32 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-07-31 09:31:31 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2015-07-31 09:31:30 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2015-07-31 09:31:28 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-07-31 09:31:25 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-07-31 09:31:22 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-07-31 09:31:19 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2015-07-31 09:31:17 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2015-07-31 09:31:12 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-07-31 09:31:10 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-07-31 09:31:07 ----A---- C:\WINDOWS\system32\bcd.dll
2015-07-31 09:31:04 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-07-31 09:31:04 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-07-31 09:31:03 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-07-31 09:31:00 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-07-31 09:31:00 ----A---- C:\WINDOWS\system32\wer.dll
2015-07-31 09:31:00 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-07-31 09:30:56 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-07-31 09:30:55 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2015-07-31 09:30:52 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-07-31 09:30:47 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-07-31 09:30:40 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-07-31 09:30:32 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-07-31 09:30:27 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-07-31 09:30:27 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-07-31 09:30:15 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-07-31 09:30:04 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-07-31 09:29:56 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-07-31 09:29:52 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2015-07-31 09:29:36 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-07-31 09:29:32 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-07-31 09:29:30 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-07-31 09:29:28 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2015-07-31 09:29:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-07-31 09:29:26 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-07-31 09:29:24 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-07-31 09:29:24 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-07-31 09:29:23 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-07-31 09:29:21 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-07-31 09:29:19 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-07-31 09:29:19 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-07-31 09:29:18 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-07-31 09:29:17 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-07-31 09:29:13 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-07-31 09:29:11 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-07-31 09:29:06 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-07-31 09:29:04 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-07-31 09:29:03 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2015-07-31 09:29:01 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-07-31 09:28:24 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-07-31 09:28:22 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-07-31 09:20:48 ----D---- C:\ProgramData\Sun
2015-07-31 09:07:54 ----A---- C:\WINDOWS\system32\drivers\tap0901.sys
2015-07-30 21:04:29 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2015-07-30 21:04:29 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2015-07-30 21:04:29 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-07-30 21:04:28 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-07-30 21:04:28 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-07-30 20:39:17 ----D---- C:\ProgramData\Microsoft OneDrive
2015-07-30 16:48:52 ----DC---- C:\WINDOWS\Panther
2015-07-30 16:45:03 ----SHD---- C:\ProgramData\Šablony
2015-07-30 16:45:03 ----SHD---- C:\ProgramData\Plocha
2015-07-30 16:45:03 ----SHD---- C:\ProgramData\Oblíbené položky
2015-07-30 16:45:03 ----SHD---- C:\ProgramData\Nabídka Start
2015-07-30 16:45:03 ----SHD---- C:\ProgramData\Dokumenty
2015-07-30 16:45:03 ----SHD---- C:\ProgramData\Data aplikací
2015-07-30 16:45:01 ----SHD---- C:\Recovery
2015-07-30 16:43:54 ----D---- C:\Windows.old
2015-07-30 16:40:38 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-07-30 16:31:24 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2015-07-30 16:31:24 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2015-07-30 16:31:24 ----D---- C:\WINDOWS\system32\msmq
2015-07-30 16:31:24 ----D---- C:\WINDOWS\system32\BestPractices
2015-07-30 16:31:23 ----D---- C:\Program Files\Reference Assemblies
2015-07-30 16:31:23 ----D---- C:\Program Files\MSBuild
2015-07-30 16:31:23 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-07-30 16:31:23 ----D---- C:\Program Files (x86)\MSBuild
2015-07-30 16:31:23 ----D---- C:\inetpub

2015-07-30 16:30:39 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-07-30 16:30:39 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-07-30 16:30:39 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 16:30:36 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-07-30 16:30:36 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-07-30 16:30:36 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 16:29:58 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-07-30 16:12:10 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-07-30 16:05:09 ----SD---- C:\Users\Jakub\AppData\Roaming\Microsoft
2015-07-30 16:01:29 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-30 16:01:20 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-07-30 15:59:20 ----D---- C:\WINDOWS\system32\DAX2
2015-07-30 15:59:06 ----D---- C:\Program Files\Realtek
2015-07-30 15:59:05 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-07-30 15:58:50 ----D---- C:\Program Files\Synaptics
2015-07-30 15:58:43 ----D---- C:\ProgramData\NVIDIA
2015-07-30 15:58:10 ----D---- C:\ProgramData\NVIDIA Corporation
2015-07-30 15:57:36 ----D---- C:\Program Files\NVIDIA Corporation
2015-07-30 15:57:36 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-07-30 15:50:22 ----D---- C:\WINDOWS\Prefetch
2015-07-30 15:50:12 ----ASH---- C:\swapfile.sys
2015-07-30 14:08:36 ----HD---- C:\$Windows.~BT
2015-07-27 11:55:46 ----D---- C:\Program Files\Common Files\Adobe
2015-07-25 15:48:30 ----D---- C:\WINDOWS\SYSWOW64\GPBAK
2015-07-25 15:48:26 ----A---- C:\WINDOWS\unins000.exe
2015-07-25 15:48:25 ----A---- C:\WINDOWS\unins000.dat
2015-07-17 20:47:34 ----D---- C:\Users\Jakub\AppData\Roaming\istartsurf
2015-07-17 17:11:22 ----A---- C:\WINDOWS\system32\drivers\VBoxDrv.sys
2015-07-17 17:11:08 ----A---- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys

======List of files/folders modified in the last 1 month======

2015-08-16 12:44:36 ----D---- C:\Program Files\trend micro
2015-08-16 12:25:41 ----D---- C:\Users\Jakub\AppData\Roaming\Skype
2015-08-16 12:22:24 ----D---- C:\WINDOWS\Temp
2015-08-16 11:59:02 ----D---- C:\WINDOWS\system32\sru
2015-08-16 11:18:38 ----D---- C:\WINDOWS\System32
2015-08-16 10:19:21 ----D---- C:\WINDOWS\system32\Tasks
2015-08-16 10:16:39 ----D---- C:\WINDOWS\system32\drivers
2015-08-16 10:16:05 ----D---- C:\Windows
2015-08-15 22:43:52 ----D---- C:\Users\Jakub\AppData\Roaming\TS3Client
2015-08-15 20:23:16 ----D---- C:\WINDOWS\AppReadiness
2015-08-15 19:17:20 ----D---- C:\Users\Jakub\AppData\Roaming\foobar2000
2015-08-15 11:29:12 ----D---- C:\WINDOWS\Microsoft.NET
2015-08-15 10:59:50 ----D---- C:\WINDOWS\system32\config
2015-08-15 10:48:19 ----D---- C:\ProgramData\ProductData
2015-08-15 10:48:04 ----D---- C:\WINDOWS\WinSxS
2015-08-15 10:47:10 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-08-15 10:47:03 ----D---- C:\WINDOWS\debug
2015-08-15 10:43:19 ----D---- C:\WINDOWS\system32\DriverStore
2015-08-15 10:43:17 ----D---- C:\WINDOWS\INF
2015-08-15 10:24:02 ----HD---- C:\Program Files\WindowsApps
2015-08-15 10:12:12 ----D---- C:\WINDOWS\CbsTemp
2015-08-15 10:11:57 ----SHD---- C:\System Volume Information
2015-08-15 10:05:19 ----D---- C:\Users\Jakub\AppData\Roaming\Media Player Classic
2015-08-15 09:49:19 ----D---- C:\WINDOWS\system32\catroot2
2015-08-15 09:43:55 ----SHD---- C:\WINDOWS\Installer
2015-08-15 01:07:10 ----D---- C:\WINDOWS\SysWOW64
2015-08-15 01:07:09 ----D---- C:\Temp
2015-08-15 01:05:41 ----D---- C:\WINDOWS\Help
2015-08-15 00:46:09 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-08-15 00:46:06 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-08-15 00:46:06 ----D---- C:\WINDOWS\system32\oobe
2015-08-15 00:46:06 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2015-08-15 00:46:02 ----D---- C:\WINDOWS\system32\cs-CZ
2015-08-15 00:46:02 ----D---- C:\WINDOWS\system32\appraiser
2015-08-15 00:45:58 ----D---- C:\WINDOWS\AppPatch
2015-08-15 00:25:33 ----D---- C:\WINDOWS\system32\MRT
2015-08-15 00:25:22 ----A---- C:\WINDOWS\system32\MRT.exe
2015-08-15 00:19:41 ----RD---- C:\WINDOWS\assembly
2015-08-14 21:10:14 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-14 21:10:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-14 15:45:00 ----D---- C:\ProgramData\LGMOBILEAX
2015-08-14 15:44:46 ----A---- C:\WINDOWS\SYSWOW64\lgAxconfig.ini
2015-08-14 13:52:21 ----A---- C:\WINDOWS\win.ini
2015-08-13 23:56:24 ----D---- C:\Program Files (x86)\Battle.net
2015-08-13 22:06:51 ----D---- C:\Users\Jakub\AppData\Roaming\MiniLyrics
2015-08-13 22:02:58 ----D---- C:\Lyrics
2015-08-10 15:05:29 ----D---- C:\WINDOWS\system32\CatRoot
2015-08-10 15:01:57 ----D---- C:\WINDOWS\SYSWOW64\Adobe
2015-08-10 15:01:46 ----D---- C:\ProgramData\Package Cache
2015-08-10 15:00:54 ----D---- C:\Program Files (x86)\OpenAL
2015-08-10 15:00:54 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2015-08-10 15:00:54 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2015-08-10 15:00:53 ----A---- C:\WINDOWS\SYSWOW64\wrap_oal.dll
2015-08-10 15:00:53 ----A---- C:\WINDOWS\SYSWOW64\OpenAL32.dll
2015-08-10 14:55:33 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2015-08-10 14:41:41 ----D---- C:\WINDOWS\system32\drivers\etc
2015-08-10 14:41:39 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-10 14:41:38 ----D---- C:\Program Files\Internet Explorer
2015-08-10 14:33:49 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2015-08-10 14:22:48 ----D---- C:\Program Files (x86)\IObit
2015-08-10 14:22:11 ----D---- C:\Users\Jakub\AppData\Roaming\Spotify
2015-08-09 21:27:47 ----A---- C:\WINDOWS\M3JP2K.INI
2015-08-06 11:20:24 ----A---- C:\WINDOWS\system32\simptcp.dll
2015-08-06 09:26:10 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-08-06 09:26:08 ----D---- C:\WINDOWS\Provisioning
2015-08-04 10:00:03 ----D---- C:\WINDOWS\rescache
2015-08-04 09:44:57 ----D---- C:\WINDOWS\Logs
2015-08-03 20:33:20 ----D---- C:\Program Files (x86)\foobar2000
2015-08-02 14:11:28 ----D---- C:\WINDOWS\SoftwareDistribution
2015-08-02 03:12:19 ----D---- C:\Users\Jakub\AppData\Roaming\uTorrent
2015-08-01 18:38:15 ----D---- C:\WINDOWS\system32\NDF
2015-08-01 03:39:33 ----SD---- C:\ProgramData\Microsoft
2015-08-01 03:36:03 ----D---- C:\Program Files (x86)\Microsoft SDKs
2015-08-01 03:34:24 ----D---- C:\Program Files\Microsoft SQL Server
2015-08-01 03:32:57 ----D---- C:\Program Files (x86)\Windows Kits
2015-08-01 03:32:21 ----HD---- C:\ProgramData
2015-08-01 03:32:12 ----RD---- C:\Program Files (x86)
2015-08-01 03:31:04 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-08-01 03:28:51 ----RD---- C:\Program Files
2015-08-01 03:13:01 ----D---- C:\WINDOWS\SYSWOW64\1033
2015-08-01 03:08:18 ----D---- C:\Program Files (x86)\Microsoft Help Viewer
2015-08-01 03:00:23 ----D---- C:\WINDOWS\system32\1033
2015-08-01 02:58:46 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2015-08-01 02:58:22 ----D---- C:\Program Files (x86)\Common Files
2015-08-01 02:55:29 ----D---- C:\Program Files\Common Files\microsoft shared
2015-08-01 02:54:08 ----SD---- C:\WINDOWS\system32\Microsoft
2015-08-01 02:50:44 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-08-01 02:28:48 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 12.0
2015-08-01 01:45:57 ----D---- C:\Program Files (x86)\Java
2015-08-01 01:43:30 ----D---- C:\ProgramData\Skype
2015-07-31 20:26:22 ----D---- C:\WINDOWS\ModemLogs
2015-07-31 11:05:01 ----D---- C:\WINDOWS\system32\LogFiles
2015-07-31 11:02:54 ----RD---- C:\Users
2015-07-31 10:25:07 ----D---- C:\WINDOWS\system32\WDI
2015-07-31 10:13:36 ----D---- C:\WINDOWS\SYSWOW64\oobe
2015-07-31 10:13:36 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-07-31 10:13:23 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-07-31 10:13:22 ----D---- C:\WINDOWS\system32\migration
2015-07-31 10:13:22 ----D---- C:\WINDOWS\system32\Dism
2015-07-31 10:13:22 ----D---- C:\WINDOWS\system32\Boot
2015-07-31 10:13:12 ----RD---- C:\WINDOWS\PurchaseDialog
2015-07-31 10:13:11 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-07-31 09:19:28 ----A---- C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-07-31 09:18:52 ----D---- C:\Program Files\Java
2015-07-31 08:49:03 ----D---- C:\WINDOWS\appcompat
2015-07-30 21:28:05 ----D---- C:\Users\Jakub\AppData\Roaming\Zoner
2015-07-30 21:28:04 ----D---- C:\Program Files\Zoner
2015-07-30 21:22:19 ----D---- C:\ProgramData\Microsoft Help
2015-07-30 21:21:25 ----RSD---- C:\WINDOWS\Fonts
2015-07-30 21:09:22 ----D---- C:\WINDOWS\SystemApps
2015-07-30 21:04:48 ----D---- C:\WINDOWS\OCR
2015-07-30 20:54:05 ----RD---- C:\WINDOWS\DevicesFlow
2015-07-30 20:53:40 ----D---- C:\WINDOWS\system32\spool
2015-07-30 20:45:06 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-07-30 20:36:14 ----RD---- C:\WINDOWS\PrintDialog
2015-07-30 20:36:13 ----RD---- C:\WINDOWS\MiracastView
2015-07-30 16:47:12 ----D---- C:\WINDOWS\system32\restore
2015-07-30 16:45:03 ----D---- C:\Program Files\Windows NT
2015-07-30 16:43:43 ----D---- C:\WINDOWS\Registration
2015-07-30 16:40:13 ----RSD---- C:\WINDOWS\Media
2015-07-30 16:34:47 ----D---- C:\WINDOWS\system32\wbem
2015-07-30 16:31:24 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-07-30 16:31:24 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2015-07-30 16:31:24 ----D---- C:\WINDOWS\system32\MUI
2015-07-30 16:31:24 ----D---- C:\WINDOWS\system32\inetsrv
2015-07-30 16:31:18 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2015-07-30 16:31:18 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2015-07-30 16:31:17 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-07-30 16:31:16 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-07-30 16:31:16 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-07-30 16:31:16 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-07-30 16:31:16 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-07-30 16:31:16 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-07-30 16:31:15 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2015-07-30 16:31:15 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2015-07-30 16:31:15 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2015-07-30 16:31:14 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2015-07-30 16:31:14 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2015-07-30 16:31:14 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2015-07-30 16:31:14 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2015-07-30 16:31:14 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-07-30 16:31:13 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-07-30 16:31:12 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-07-30 16:31:10 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-07-30 16:31:10 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-07-30 16:31:09 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2015-07-30 16:31:09 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-07-30 16:31:08 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-07-30 16:31:07 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2015-07-30 16:31:06 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-07-30 16:31:06 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-07-30 16:26:42 ----D---- C:\WINDOWS\zh-tw
2015-07-30 16:26:42 ----D---- C:\WINDOWS\tr
2015-07-30 16:26:42 ----D---- C:\WINDOWS\th
2015-07-30 16:26:42 ----D---- C:\WINDOWS\SYSWOW64\vbox
2015-07-30 16:26:42 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-07-30 16:26:42 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\zh-TW
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\zh-HK
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\zh-CN
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\vbox
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\tr-TR
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\th-TH
2015-07-30 16:26:42 ----D---- C:\WINDOWS\system32\sv-SE
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\sl-SI
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\sk-SK
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\ru-RU
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\ro-RO
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\pt-PT
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\pt-BR
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\pl-PL
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\OEM
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\nl-NL
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\nb-NO
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\lv-LV
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\lt-LT
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\ko-KR
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\ja-JP
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\it-IT
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\hu-HU
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\hr-HR
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\he-IL
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\fr-FR
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\fi-FI
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\et-EE
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\es-ES
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\en-US
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\el-GR
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\de-DE
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\da-DK
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\bg-BG
2015-07-30 16:26:41 ----D---- C:\WINDOWS\system32\ar-SA
2015-07-30 16:26:35 ----D---- C:\WINDOWS\sv
2015-07-30 16:26:35 ----D---- C:\WINDOWS\sl
2015-07-30 16:26:35 ----D---- C:\WINDOWS\sk
2015-07-30 16:26:35 ----D---- C:\WINDOWS\ShellNew
2015-07-30 16:26:35 ----D---- C:\WINDOWS\ru
2015-07-30 16:26:35 ----D---- C:\WINDOWS\ro
2015-07-30 16:26:35 ----D---- C:\WINDOWS\pt-pt
2015-07-30 16:26:35 ----D---- C:\WINDOWS\pt-br
2015-07-30 16:26:34 ----D---- C:\WINDOWS\pl
2015-07-30 16:26:34 ----D---- C:\WINDOWS\no
2015-07-30 16:26:34 ----D---- C:\WINDOWS\nl
2015-07-30 16:26:34 ----D---- C:\WINDOWS\it
2015-07-30 16:26:30 ----D---- C:\WINDOWS\hu
2015-07-30 16:26:30 ----D---- C:\WINDOWS\hr
2015-07-30 16:26:30 ----D---- C:\WINDOWS\he
2015-07-30 16:26:30 ----D---- C:\WINDOWS\fr
2015-07-30 16:26:30 ----D---- C:\WINDOWS\fi
2015-07-30 16:26:30 ----D---- C:\WINDOWS\eu
2015-07-30 16:26:30 ----D---- C:\WINDOWS\es
2015-07-30 16:26:30 ----D---- C:\WINDOWS\en
2015-07-30 16:26:30 ----D---- C:\WINDOWS\el
2015-07-30 16:26:30 ----D---- C:\WINDOWS\de
2015-07-30 16:26:30 ----D---- C:\WINDOWS\da
2015-07-30 16:26:30 ----D---- C:\WINDOWS\cs
2015-07-30 16:26:30 ----D---- C:\WINDOWS\ca
2015-07-30 16:26:30 ----D---- C:\WINDOWS\bg
2015-07-30 16:26:30 ----D---- C:\WINDOWS\ar
2015-07-30 16:26:29 ----D---- C:\WINDOWS\Tasks
2015-07-30 16:26:29 ----D---- C:\Program Files (x86)\Bluetooth Suite
2015-07-30 16:15:00 ----D---- C:\WINDOWS\twain_32
2015-07-30 16:15:00 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-07-30 16:15:00 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-07-30 16:15:00 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-07-30 16:15:00 ----D---- C:\WINDOWS\SYSWOW64\xlive
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\spool
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\sda
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-07-30 16:14:59 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-07-30 16:14:58 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-07-30 16:14:57 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-07-30 16:14:57 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-07-30 16:14:56 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-07-30 16:14:45 ----D---- C:\WINDOWS\system32\IME
2015-07-30 16:14:43 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-07-30 16:13:15 ----D---- C:\WINDOWS\schemas
2015-07-30 16:13:14 ----D---- C:\WINDOWS\PolicyDefinitions
2015-07-30 16:13:08 ----D---- C:\WINDOWS\LiveKernelReports
2015-07-30 16:12:43 ----D---- C:\WINDOWS\ehome
2015-07-30 16:12:20 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2015-07-30 16:12:20 ----D---- C:\Program Files (x86)\Windows Mail
2015-07-30 16:12:17 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-07-30 16:12:14 ----D---- C:\Program Files (x86)\Acer
2015-07-30 16:12:13 ----SHD---- C:\Program Files\Windows Sidebar
2015-07-30 16:12:13 ----D---- C:\Program Files\Windows Mail
2015-07-30 16:12:11 ----D---- C:\Program Files\Microsoft Games
2015-07-30 16:12:11 ----D---- C:\Program Files\DVD Maker
2015-07-30 16:12:10 ----D---- C:\Program Files\Common Files\System
2015-07-30 16:12:10 ----D---- C:\Program Files\Common Files
2015-07-30 16:12:09 ----D---- C:\Program Files\Acer
2015-07-30 16:08:07 ----D---- C:\WINDOWS\system32\Recovery
2015-07-30 16:08:05 ----HD---- C:\WINDOWS\system32\GroupPolicy
2015-07-30 16:01:01 ----D---- C:\WINDOWS\system32\Sysprep
2015-07-30 16:00:31 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-07-28 19:18:09 ----D---- C:\Program Files\Adobe
2015-07-27 11:55:34 ----D---- C:\Program Files (x86)\Adobe
2015-07-27 11:54:09 ----D---- C:\ProgramData\Adobe
2015-07-27 11:52:41 ----D---- C:\Users\Jakub\AppData\Roaming\Adobe
2015-07-25 10:19:22 ----D---- C:\Program Files\CCleaner
2015-07-24 06:21:23 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2015-07-24 06:21:23 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2015-07-24 06:21:14 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2015-07-24 06:21:14 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2015-07-22 13:59:44 ----SHD---- C:\$RECYCLE.BIN

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-08-10 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-08-10 274808]
R0 iaStor;@oem99.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2010-04-13 540696]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-08-11 41592]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-08-10 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-08-13 1048344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-08-10 447944]
R1 dtsoftbus01;@oem15.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-04-10 283064]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-06-12 26528]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2011-09-08 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2011-09-08 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2011-09-08 62776]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-08-10 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-08-10 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-08-10 150672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 Afc;PPdus ASPI Shell; C:\Windows\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 AndnetBus;@oem87.inf,%LGSI.Service.Desc%;LGE Mobile USB Composite Device; C:\WINDOWS\System32\drivers\lgandnetbus64.sys [2015-06-19 37888]
R3 AndNetDiag;@oem126.inf,%Lgsi.Service.Name%;LGE AndroidNet USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgandnetdiag64.sys [2015-06-19 39424]
R3 ANDNetModem;@oem71.inf,%LGSI.Service.Name%;LGE AndroidNet USB Modem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem64.sys [2015-01-26 37376]
R3 athr;@oem74.inf,%ATHR.Service.DispName%;Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athrx.sys [2011-12-16 2768384]
R3 BTATH_BUS;@oem13.inf,%BTATH_BUS.SVCDESC%;Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2011-03-13 28832]
R3 HECIx64;@oem258.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\WINDOWS\System32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-11-27 12311776]
R3 Impcd;Impcd; C:\WINDOWS\System32\drivers\Impcd.sys [2010-02-27 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-08-10 4514008]
R3 IntcDAud;@oem295.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2000-01-01 317440]
R3 k57nd60a;@oem233.inf,%SvcDispName%;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\System32\drivers\k57nd60a.sys [2015-06-12 458960]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-07-30 175104]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-11 11174544]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;@oem309.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2012-02-11 82048]
R3 seehcri;@oem21.inf,%seehcrirf.SvcDesc%;Sony Ericsson seehcri Device Driver; C:\WINDOWS\System32\drivers\seehcri.sys [2012-07-24 34032]
R3 SensorsSimulatorDriver;@oem4.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2015-07-10 214016]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-06-12 34544]
S0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2011-07-27 24456]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S3 andnetadb;ADB Interface DriverNet; C:\WINDOWS\System32\Drivers\lgandnetadb.sys [2014-03-28 31744]
S3 aswTap;@oem171.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\WINDOWS\System32\drivers\aswTap.sys [2014-08-24 44640]
S3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2010-04-06 30088]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-06-12 21712]
S3 ETD;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2010-04-13 135560]
S3 FACAP;facap, FastAccess Video Capture; C:\WINDOWS\system32\DRIVERS\facap.sys [2008-09-24 238848]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 fssfltr;fssfltr; C:\WINDOWS\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 htcnprot;@oem37.inf,%NDISPROT_Desc%;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 HtcVCom32;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys [2010-03-09 121800]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2010-04-06 27016]
S3 ManyCam;ManyCam Virtual Webcam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [2013-11-27 42016]
S3 mcaudrv_simple;ManyCam Virtual Microphone; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [2013-12-06 35232]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 pwdrvio;pwdrvio; \??\C:\WINDOWS\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\WINDOWS\syswow64\pwdspio.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-17 934752]
S3 smsbda;@oem177.inf,%smsbda.name%;DVB-T TV Stick; C:\WINDOWS\system32\drivers\smsbda.sys [2009-09-18 63520]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-08-10 146600]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-04-02 173424]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-01-06 867712]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\syswow64\svchost.exe [2015-07-10 35176]
R2 chromoting;Služba Vzdálené plochy Chrome; C:\Program Files (x86)\Google\Chrome Remote Desktop\44.0.2403.25\remoting_host.exe [2015-05-28 69448]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-07-30 2909472]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-18 268824]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-07-30 26112]
R2 MSSQL$MYMOVIES;SQL Server (MYMOVIES); C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe [2009-08-18 7599616]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2011-06-17 255744]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-07 937776]
R2 OneSyncSvc_Session2;Hostitel synchronizace_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2013-10-17 166912]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\WINDOWS\System32\tcpsvcs.exe [2015-07-10 12288]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-10-20 130024]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2015-07-10 35176]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session2;Data kontaktů_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-19 107848]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-10-09 655624]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-19 107848]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-12 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-08-01 724888]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-07-27 563624]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-12-13 136120]
S4 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]

-----------------EOF-----------------

[Roli]

Zdravím, stiskni klávesy Windows + R do okna Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)
Služba Google Update (gupdatem)
LiveUpdate (LiveUpdateSvc) - IObit

dvojklikem se otevře karta kde nejprve službu zastav tlačítkem Zastavit u položky Typ spouštění vyber Zakázáno a klik na OK.


V Knihovně Plnovače úloh zakaž Google Update bude to tam vícekrát.


Odinstaluj vše od IObitu.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

[kouzelnik3]

Vždycky mě zajímalo, proč mi asi všichni tady vždy zakazují google update a služby týkající se tohoto. :O

__________________________________________________________________


# AdwCleaner v5.000 - Logfile created 17/08/2015 at 15:25:40
# Updated 14/08/2015 by Xplode
# Database : 2015-08-16.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Jakub - KOUZELNIK
# Running from : C:\Users\Jakub\Desktop\adwcleaner_5.000.exe
# Option : Cleaning

***** [ Services ] *****

[-] Service Deleted : swdumon
[-] Service Deleted : mcaudrv_simple
[-] Service Deleted : ManyCam

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\DriverToolkit
[-] Folder Deleted : C:\Program Files (x86)\MiniLyrics
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniLyrics
[-] Folder Deleted : C:\Users\Jakub\AppData\Local\DriverToolkit
[-] Folder Deleted : C:\Users\Jakub\AppData\Local\slimware utilities inc
[-] Folder Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp
[-] Folder Deleted : C:\Users\Jakub\AppData\Roaming\istartsurf
[-] Folder Deleted : C:\Users\Jakub\AppData\Roaming\MiniLyrics

***** [ Files ] *****

[-] File Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eiimolhnbbbdagljikeckdkldgemmmlj
[-] File Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lfmhcpmkbdkbgbmkjoiopeeegenkdikp_0.localstorage
[-] File Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lfmhcpmkbdkbgbmkjoiopeeegenkdikp_0.localstorage-journal
[-] File Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
[-] File Deleted : C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal
[-] File Deleted : C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\3kn9hhma.default\user.js
[-] File Deleted : C:\WINDOWS\Sysnative\drivers\swdumon.sys
[-] File Deleted : C:\WINDOWS\Sysnative\drivers\mcaudrv_x64.sys
[-] File Deleted : C:\WINDOWS\Sysnative\drivers\mcvidrv.sys

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4580AB54-3C2F-4970-9A77-8628FA182F03}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{46B5EE7F-3B6B-4079-A756-5EFC10B1F50B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKCU\Software\DriverToolkit
[-] Key Deleted : HKCU\Software\PRODUCTSETUP
[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKCU\Software\MiniLyrics
[-] Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MiniLyrics
[!] Key Not Deleted : [x64] HKCU\Software\DriverToolkit
[!] Key Not Deleted : [x64] HKCU\Software\PRODUCTSETUP
[!] Key Not Deleted : [x64] HKCU\Software\SlimWare Utilities Inc
[!] Key Not Deleted : [x64] HKCU\Software\MiniLyrics
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-2959019409-2027511932-762451989-1001\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]

***** [ Web browsers ] *****

[-] [C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : genymotion.en.softonic.com
[-] [C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.istartsurf.com/webfavicon.ico

*************************

:: Proxy settings cleared
:: Winsock settings cleared

*************************

C:\AdwCleaner[C1].txt - [5557 octets] - [17/08/2015 15:25:40]
C:\AdwCleaner[S1].txt - [5888 octets] - [17/08/2015 15:20:01]

########## EOF - C:\AdwCleaner[C1].txt - [5683 octets] ##########

[Roli]

Vždycky mě zajímalo, proč mi asi všichni tady vždy zakazují google update a služby týkající se tohoto. :O

Protože ty služby jsou celkem zbytečné, ale hlavní věc proč to dělám je, že ulevíš drahocené RAM.


Dále použij Mbam z mého podpisu a dej mi sem z něj log po smazání.

[kouzelnik3]

Nejsem si jistý, jestli to je ten správný log, ale jiný, co by mohl takový být, tu neni. Ještě tu je protection log.


Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 24.8.2015
Čas skenování: 13:54
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.08.24.03
Databáze rootkitů: v2015.08.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: Jakub

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 595261
Uplynulý čas: 2 hod, 10 min, 56 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 2
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-2959019409-2027511932-762451989-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72D5A3CD-8245-4F17-8931-D8B45B50B5F0}, Do karantény, [267d66a6b9d25adcb0c5109b976de020],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-2959019409-2027511932-762451989-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{74ABF05E-E423-4E8B-A394-DBD030865479}, Do karantény, [dec5cc400883b383c2b32f7c030111ef],

Hodnoty registru: 2
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-2959019409-2027511932-762451989-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72D5A3CD-8245-4F17-8931-D8B45B50B5F0}|AppPath, C:\Users\Jakub\AppData\Local\Tbccint\CT3329621, Do karantény, [267d66a6b9d25adcb0c5109b976de020]
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-2959019409-2027511932-762451989-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{74ABF05E-E423-4E8B-A394-DBD030865479}|AppPath, C:\Users\Jakub\AppData\Local\Tbccint\CT3329621, Do karantény, [dec5cc400883b383c2b32f7c030111ef]

Data registru: 2
PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|CustomizeSearch, http://www.istartsurf.com/web/?type=ds& ... earchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... earchTerms}),Nahrazeno,[d8cb709ca7e4b3833177ada0f90c4ab6]
PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://www.istartsurf.com/web/?type=ds& ... earchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... earchTerms}),Nahrazeno,[851ed933d7b46bcb406894b9768f926e]

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Roli]

Nejsem si jistý, jestli to je ten správný log, ale jiný, co by mohl takový být, tu neni.

Tento je správný

Tímto máme tedy uklizeno, jak se PC chová ?

[kouzelnik3]

PC se zdá býti rychlejší. Chyby windows 10 jako takových ani nemá cenu řešit jakože občas nereaguje kliknutí na start a lištu celkově, když všechno ostatní jede, hádám správně?
Jinak jak jsem napsal, počítač jest rychlejší, plynulejší.

[Roli]

Chyby Win 10 ani jiných verzí (8 a 8,1) opravdu nevyřešíme, pokud je tedy PC jinak v pořádku je to z mé strany vše.

[kouzelnik3]

Vím, vím. To ani nechci řešit chyby Windows 10 respektive 8/8.1. Je to nemožné z Vaší strany.
Pokud je to tedy opravdu vše, tak děkuji za investovaný čas.

[Roli]

............ děkuji za investovaný čas.

Není zač a