možna haveď

Zpráva

Bukvyčak · #1 Příspěvek od **Bukvyčak** » 17 říj 2015 11:17

mam otazku.. pri upgrade na win10 zo staršieho zavireneho windowsu sa prenesu aj viry?

Logfile of random's system information tool 1.10 (written by random/random)
Run by Bianca at 2015-10-17 12:11:07
Microsoft Windows 10 Home
System drive C: has 132 GB (46%) free of 290 GB
Total RAM: 3819 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:11:16, on 17. 10. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files\trend micro\Bianca.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - (no file)
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: AviraBrowserSafety.BrowserSafety - {c3c77255-42c0-499f-b664-6e981a0b1647} - mscoree.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso" UpdateWithCreateOnce "Software\CyberLink\MediaEspresso\6.1"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C3A1707E0D3EEE416B69195A0DAB19A9] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Avira Browser Safety - {d8f67242-b229-4065-95fa-391b077ed6ca} - mscoree.dll (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: abs - {E00957BD-D0E1-4EB9-A025-7743FDC8B27B} - mscoree.dll (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13161 bytes

======Listing Processes======

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\atiesrxx.exe
atieclxx
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\Antivirus\sched.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\Avira\Antivirus\avguard.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
dashost.exe {1cfd8f3c-c77e-45f4-8198408eddf868a6}
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
sihost.exe
C:\WINDOWS\Explorer.EXE

"C:\Program Files (x86)\Avira\Antivirus\avshadow.exe" avshadowcontrol0_000006c4
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca

"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5040.0.971419411\1944924871" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45 --gpu-vendor-id=0x1002 --gpu-device-id=0x9802 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledInitialReceiveWindow128KB/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5040.1.1213201527\872046175" --font-cache-shared-handle=2352 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledInitialReceiveWindow128KB/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5040.2.2012764056\2126570563" --font-cache-shared-handle=2536 /prefetch:673131151
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 616 620 628 8192 624
taskeng.exe {7E740774-ED80-4791-8BF9-00AF1DD468C3}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledInitialReceiveWindow128KB/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5040.7.1936378437\1146392923" --font-cache-shared-handle=4708 /prefetch:673131151
"C:\Users\Bianca\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\1tlmfjwe.default-1442079627585

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobeï¿½ Flashï¿½ Player 19.0.0.185 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobeï¿½ Flashï¿½ Player 19.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-23 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}]
AviraBrowserSafety.BrowserSafety - C:\WINDOWS\system32\mscoree.dll [2015-07-10 396288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-23 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-29 2280232]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-10-29 860040]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-01-27 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2015-07-02 7805120]
"Speech Recognition"=C:\Windows\Speech\Common\sapisvr.exe [2015-07-10 45056]
"GoogleChromeAutoLaunch_C3A1707E0D3EEE416B69195A0DAB19A9"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-10-09 870728]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-03 767176]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-09-28 340336]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-09-18 407920]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-09-18 201584]
"BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2010-11-12 296768]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-12-31 1029200]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-11 439568]
"MDS_Menu"=C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2010-12-10 177448]
"NPSStartup"= []
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-01-20 60712]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2015-09-10 66320]
"avgnt"=C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2015-09-24 782520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-17 17:33:40 ----DC---- C:\WINDOWS\Panther
2015-10-17 17:23:59 ----D---- C:\Windows.old
2015-10-17 17:20:25 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\jscript.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winresume.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winload.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-17 16:57:27 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\msmq
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\BestPractices
2015-10-17 16:57:21 ----D---- C:\Program Files\Reference Assemblies
2015-10-17 16:57:21 ----D---- C:\Program Files\MSBuild
2015-10-17 16:57:21 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-10-17 16:57:21 ----D---- C:\Program Files (x86)\MSBuild
2015-10-17 16:57:21 ----D---- C:\inetpub
2015-10-17 16:54:41 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-10-17 16:54:41 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-10-17 16:54:40 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-10-17 16:54:29 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-10-17 16:54:29 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-10-17 16:54:28 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-10-17 12:11:08 ----D---- C:\Program Files\trend micro
2015-10-17 12:11:07 ----D---- C:\rsit
2015-10-17 11:50:15 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2015-10-17 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\MLS2.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons001b.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\SYSWOW64\NlsData001b.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\system32\MLS2.dll
2015-10-17 11:02:44 ----A---- C:\WINDOWS\system32\NlsLexicons001b.dll
2015-10-17 11:02:43 ----A---- C:\WINDOWS\system32\NlsData001b.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0816.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\NlsData0816.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\MLS6.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\NlsLexicons0816.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\NlsData0816.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\MLS6.dll
2015-10-17 11:01:05 ----D---- C:\ProgramData\ATI
2015-10-17 08:25:33 ----SHD---- C:\ProgramData\Favorites
2015-10-17 08:25:32 ----SHD---- C:\Recovery
2015-10-17 08:20:49 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-10-17 07:47:11 ----SD---- C:\Users\Bianca\AppData\Roaming\Microsoft
2015-10-17 07:45:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-17 07:45:06 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-10-17 07:41:58 ----D---- C:\ProgramData\AMD
2015-10-17 07:41:56 ----D---- C:\Program Files\ATI Technologies
2015-10-17 07:41:23 ----D---- C:\Program Files (x86)\ATI Technologies
2015-10-17 07:41:07 ----D---- C:\ProgramData\Package Cache
2015-10-17 07:40:18 ----D---- C:\Program Files\Synaptics
2015-10-17 07:39:53 ----D---- C:\AMD
2015-10-17 07:39:24 ----D---- C:\Program Files\AMD
2015-10-17 07:35:39 ----D---- C:\WINDOWS\Prefetch
2015-10-17 07:34:55 ----ASH---- C:\swapfile.sys
2015-10-16 20:35:29 ----ASH---- C:\pagefile.sys
2015-10-16 20:35:20 ----ASH---- C:\hiberfil.sys
2015-10-16 14:57:05 ----D---- C:\Program Files\CCleaner
2015-10-16 14:51:12 ----D---- C:\AdwCleaner
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-core-file-l1-2-0.dll

======List of files/folders modified in the last 1 month======

2015-10-17 17:23:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-10-17 17:23:17 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-17 17:23:16 ----SD---- C:\WINDOWS\system32\F12
2015-10-17 17:23:16 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-17 17:23:16 ----D---- C:\WINDOWS\system32\Boot
2015-10-17 17:23:16 ----D---- C:\WINDOWS\system32\appraiser
2015-10-17 17:23:16 ----D---- C:\WINDOWS\Provisioning
2015-10-17 17:23:15 ----D---- C:\WINDOWS\L2Schemas
2015-10-17 17:23:15 ----D---- C:\WINDOWS\AppPatch
2015-10-17 17:19:56 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-10-17 16:57:27 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\inetsrv
2015-10-17 16:57:01 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2015-10-17 16:57:01 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2015-10-17 16:56:53 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2015-10-17 16:56:53 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2015-10-17 16:56:52 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-10-17 16:56:51 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2015-10-17 16:56:50 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-10-17 16:56:48 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-10-17 16:56:42 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-10-17 16:56:42 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-10-17 16:56:39 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-10-17 16:56:37 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2015-10-17 16:56:37 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-10-17 16:56:33 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2015-10-17 16:56:30 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-10-17 16:56:30 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-10-17 12:11:11 ----D---- C:\WINDOWS\Temp
2015-10-17 12:11:10 ----D---- C:\WINDOWS\AppReadiness
2015-10-17 12:11:08 ----RD---- C:\Program Files
2015-10-17 12:10:07 ----D---- C:\WINDOWS\System32
2015-10-17 12:10:07 ----D---- C:\WINDOWS\INF
2015-10-17 12:09:20 ----HD---- C:\Program Files\WindowsApps
2015-10-17 12:04:36 ----D---- C:\ProgramData\clear.fi
2015-10-17 12:01:16 ----D---- C:\ProgramData\AVAST Software
2015-10-17 12:01:03 ----D---- C:\Windows
2015-10-17 12:00:58 ----D---- C:\WINDOWS\system32\drivers
2015-10-17 12:00:22 ----D---- C:\WINDOWS\system32\sru
2015-10-17 11:59:46 ----D---- C:\Users\Bianca\AppData\Roaming\uTorrent
2015-10-17 11:52:54 ----D---- C:\WINDOWS\system32\Tasks
2015-10-17 11:50:39 ----SHD---- C:\System Volume Information
2015-10-17 11:50:15 ----D---- C:\WINDOWS\SysWOW64
2015-10-17 11:47:27 ----D---- C:\WINDOWS\system32\restore
2015-10-17 11:19:55 ----D---- C:\WINDOWS\system32\config
2015-10-17 11:09:16 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-17 11:03:18 ----D---- C:\WINDOWS\OCR
2015-10-17 11:03:14 ----D---- C:\WINDOWS\WinSxS
2015-10-17 11:01:05 ----HD---- C:\ProgramData
2015-10-17 11:01:00 ----D---- C:\ProgramData\boost_interprocess
2015-10-17 11:00:47 ----D---- C:\WINDOWS\CbsTemp
2015-10-17 10:59:20 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-17 10:13:40 ----D---- C:\WINDOWS\Logs
2015-10-17 08:36:14 ----D---- C:\WINDOWS\rescache
2015-10-17 08:24:21 ----D---- C:\WINDOWS\Registration
2015-10-17 08:24:06 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-17 08:20:36 ----D---- C:\WINDOWS\system32\drivers\etc
2015-10-17 08:20:11 ----D---- C:\WINDOWS\system32\LogFiles
2015-10-17 08:20:02 ----RSD---- C:\WINDOWS\Media
2015-10-17 08:08:38 ----D---- C:\WINDOWS\SYSWOW64\vbox
2015-10-17 08:08:38 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-10-17 08:08:37 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2015-10-17 08:08:37 ----D---- C:\WINDOWS\system32\vbox
2015-10-17 08:08:35 ----D---- C:\WINDOWS\system32\OEM
2015-10-17 08:08:35 ----D---- C:\WINDOWS\system32\NDF
2015-10-17 08:08:34 ----SHD---- C:\WINDOWS\Installer
2015-10-17 08:08:34 ----D---- C:\WINDOWS\ShellNew
2015-10-17 08:08:34 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-17 08:08:32 ----RSD---- C:\WINDOWS\Fonts
2015-10-17 08:08:32 ----D---- C:\WINDOWS\en
2015-10-17 08:08:31 ----RD---- C:\Program Files (x86)
2015-10-17 08:08:31 ----D---- C:\WINDOWS\Tasks
2015-10-17 07:54:43 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-10-17 07:54:43 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\Samsung_USB_Drivers
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-10-17 07:54:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\zh-TW
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\zh-HK
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\zh-CN
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\tr-TR
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\sv-SE
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\SPReview
2015-10-17 07:54:27 ----D---- C:\WINDOWS\system32\ru-RU
2015-10-17 07:54:26 ----D---- C:\WINDOWS\system32\pt-PT
2015-10-17 07:54:26 ----D---- C:\WINDOWS\system32\pt-BR
2015-10-17 07:54:26 ----D---- C:\WINDOWS\system32\pl-PL
2015-10-17 07:54:25 ----D---- C:\WINDOWS\system32\oobe
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\nl-NL
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\nb-NO
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\migration
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\ko-KR
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\ja-JP
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\it-IT
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\IME
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\hu-HU
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\fr-FR
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\fi-FI
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\EventProviders
2015-10-17 07:54:21 ----D---- C:\WINDOWS\system32\es-ES
2015-10-17 07:54:20 ----D---- C:\WINDOWS\system32\en-US
2015-10-17 07:54:19 ----D---- C:\WINDOWS\system32\el-GR
2015-10-17 07:54:18 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-10-17 07:54:18 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-10-17 07:54:18 ----D---- C:\WINDOWS\system32\de-DE
2015-10-17 07:54:17 ----D---- C:\WINDOWS\system32\da-DK
2015-10-17 07:54:17 ----D---- C:\WINDOWS\system32\cs-CZ
2015-10-17 07:52:07 ----D---- C:\WINDOWS\system32\%LOCALAPPDATA%
2015-10-17 07:52:00 ----D---- C:\WINDOWS\schemas
2015-10-17 07:52:00 ----D---- C:\WINDOWS\PolicyDefinitions
2015-10-17 07:51:56 ----D---- C:\WINDOWS\LiveKernelReports
2015-10-17 07:51:37 ----D---- C:\WINDOWS\IME
2015-10-17 07:51:35 ----D---- C:\WINDOWS\ehome
2015-10-17 07:51:34 ----D---- C:\WINDOWS\DigitalLocker
2015-10-17 07:51:33 ----RD---- C:\WINDOWS\assembly
2015-10-17 07:51:31 ----RD---- C:\Users
2015-10-17 07:51:29 ----SD---- C:\ProgramData\Microsoft
2015-10-17 07:51:14 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2015-10-17 07:51:13 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-10-17 07:51:13 ----D---- C:\Program Files (x86)\Microsoft
2015-10-17 07:50:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-10-17 07:50:58 ----D---- C:\Program Files (x86)\Common Files
2015-10-17 07:50:53 ----D---- C:\Program Files (x86)\Acer
2015-10-17 07:50:51 ----SHD---- C:\Program Files\Windows Sidebar
2015-10-17 07:50:51 ----D---- C:\Program Files\Microsoft Games
2015-10-17 07:50:50 ----D---- C:\Program Files\Internet Explorer
2015-10-17 07:50:49 ----D---- C:\Program Files\DVD Maker
2015-10-17 07:50:49 ----D---- C:\Program Files\CONEXANT
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files\microsoft shared
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files
2015-10-17 07:49:55 ----D---- C:\WINDOWS\system32\Recovery
2015-10-17 07:49:50 ----HD---- C:\WINDOWS\system32\GroupPolicy
2015-10-17 07:45:17 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-10-17 07:44:33 ----D---- C:\WINDOWS\system32\Sysprep
2015-10-17 07:38:54 ----D---- C:\WINDOWS\system32\catroot2
2015-10-17 06:09:09 ----HD---- C:\$Windows.~BT
2015-10-16 15:25:54 ----D---- C:\Program Files (x86)\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2015-10-17 148632]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2015-08-06 28600]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2010-12-02 22912]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2010-12-02 20328]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2010-12-02 62584]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2015-10-17 137800]
R2 avnetflt;avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [2015-10-17 74440]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdiox64;@oem6.inf,%amdio.SvcDesc%;AMD IO Driver; C:\WINDOWS\System32\drivers\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-08-20 21632992]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-08-20 673776]
R3 athr;@oem2.inf,%ATHR.Service.DispName%;Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athrx.sys [2010-05-11 2229608]
R3 AtiHDAudioService;@oem15.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2015-05-28 102912]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-06-18 129224]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-10-17 175104]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 SynTP;@oem5.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-07-29 1383472]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-03-26 16448]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-08-20 255472]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2015-08-03 344064]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [2015-09-24 461672]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\Antivirus\sched.exe [2015-09-24 461672]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 77128]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2015-09-10 240872]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-12-31 310864]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2010-09-28 172912]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-10-29 868224]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-10-17 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2010-11-12 257344]
R2 OneSyncSvc_Session1;Sync Host_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [2015-09-24 932912]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [2015-10-14 1147720]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-01-22 655624]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-01-27 643880]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-13 114800]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Contact Data_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;User Data Storage_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-06-19 50352]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 17 říj 2015 11:23

Pokud jste viry před upg neodstranil, zcela určïtě tam budou. Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Bukvyčak · #3 Příspěvek od **Bukvyčak** » 17 říj 2015 11:44

mam tu log adwcleaneru čo som použil pred upgradom ...

# AdwCleaner v5.013 - Logfile created 16/10/2015 at 15:09:21
# Updated 09/10/2015 by Xplode
# Database : 2015-10-16.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Bianca - BIANCA-PC
# Running from : C:\Users\Bianca\Downloads\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : MyWebSearchService
[!] Service Not Deleted : MyWebSearchService

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Conduit
[-] Folder Deleted : C:\Program Files (x86)\File Type Assistant
[-] Folder Deleted : C:\Program Files (x86)\Free Offers from Freeze.com
[-] Folder Deleted : C:\Program Files (x86)\FunWebProducts
[-] Folder Deleted : C:\Program Files (x86)\MyWebSearch
[-] Folder Deleted : C:\Program Files (x86)\ShoppingReport2
[-] Folder Deleted : C:\Program Files (x86)\uTorrentControl2
[!] Folder Not Deleted : C:\Program Files (x86)\ShoppingReport2
[!] Folder Not Deleted : C:\Program Files (x86)\MyWebSearch
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[-] Folder Deleted : C:\Users\Bianca\AppData\Local\Conduit
[-] Folder Deleted : C:\Users\Bianca\AppData\Local\PackageAware
[-] Folder Deleted : C:\Users\Bianca\AppData\LocalLow\Conduit
[-] Folder Deleted : C:\Users\Bianca\AppData\LocalLow\FunWebProducts
[-] Folder Deleted : C:\Users\Bianca\AppData\LocalLow\MyWebSearch
[-] Folder Deleted : C:\Users\Bianca\AppData\LocalLow\ShoppingReport2
[-] Folder Deleted : C:\Users\Bianca\AppData\LocalLow\uTorrentControl2
[!] Folder Not Deleted : C:\Users\Bianca\AppData\LocalLow\ShoppingReport2
[!] Folder Not Deleted : C:\Users\Bianca\AppData\LocalLow\MyWebSearch
[-] Folder Deleted : C:\Users\Bianca\AppData\Roaming\eType
[-] Folder Deleted : C:\Users\Bianca\AppData\Roaming\YourFileDownloader

***** [ Files ] *****

[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo.xml
[-] File Deleted : C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.azlyrics.com_0.localstorage
[-] File Deleted : C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.azlyrics.com_0.localstorage-journal
[-] File Deleted : C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
[-] File Deleted : C:\Windows\SysWOW64\conduitEngine.tmp
[-] File Deleted : C:\Windows\SysWOW64\f3PSSavr.scr

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

[-] Task Deleted : YourFile DownloaderUpdate
[-] Task Deleted : YourFile DownloaderUpdate

***** [ Registry ] *****

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]
[-] Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.2
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl
[-] Key Deleted : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.MultipleButton
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.MultipleButton.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ThirdPartyInstaller
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ThirdPartyInstaller.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.UrlAlertButton
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.UrlAlertButton.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
[-] Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows Media\Wmsdk\Sources [F3PopularScreenSavers]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform [FunWebProducts]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform [FunWebProducts]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@mywebsearch.com/Plugin
[!] Key Not Deleted : HKLM\SOFTWARE\MozillaPlugins\@MyWebSearch.com/Plugin
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ChatSessionPlugin.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.MultipleButton
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.MultipleButton.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ThirdPartyInstaller
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.ThirdPartyInstaller.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.UrlAlertButton
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearch.UrlAlertButton.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1
[!] Value Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2776682
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2790392
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67FA02C4-AB30-4E77-A640-78EE8EC8673B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{799391D3-EB86-4BAC-9BD3-CBFEA58A0E15}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{819FFE22-35C7-4925-8CDA-4E0E2DB94302}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{67FA02C4-AB30-4e77-A640-78EE8EC8673B}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{799391D3-EB86-4bac-9BD3-CBFEA58A0E15}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{819FFE22-35C7-4925-8CDA-4E0E2DB94302}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8FFDF636-0D87-4B33-B9E9-79A53F6E1DAE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8FFDF636-0D87-4B33-B9E9-79A53F6E1DAE}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44CF-8957-5838F569A31D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578B9-7132-4A7A-80E4-30EE31099E03}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}
[!] Key Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44cf-8957-5838F569A31D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{07B18EA9-A523-4961-B6BB-170DE4475CCA}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00A6FAF6-072E-44CF-8957-5838F569A31D}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
[!] Value Not Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00A6FAF6-072E-44cf-8957-5838F569A31D}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467E-B8D4-7786EDA79AE0}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
[-] Key Deleted : HKCU\Software\Bitberry
[-] Key Deleted : HKCU\Software\MyWebSearch
[-] Key Deleted : HKCU\Software\ShoppingReport2
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\SweetIM
[-] Key Deleted : HKCU\Software\YourFileDownloader
[!] Key Not Deleted : HKCU\Software\ShoppingReport2
[!] Key Not Deleted : HKCU\Software\MyWebSearch
[-] Key Deleted : HKCU\Software\AppDataLow\Toolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Fun Web Products
[-] Key Deleted : HKCU\Software\AppDataLow\Software\MyWebSearch
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2
[!] Key Not Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2
[!] Key Not Deleted : HKCU\Software\AppDataLow\Software\MyWebSearch
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\Driver-Soft
[-] Key Deleted : HKLM\SOFTWARE\FocusInteractive
[-] Key Deleted : HKLM\SOFTWARE\Freeze.com
[-] Key Deleted : HKLM\SOFTWARE\Fun Web Products
[-] Key Deleted : HKLM\SOFTWARE\MyWebSearch
[-] Key Deleted : HKLM\SOFTWARE\ShoppingReport2
[-] Key Deleted : HKLM\SOFTWARE\SweetIM
[-] Key Deleted : HKLM\SOFTWARE\Uniblue
[-] Key Deleted : HKLM\SOFTWARE\YourFileDownloader
[-] Key Deleted : HKLM\SOFTWARE\W3I
[!] Key Not Deleted : HKLM\SOFTWARE\ShoppingReport2
[!] Key Not Deleted : HKLM\SOFTWARE\MyWebSearch
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mywebsearch bar uninstall
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trusted Software Assistant_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
[!] Key Not Deleted : [x64] HKCU\Software\Bitberry
[!] Key Not Deleted : [x64] HKCU\Software\MyWebSearch
[!] Key Not Deleted : [x64] HKCU\Software\ShoppingReport2
[!] Key Not Deleted : [x64] HKCU\Software\Softonic
[!] Key Not Deleted : [x64] HKCU\Software\SweetIM
[!] Key Not Deleted : [x64] HKCU\Software\YourFileDownloader
[!] Key Not Deleted : [x64] HKCU\Software\ShoppingReport2
[!] Key Not Deleted : [x64] HKCU\Software\MyWebSearch
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Toolbar
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Software\ConduitSearchScopes
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Software\Fun Web Products
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Software\MyWebSearch
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Software\ShoppingReport2
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Software\ShoppingReport2
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\AppDataLow\Software\MyWebSearch
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\Microsoft\Internet Explorer\Main [Start Page]
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
[!] Key Not Deleted : HKU\S-1-5-21-3942200914-2533848132-3547735176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

***** [ Web browsers ] *****

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [32844 bytes] ##########

aktualny je prazdny

# AdwCleaner v5.013 - Logfile created 17/10/2015 at 12:35:50
# Updated 09/10/2015 by Xplode
# Database : 2015-10-16.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Bianca - BIANCA-PC
# Running from : C:\Users\Bianca\Downloads\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

***** [ Web browsers ] *****

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [637 bytes] ##########

#4 Příspěvek od **Rudy** » 17 říj 2015 16:25

Dejte nový log RSIT.

Bukvyčak · #5 Příspěvek od **Bukvyčak** » 19 říj 2015 17:35

Logfile of random's system information tool 1.10 (written by random/random)
Run by Bianca at 2015-10-19 18:31:06
Microsoft Windows 10 Home
System drive C: has 130 GB (45%) free of 290 GB
Total RAM: 3819 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:31:18, on 19. 10. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
C:\Program Files\trend micro\Bianca.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - (no file)
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: AviraBrowserSafety.BrowserSafety - {c3c77255-42c0-499f-b664-6e981a0b1647} - mscoree.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso" UpdateWithCreateOnce "Software\CyberLink\MediaEspresso\6.1"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C3A1707E0D3EEE416B69195A0DAB19A9] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Avira Browser Safety - {d8f67242-b229-4065-95fa-391b077ed6ca} - mscoree.dll (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: abs - {E00957BD-D0E1-4EB9-A025-7743FDC8B27B} - mscoree.dll (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13161 bytes

======Listing Processes======

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
atieclxx
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\Antivirus\sched.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Avira\Antivirus\avguard.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {c5945dbe-6ab7-4743-9dd4de048cbcc600}
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
sihost.exe
C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Avira\Antivirus\avshadow.exe" avshadowcontrol0_00000644
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5372.0.275325306\939646601" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45 --gpu-vendor-id=0x1002 --gpu-device-id=0x9802 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.2.558378409\2122310498" --font-cache-shared-handle=3044 /prefetch:673131151
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.4.1056855446\1837556929" --font-cache-shared-handle=4340 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.8.1675974808\1141559622" --font-cache-shared-handle=5348 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.10.1934153056\240203405" --font-cache-shared-handle=5664 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.12.524379059\186277647" --font-cache-shared-handle=3832 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.13.1613617308\582615026" --font-cache-shared-handle=2936 /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5372.18.379093881\299524017" --ppapi-flash-args=enable_hw_video_decode=1 --lang=en-US --ignored=" --type=renderer " /prefetch:-632637702
C:\WINDOWS\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\WINDOWS\system32\wwahost.exe" -ServerName:Microsoft.ZuneMusic.wwa
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="5372.32.1486258121\1851340794" --font-cache-shared-handle=8452 /prefetch:673131151
"C:\Users\Bianca\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\1tlmfjwe.default-1442079627585

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-23 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}]
AviraBrowserSafety.BrowserSafety - C:\WINDOWS\system32\mscoree.dll [2015-07-10 396288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-23 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-29 2280232]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-10-29 860040]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-01-27 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2015-07-02 7805120]
"Speech Recognition"=C:\Windows\Speech\Common\sapisvr.exe [2015-07-10 45056]
"GoogleChromeAutoLaunch_C3A1707E0D3EEE416B69195A0DAB19A9"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-10-09 870728]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-03 767176]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-09-28 340336]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-09-18 407920]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-09-18 201584]
"BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2010-11-12 296768]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-12-31 1029200]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-11 439568]
"MDS_Menu"=C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2010-12-10 177448]
"NPSStartup"= []
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-01-20 60712]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2015-09-10 66320]
"avgnt"=C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2015-09-24 782520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2015-10-18 20:47:49 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2015-10-18 20:30:15 ----D---- C:\WINDOWS\system32\SleepStudy
2015-10-17 17:33:40 ----DC---- C:\WINDOWS\Panther
2015-10-17 17:23:59 ----D---- C:\Windows.old
2015-10-17 17:20:25 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\jscript.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winresume.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winload.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-17 16:57:27 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\msmq
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\BestPractices
2015-10-17 16:57:21 ----D---- C:\Program Files\Reference Assemblies
2015-10-17 16:57:21 ----D---- C:\Program Files\MSBuild
2015-10-17 16:57:21 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-10-17 16:57:21 ----D---- C:\Program Files (x86)\MSBuild
2015-10-17 16:57:21 ----D---- C:\inetpub
2015-10-17 16:54:41 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-10-17 16:54:41 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-10-17 16:54:40 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-10-17 16:54:29 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-10-17 16:54:29 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-10-17 16:54:28 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-10-17 12:11:08 ----D---- C:\Program Files\trend micro
2015-10-17 12:11:07 ----D---- C:\rsit
2015-10-17 11:50:15 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2015-10-17 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\MLS2.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons001b.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\SYSWOW64\NlsData001b.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\system32\MLS2.dll
2015-10-17 11:02:44 ----A---- C:\WINDOWS\system32\NlsLexicons001b.dll
2015-10-17 11:02:43 ----A---- C:\WINDOWS\system32\NlsData001b.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0816.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\NlsData0816.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\MLS6.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\NlsLexicons0816.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\NlsData0816.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\MLS6.dll
2015-10-17 11:01:05 ----D---- C:\ProgramData\ATI
2015-10-17 08:25:33 ----SHD---- C:\ProgramData\Favorites
2015-10-17 08:25:32 ----SHD---- C:\Recovery
2015-10-17 08:20:49 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-10-17 07:47:11 ----SD---- C:\Users\Bianca\AppData\Roaming\Microsoft
2015-10-17 07:45:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-17 07:45:06 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-10-17 07:41:58 ----D---- C:\ProgramData\AMD
2015-10-17 07:41:56 ----D---- C:\Program Files\ATI Technologies
2015-10-17 07:41:23 ----D---- C:\Program Files (x86)\ATI Technologies
2015-10-17 07:41:07 ----D---- C:\ProgramData\Package Cache
2015-10-17 07:40:18 ----D---- C:\Program Files\Synaptics
2015-10-17 07:39:53 ----D---- C:\AMD
2015-10-17 07:39:24 ----D---- C:\Program Files\AMD
2015-10-17 07:35:39 ----D---- C:\WINDOWS\Prefetch
2015-10-17 07:34:55 ----ASH---- C:\swapfile.sys
2015-10-16 20:35:29 ----ASH---- C:\pagefile.sys
2015-10-16 20:35:20 ----ASH---- C:\hiberfil.sys
2015-10-16 14:57:05 ----D---- C:\Program Files\CCleaner
2015-10-16 14:51:12 ----D---- C:\AdwCleaner
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-core-file-l1-2-0.dll
2015-09-10 08:58:25 ----HD---- C:\$Windows.~BT
2015-09-10 07:43:07 ----D---- C:\ProgramData\Microsoft OneDrive
2015-09-10 07:42:33 ----D---- C:\Logs
2015-09-10 07:35:16 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-09-10 07:19:57 ----D---- C:\WINDOWS\ShellNew
2015-09-10 07:19:57 ----D---- C:\Program Files\Windows Journal
2015-09-10 07:09:23 ----D---- C:\WINDOWS\OCR
2015-09-10 07:08:55 ----D---- C:\WINDOWS\SKB
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Editing.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-09-10 07:08:33 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\wpccpl.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\wmp.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\MFPlay.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\mfplat.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\LocationPermissions.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\ieproxy.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\bcd.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-09-10 07:08:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Cred.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BlockedShutdown.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.BioFeedback.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\srumsvc.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\efscore.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\wfdprov.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\WcnApi.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\uxtheme.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\twinui.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\systemcpl.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\stobject.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\shacct.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\SensorDataService.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\sendmail.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\ntshrui.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\notepad.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\LockAppHost.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\fdWCN.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\dafWCN.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\d3d9.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\ConsoleLogon.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\comdlg32.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\calc.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\authui.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2015-09-10 07:08:29 ----A---- C:\WINDOWS\notepad.exe
2015-09-10 07:08:29 ----A---- C:\WINDOWS\explorer.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\usocore.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\TabSvc.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\sppcomapi.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\spbcd.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\reseteng.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\ReInfo.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\ReAgent.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\rdbui.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\iertutil.dll

Bukvyčak · #6 Příspěvek od **Bukvyčak** » 19 říj 2015 17:35

2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\hal.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\GamePanel.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\efscore.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\dosvc.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\diagtrack_win.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\ClipUp.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\bcdedit.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\bcdboot.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\aitstatic.exe
2015-09-10 07:08:28 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Import.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\VoiceActivationManager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\SensorsNativeApi.V2.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\hmkd.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\AppContracts.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wintrust.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wininit.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\winhttp.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\Windows.Media.Import.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\wer.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\VoiceActivationManager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\unenrollhook.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\tquery.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\srumsvc.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\omadmprc.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\OmaDmAgent.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\NotificationControllerPS.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\MusNotification.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\mssrch.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\mssprxy.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\msi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\LicenseManagerApi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\InputService.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\hmkd.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\dxgi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\dwmapi.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\coredpus.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\ci.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\AppContracts.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-09-10 07:08:25 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-09-10 07:08:24 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2015-09-10 07:08:24 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-09-10 07:08:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2015-09-10 07:05:14 ----D---- C:\WINDOWS\SYSWOW64\winrm
2015-09-10 07:05:14 ----D---- C:\WINDOWS\SYSWOW64\WCN
2015-09-10 07:05:14 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2015-09-10 07:05:14 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2015-09-10 07:05:14 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2015-09-10 07:05:12 ----D---- C:\WINDOWS\SYSWOW64\en
2015-09-10 07:05:12 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2015-09-10 07:05:12 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2015-09-10 07:05:12 ----D---- C:\WINDOWS\SYSWOW64\0409
2015-09-10 07:05:12 ----D---- C:\WINDOWS\system32\winrm
2015-09-10 07:05:12 ----D---- C:\WINDOWS\system32\WCN
2015-09-10 07:05:12 ----D---- C:\WINDOWS\system32\slmgr
2015-09-10 07:05:12 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2015-09-10 07:05:11 ----D---- C:\WINDOWS\system32\en
2015-09-10 07:05:10 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-09-10 07:05:10 ----D---- C:\WINDOWS\system32\0409
2015-09-09 14:29:07 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.exe
2015-09-09 14:28:41 ----A---- C:\WINDOWS\SYSWOW64\mshtmlmedia.dll
2015-09-09 14:28:21 ----A---- C:\WINDOWS\system32\mshtmlmedia.dll
2015-09-09 14:20:29 ----A---- C:\WINDOWS\system32\UtcResources.dll
2015-09-09 14:01:49 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-09-01 15:55:25 ----D---- C:\Users\Bianca\AppData\Roaming\Avira
2015-09-01 15:46:54 ----A---- C:\WINDOWS\system32\drivers\avnetflt.sys
2015-09-01 15:46:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2015-09-01 15:46:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2015-09-01 15:46:52 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2015-09-01 15:38:22 ----D---- C:\Program Files (x86)\Avira
2015-09-01 15:38:20 ----D---- C:\ProgramData\Avira
2015-08-20 21:38:06 ----A---- C:\WINDOWS\system32\amdocl64.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\mantleaxl32.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\mantle32.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\hsa-thunk.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\detoured.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\atioglxx.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\atiglpxx.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\atigktxx.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\SYSWOW64\amdocl.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\mantleaxl64.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\mantle64.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\hsa-thunk64.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\drivers\atikmpag.sys
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\drivers\atikmdag.sys
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\detoured.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\coinst_15.20.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\clinfo.exe
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\atitmm64.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\ATIODE.exe
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\atio6axx.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\atimuixx.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\atiglpxx.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\aticaldd64.dll
2015-08-20 21:38:04 ----A---- C:\WINDOWS\system32\amdocl12cl64.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\atieah32.exe
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\aticalrt.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\aticaldd.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\aticalcl.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\atiadlxy.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\atiadlxx.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\amdocl12cl.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\SYSWOW64\amdocl_as32.exe
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atig6txx.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atig6pxx.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atiesrxx.exe
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atieclxx.exe
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atieah64.exe
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atidemgy.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\aticalrt64.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\aticalcl64.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2015-08-20 21:38:02 ----A---- C:\WINDOWS\system32\amdocl_as64.exe
2015-08-20 21:38:00 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\SYSWOW64\amdocl_ld32.exe
2015-08-20 21:38:00 ----A---- C:\WINDOWS\SYSWOW64\amdmmcl.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\SYSWOW64\amdmantle32.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\SYSWOW64\amdhdl32.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\SYSWOW64\amdgfxinfo32.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\system32\OpenCL.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\system32\amdocl_ld64.exe
2015-08-20 21:38:00 ----A---- C:\WINDOWS\system32\amdmmcl6.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\system32\amdmantle64.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\system32\amdhdl64.dll
2015-08-20 21:38:00 ----A---- C:\WINDOWS\system32\amdgfxinfo64.dll
2015-08-20 21:32:22 ----A---- C:\WINDOWS\SYSWOW64\atiumdva.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\atiuxpag.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\atiumdag.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\atiu9pag.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\atimpc32.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\atidxx32.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\aticfx32.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\SYSWOW64\amdpcom32.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\atiuxp64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\atiumd6a.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\atiumd64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\atiu9p64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\atimpc64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\atidxx64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\aticfx64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\amdpcom64.dll
2015-08-20 21:32:20 ----A---- C:\WINDOWS\system32\amdmiracast.dll
2015-08-11 10:26:33 ----D---- C:\WINDOWS\SYSWOW64\vbox
2015-08-11 10:26:33 ----D---- C:\WINDOWS\system32\vbox
2015-08-03 19:41:16 ----A---- C:\WINDOWS\SYSWOW64\ativvsvl.dat
2015-08-03 19:41:16 ----A---- C:\WINDOWS\SYSWOW64\ativvsva.dat
2015-08-03 19:41:16 ----A---- C:\WINDOWS\system32\ativvsvl.dat
2015-08-03 19:41:16 ----A---- C:\WINDOWS\system32\ativvsva.dat
2015-07-31 00:47:42 ----D---- C:\WINDOWS\en-US
2015-07-31 00:47:42 ----D---- C:\WINDOWS\DigitalLocker
2015-07-31 00:43:52 ----A---- C:\WINDOWS\system32\perfi009.dat
2015-07-31 00:43:52 ----A---- C:\WINDOWS\system32\perfh009.dat
2015-07-31 00:43:52 ----A---- C:\WINDOWS\system32\perfd009.dat
2015-07-31 00:43:52 ----A---- C:\WINDOWS\system32\perfc009.dat
2015-07-31 00:43:43 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-07-31 00:42:17 ----A---- C:\WINDOWS\SYSWOW64\NOISE.DAT
2015-07-31 00:42:17 ----A---- C:\WINDOWS\SYSWOW64\msclmd.dll
2015-07-31 00:42:16 ----A---- C:\WINDOWS\SYSWOW64\dssec.dat
2015-07-31 00:42:13 ----A---- C:\WINDOWS\system32\NOISE.DAT
2015-07-31 00:42:13 ----A---- C:\WINDOWS\system32\msclmd.dll
2015-07-31 00:42:12 ----A---- C:\WINDOWS\system32\dssec.dat
2015-07-31 00:42:10 ----RASH---- C:\WINDOWS\fonts\StaticCache.dat
2015-07-31 00:42:10 ----A---- C:\WINDOWS\fonts\desktop.ini
2015-07-31 00:42:08 ----ASH---- C:\Program Files\desktop.ini
2015-07-31 00:42:08 ----ASH---- C:\Program Files (x86)\desktop.ini
2015-07-31 00:42:06 ----SHD---- C:\WINDOWS\Installer
2015-07-31 00:42:06 ----SHD---- C:\Program Files\Windows Sidebar
2015-07-31 00:42:06 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\SYSWOW64\Nui
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\SYSWOW64\Configuration
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\system32\Nui
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\system32\F12
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\system32\dsc
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\system32\DiagSvcs
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\system32\Configuration
2015-07-31 00:42:06 ----SD---- C:\WINDOWS\Downloaded Program Files
2015-07-31 00:42:06 ----SD---- C:\ProgramData\Microsoft
2015-07-31 00:42:06 ----SD---- C:\Program Files\WindowsPowerShell
2015-07-31 00:42:06 ----SD---- C:\Program Files (x86)\WindowsPowerShell
2015-07-31 00:42:06 ----RSD---- C:\WINDOWS\Media
2015-07-31 00:42:06 ----RSD---- C:\WINDOWS\Fonts
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\PurchaseDialog
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\PrintDialog
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\Offline Web Pages
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\MiracastView
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\DevicesFlow
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\DesktopTileResources
2015-07-31 00:42:06 ----RD---- C:\WINDOWS\assembly
2015-07-31 00:42:06 ----HD---- C:\WINDOWS\ELAMBKUP
2015-07-31 00:42:06 ----HD---- C:\ProgramData
2015-07-31 00:42:06 ----HD---- C:\Program Files\WindowsApps
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Web
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Vss
2015-07-31 00:42:06 ----D---- C:\WINDOWS\twain_32
2015-07-31 00:42:06 ----D---- C:\WINDOWS\tracing
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Temp
2015-07-31 00:42:06 ----D---- C:\WINDOWS\TAPI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\WindowsPowerShell
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\wbem
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Tasks
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sru
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-CS
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sppui
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\spp
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Speech_OneCore
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Speech
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\SMI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\setup
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\restore
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Recovery
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\RasToast
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\ras
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\oobe
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\networklist
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\NDF
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\MsDtc
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\MSDRM
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Licenses
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Ipmi
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\InstallShield
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\icsxml
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicyUsers
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\FxsTmp
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\DriverStore
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\config
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Com
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\catroot
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\Bthprops
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SYSWOW64\AppLocker
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SystemResources
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SystemApps
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\zh-TW
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\zh-HK
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\zh-CN
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\WinMetadata
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\winevt
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\wfp
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\WDI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\wbem
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\uk-UA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\tr-TR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\th-TH
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Tasks
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sv-SE
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sru
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sppui
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\spp
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\spool
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Speech_OneCore
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Speech
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sl-SI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\sk-SK
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\setup
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ru-RU
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ro-RO
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\restore
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Recovery
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\RasToast
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ras
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\pt-PT
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\pt-BR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ProximityToast
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\PointOfService
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\pl-PL
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\oobe
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\nl-NL
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\networklist
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\NDF
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\nb-NO
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\MUI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\MsDtc
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\MSDRM
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\migwiz
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\MailContactsCalendarSync
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Macromed
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\lv-LV
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\lt-LT
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\LogFiles
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Licenses
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ko-KR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ja-JP
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\it-IT
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Ipmi
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\InputMethod
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\inetsrv
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\IME
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\icsxml
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ias
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\hu-HU
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\hr-HR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\he-IL
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\FxsTmp
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\fr-FR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\fr-CA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\fi-FI
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\et-EE
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\es-MX
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\es-ES
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\en-US
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\en-GB
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\el-GR
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\drivers\etc
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\de-DE
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\da-DK
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\cs-CZ
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Com
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\catroot2
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Bthprops
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\Boot
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\bg-BG
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\ar-SA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\appraiser
2015-07-31 00:42:06 ----D---- C:\WINDOWS\system32\AppLocker
2015-07-31 00:42:06 ----D---- C:\WINDOWS\System
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Speech_OneCore
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Speech
2015-07-31 00:42:06 ----D---- C:\WINDOWS\schemas
2015-07-31 00:42:06 ----D---- C:\WINDOWS\SchCache
2015-07-31 00:42:06 ----D---- C:\WINDOWS\security
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Resources
2015-07-31 00:42:06 ----D---- C:\WINDOWS\rescache
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Registration
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Provisioning
2015-07-31 00:42:06 ----D---- C:\WINDOWS\PolicyDefinitions
2015-07-31 00:42:06 ----D---- C:\WINDOWS\PLA
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Performance
2015-07-31 00:42:06 ----D---- C:\WINDOWS\ModemLogs
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Migration
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Microsoft.NET
2015-07-31 00:42:06 ----D---- C:\WINDOWS\LiveKernelReports
2015-07-31 00:42:06 ----D---- C:\WINDOWS\L2Schemas
2015-07-31 00:42:06 ----D---- C:\WINDOWS\InputMethod
2015-07-31 00:42:06 ----D---- C:\WINDOWS\InfusedApps
2015-07-31 00:42:06 ----D---- C:\WINDOWS\IME
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Help
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Globalization
2015-07-31 00:42:06 ----D---- C:\WINDOWS\diagnostics
2015-07-31 00:42:06 ----D---- C:\WINDOWS\debug
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Cursors
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Branding
2015-07-31 00:42:06 ----D---- C:\WINDOWS\Boot
2015-07-31 00:42:06 ----D---- C:\WINDOWS\AppReadiness
2015-07-31 00:42:06 ----D---- C:\WINDOWS\AppPatch
2015-07-31 00:42:06 ----D---- C:\WINDOWS\appcompat
2015-07-31 00:42:06 ----D---- C:\WINDOWS\addins
2015-07-31 00:42:06 ----D---- C:\ProgramData\USOPrivate
2015-07-31 00:42:06 ----D---- C:\ProgramData\SoftwareDistribution
2015-07-31 00:42:06 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-07-31 00:42:06 ----D---- C:\ProgramData\Comms
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows Portable Devices
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows Photo Viewer
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows NT
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows Multimedia Platform
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows Media Player
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows Mail
2015-07-31 00:42:06 ----D---- C:\Program Files\Windows Defender
2015-07-31 00:42:06 ----D---- C:\Program Files\Internet Explorer
2015-07-31 00:42:06 ----D---- C:\Program Files\Common Files\System
2015-07-31 00:42:06 ----D---- C:\Program Files\Common Files\Services
2015-07-31 00:42:06 ----D---- C:\Program Files\Common Files\microsoft shared
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows Portable Devices
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows NT
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows Media Player
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows Mail
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Windows Defender
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-07-31 00:42:06 ----D---- C:\Program Files (x86)\Internet Explorer
2015-07-31 00:42:06 ----D---- C:\PerfLogs
2015-07-31 00:41:46 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-07-31 00:41:45 ----D---- C:\WINDOWS\system32\drivers
2015-07-31 00:40:33 ----D---- C:\WINDOWS\INF
2015-07-31 00:25:26 ----D---- C:\WINDOWS\CbsTemp
2015-07-30 23:53:14 ----D---- C:\ProgramData\USOShared
2015-07-30 23:52:28 ----HD---- C:\Program Files\Uninstall Information
2015-07-30 23:51:49 ----SHD---- C:\ProgramData\Templates
2015-07-30 23:51:49 ----SHD---- C:\ProgramData\Start Menu
2015-07-30 23:51:49 ----SHD---- C:\ProgramData\Documents
2015-07-30 23:51:49 ----SHD---- C:\ProgramData\Desktop
2015-07-30 23:51:49 ----SHD---- C:\ProgramData\Application Data
2015-07-30 23:51:49 ----SHD---- C:\Documents and Settings
2015-07-30 23:50:14 ----AS---- C:\WINDOWS\bootstat.dat
2015-07-30 23:50:08 ----D---- C:\WINDOWS\Setup
2015-07-30 23:49:54 ----D---- C:\WINDOWS\ServiceProfiles
2015-07-30 23:49:45 ----SD---- C:\WINDOWS\system32\Microsoft
2015-07-30 23:49:34 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT

======List of files/folders modified in the last 3 months======

2015-10-19 17:03:38 ----D---- C:\WINDOWS\System32
2015-10-19 17:01:28 ----D---- C:\ProgramData\clear.fi
2015-10-18 20:47:49 ----D---- C:\WINDOWS\SysWOW64
2015-10-18 20:32:11 ----D---- C:\WINDOWS\system32\config
2015-10-18 19:45:17 ----D---- C:\ProgramData\Microsoft Help
2015-10-18 19:44:22 ----D---- C:\WINDOWS\system32\MRT
2015-10-17 16:57:01 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2015-10-17 16:57:01 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2015-10-17 16:56:53 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2015-10-17 16:56:53 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2015-10-17 16:56:52 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-10-17 16:56:51 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2015-10-17 16:56:50 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-10-17 16:56:48 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-10-17 16:56:42 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-10-17 16:56:42 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-10-17 16:56:39 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-10-17 16:56:37 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2015-10-17 16:56:37 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-10-17 16:56:33 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2015-10-17 16:56:30 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-10-17 16:56:30 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-10-17 13:06:11 ----A---- C:\WINDOWS\system32\MRT.exe
2015-10-17 13:05:57 ----D---- C:\WINDOWS\WinSxS
2015-10-17 13:00:35 ----D---- C:\WINDOWS\Logs
2015-10-17 12:11:08 ----RD---- C:\Program Files
2015-10-17 12:01:16 ----D---- C:\ProgramData\AVAST Software
2015-10-17 12:01:03 ----D---- C:\Windows
2015-10-17 11:59:46 ----D---- C:\Users\Bianca\AppData\Roaming\uTorrent
2015-10-17 11:50:39 ----SHD---- C:\System Volume Information
2015-10-17 11:09:16 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-17 11:01:00 ----D---- C:\ProgramData\boost_interprocess
2015-10-17 10:59:20 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-17 08:24:06 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-17 08:08:37 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2015-10-17 08:08:35 ----D---- C:\WINDOWS\system32\OEM
2015-10-17 08:08:32 ----D---- C:\WINDOWS\en
2015-10-17 08:08:31 ----RD---- C:\Program Files (x86)
2015-10-17 08:08:31 ----D---- C:\WINDOWS\Tasks
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\Samsung_USB_Drivers
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\SPReview
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\migration
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\EventProviders
2015-10-17 07:54:18 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-10-17 07:52:07 ----D---- C:\WINDOWS\system32\%LOCALAPPDATA%
2015-10-17 07:51:35 ----D---- C:\WINDOWS\ehome
2015-10-17 07:51:31 ----RD---- C:\Users
2015-10-17 07:51:13 ----D---- C:\Program Files (x86)\Microsoft
2015-10-17 07:50:58 ----D---- C:\Program Files (x86)\Common Files
2015-10-17 07:50:53 ----D---- C:\Program Files (x86)\Acer
2015-10-17 07:50:51 ----D---- C:\Program Files\Microsoft Games
2015-10-17 07:50:49 ----D---- C:\Program Files\DVD Maker
2015-10-17 07:50:49 ----D---- C:\Program Files\CONEXANT
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files
2015-10-17 07:49:50 ----HD---- C:\WINDOWS\system32\GroupPolicy
2015-10-17 07:44:33 ----D---- C:\WINDOWS\system32\Sysprep
2015-10-16 15:25:54 ----D---- C:\Program Files (x86)\Opera
2015-09-10 07:20:02 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-09-10 07:20:00 ----D---- C:\WINDOWS\system32\Dism
2015-09-10 07:19:32 ----A---- C:\WINDOWS\system32\umrdp.dll
2015-09-10 07:19:31 ----A---- C:\WINDOWS\SYSWOW64\InkAnalysis.dll
2015-09-10 07:19:31 ----A---- C:\WINDOWS\system32\mblctr.exe
2015-09-10 07:19:30 ----A---- C:\WINDOWS\system32\SensorsCpl.dll
2015-09-10 07:19:30 ----A---- C:\WINDOWS\system32\RotMgr.dll
2015-09-10 07:19:29 ----A---- C:\WINDOWS\system32\hwrreg.exe
2015-09-10 07:19:29 ----A---- C:\WINDOWS\system32\hwrcomp.exe
2015-09-10 07:19:27 ----A---- C:\WINDOWS\SYSWOW64\rdpendp.dll
2015-09-10 07:19:26 ----A---- C:\WINDOWS\SYSWOW64\SensorsCpl.dll
2015-09-10 07:19:25 ----A---- C:\WINDOWS\system32\sensrsvc.dll
2015-09-10 07:19:25 ----A---- C:\WINDOWS\system32\SensorCustomAdbAlgorithm.dll
2015-09-10 07:19:23 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2015-09-10 07:19:22 ----A---- C:\WINDOWS\system32\SensorsClassExtension.dll
2015-09-10 07:19:17 ----A---- C:\WINDOWS\system32\rdpclip.exe
2015-09-10 07:19:13 ----A---- C:\WINDOWS\SYSWOW64\rfxvmt.dll
2015-09-10 07:19:09 ----A---- C:\WINDOWS\system32\SensorPerformanceEvents.dll
2015-09-10 07:19:09 ----A---- C:\WINDOWS\system32\rdpinput.exe
2015-09-10 07:19:09 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2015-09-10 07:19:08 ----A---- C:\WINDOWS\system32\rdpudd.dll
2015-09-10 07:19:08 ----A---- C:\WINDOWS\system32\dfdts.dll
2015-09-10 07:19:03 ----A---- C:\WINDOWS\system32\StikyNot.exe
2015-09-10 07:19:03 ----A---- C:\WINDOWS\system32\SNTSearch.dll
2015-09-10 07:19:03 ----A---- C:\WINDOWS\system32\rdpendp.dll
2015-09-10 07:18:50 ----A---- C:\WINDOWS\system32\SnippingTool.exe
2015-09-10 07:18:50 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2015-09-10 07:18:49 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2015-09-10 07:18:49 ----A---- C:\WINDOWS\system32\inetppui.dll
2015-09-10 07:18:49 ----A---- C:\WINDOWS\system32\inetpp.dll
2015-09-10 07:18:48 ----A---- C:\WINDOWS\system32\InkAnalysis.dll
2015-09-10 07:18:47 ----A---- C:\WINDOWS\system32\DFDWiz.exe
2015-09-10 07:08:54 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-09-10 07:08:54 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-09-10 07:08:54 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-09-10 07:08:53 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2015-09-10 07:08:53 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2015-09-10 07:08:15 ----A---- C:\WINDOWS\system32\jnwmon.dll
2015-09-10 07:05:10 ----D---- C:\WINDOWS\servicing
2015-09-09 13:53:45 ----D---- C:\Users\Bianca\AppData\Roaming\Skype
2015-08-13 13:10:39 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-13 13:10:39 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-10 10:57:07 ----SHD---- C:\$Recycle.Bin
2015-07-31 00:42:17 ----D---- C:\WINDOWS\SYSWOW64\AdvancedInstallers
2015-07-31 00:42:14 ----D---- C:\WINDOWS\system32\AdvancedInstallers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2015-10-17 148632]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2015-08-06 28600]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2010-12-02 22912]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2010-12-02 20328]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2010-12-02 62584]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2015-10-17 137800]
R2 avnetflt;avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [2015-10-17 74440]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdiox64;@oem6.inf,%amdio.SvcDesc%;AMD IO Driver; C:\WINDOWS\System32\drivers\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-08-20 21632992]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-08-20 673776]
R3 athr;@oem2.inf,%ATHR.Service.DispName%;Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athrx.sys [2010-05-11 2229608]
R3 AtiHDAudioService;@oem15.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2015-05-28 102912]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-06-18 129224]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-10-17 175104]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 SynTP;@oem5.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-07-29 1383472]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752]
S3 RSUSBSTOR;@oem4.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-03-26 16448]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-08-20 255472]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2015-08-03 344064]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [2015-09-24 461672]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\Antivirus\sched.exe [2015-09-24 461672]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 77128]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2015-09-10 240872]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-12-31 310864]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2010-09-28 172912]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-10-29 868224]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-10-17 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2010-11-12 257344]
R2 OneSyncSvc_Session1;Sync Host_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [2015-09-24 932912]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [2015-10-14 1147720]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-18 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-01-22 655624]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-01-27 643880]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-13 114800]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Contact Data_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;User Data Storage_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-06-19 50352]

-----------------EOF-----------------

#7 Příspěvek od **Rudy** » 19 říj 2015 17:47

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]/64

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Bukvyčak · #8 Příspěvek od **Bukvyčak** » 19 říj 2015 18:20

All processes killed
========== FILES ==========
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c3c77255-42c0-499f-b664-6e981a0b1647}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Bianca
->Temp folder emptied: 86088660 bytes
->Temporary Internet Files folder emptied: 21399047 bytes
->Java cache emptied: 588298168 bytes
->FireFox cache emptied: 6828381 bytes
->Google Chrome cache emptied: 365893078 bytes
->Apple Safari cache emptied: 4582400 bytes
->Flash cache emptied: 57388 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56468 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default.migrated

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 24878200 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1,047.00 mb

[EMPTYFLASH]

User: Administrator

User: All Users

User: Bianca
->Flash cache emptied: 0 bytes

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Default.migrated

User: Public

Total Flash Files Cleaned = 0.00 mb

OTM by OldTimer - Version 3.1.21.0 log created on 10192015_190549

Files moved on Reboot...
C:\Users\Bianca\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll moved successfully.
File C:\Users\Bianca\AppData\Local\Temp\etilqs_ctKXT1XaKNs8QcY not found!
C:\Users\Bianca\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0 moved successfully.
C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1 moved successfully.
C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2 moved successfully.
C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3 moved successfully.
C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Cache\index moved successfully.
File move failed. C:\WINDOWS\temp\dsiwmis.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Bukvyčak · #9 Příspěvek od **Bukvyčak** » 19 říj 2015 18:20

Logfile of random's system information tool 1.10 (written by random/random)
Run by Bianca at 2015-10-19 19:19:02
Microsoft Windows 10 Home
System drive C: has 131 GB (45%) free of 290 GB
Total RAM: 3819 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:19:07, on 19. 10. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files\trend micro\Bianca.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - (no file)
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso" UpdateWithCreateOnce "Software\CyberLink\MediaEspresso\6.1"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C3A1707E0D3EEE416B69195A0DAB19A9] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Avira Browser Safety - {d8f67242-b229-4065-95fa-391b077ed6ca} - mscoree.dll (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: abs - {E00957BD-D0E1-4EB9-A025-7743FDC8B27B} - mscoree.dll (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13047 bytes

======Listing Processes======

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
atieclxx
"C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\Antivirus\sched.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Avira\Antivirus\avguard.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
dashost.exe {0f949495-2668-4bc8-89e827f8a1ea5656}
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskeng.exe {3FC77BF0-98A5-4155-A6BF-914FE914EA21}
sihost.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Avira\Antivirus\avshadow.exe" avshadowcontrol0_00000648
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"
"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"

"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4072.0.263563785\410293426" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45 --gpu-vendor-id=0x1002 --gpu-device-id=0x9802 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=15.200.1062.1004 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4072.2.2027808716\487401654" --font-cache-shared-handle=2900 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4072.5.55660495\1594309509" --font-cache-shared-handle=3748 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4072.7.1964803824\1756771966" --font-cache-shared-handle=5008 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4072.8.88160845\26861022" --font-cache-shared-handle=2280 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4072.9.2123558868\908097876" --font-cache-shared-handle=2192 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4072.10.2087686348\1761662891" --font-cache-shared-handle=3392 /prefetch:673131151
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16464_none_116100d161f6ab1d\TiWorker.exe -Embedding
"C:\Users\Bianca\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\1tlmfjwe.default-1442079627585

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-23 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-23 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-29 2280232]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-10-29 860040]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-01-27 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2015-07-02 7805120]
"Speech Recognition"=C:\Windows\Speech\Common\sapisvr.exe [2015-07-10 45056]
"GoogleChromeAutoLaunch_C3A1707E0D3EEE416B69195A0DAB19A9"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-10-09 870728]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-03 767176]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-09-28 340336]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-09-18 407920]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-09-18 201584]
"BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2010-11-12 296768]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-12-31 1029200]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-11 439568]
"MDS_Menu"=C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2010-12-10 177448]
"NPSStartup"= []
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-01-20 60712]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2015-09-10 66320]
"avgnt"=C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2015-09-24 782520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-19 19:05:49 ----D---- C:\_OTM
2015-10-18 20:47:49 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2015-10-18 20:30:15 ----D---- C:\WINDOWS\system32\SleepStudy
2015-10-17 17:33:40 ----DC---- C:\WINDOWS\Panther
2015-10-17 17:23:59 ----D---- C:\Windows.old
2015-10-17 17:20:25 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-17 17:20:23 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-17 17:20:22 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\jscript.dll
2015-10-17 17:20:19 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-17 17:20:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-17 17:20:17 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-17 17:19:59 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winresume.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\winload.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-17 17:19:58 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-17 17:19:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-17 17:19:56 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-17 16:57:27 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\msmq
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\BestPractices
2015-10-17 16:57:21 ----D---- C:\Program Files\Reference Assemblies
2015-10-17 16:57:21 ----D---- C:\Program Files\MSBuild
2015-10-17 16:57:21 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-10-17 16:57:21 ----D---- C:\Program Files (x86)\MSBuild
2015-10-17 16:57:21 ----D---- C:\inetpub
2015-10-17 16:54:41 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-10-17 16:54:41 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-10-17 16:54:40 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-10-17 16:54:29 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-10-17 16:54:29 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-10-17 16:54:28 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-10-17 12:11:08 ----D---- C:\Program Files\trend micro
2015-10-17 12:11:07 ----D---- C:\rsit
2015-10-17 11:50:15 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2015-10-17 11:02:46 ----A---- C:\WINDOWS\SYSWOW64\MLS2.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons001b.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\SYSWOW64\NlsData001b.dll
2015-10-17 11:02:45 ----A---- C:\WINDOWS\system32\MLS2.dll
2015-10-17 11:02:44 ----A---- C:\WINDOWS\system32\NlsLexicons001b.dll
2015-10-17 11:02:43 ----A---- C:\WINDOWS\system32\NlsData001b.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0816.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\NlsData0816.dll
2015-10-17 11:02:38 ----A---- C:\WINDOWS\SYSWOW64\MLS6.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\NlsLexicons0816.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\NlsData0816.dll
2015-10-17 11:02:37 ----A---- C:\WINDOWS\system32\MLS6.dll
2015-10-17 11:01:05 ----D---- C:\ProgramData\ATI
2015-10-17 08:25:33 ----SHD---- C:\ProgramData\Favorites
2015-10-17 08:25:32 ----SHD---- C:\Recovery
2015-10-17 08:20:49 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-10-17 07:47:11 ----SD---- C:\Users\Bianca\AppData\Roaming\Microsoft
2015-10-17 07:45:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-17 07:45:06 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-10-17 07:41:58 ----D---- C:\ProgramData\AMD
2015-10-17 07:41:56 ----D---- C:\Program Files\ATI Technologies
2015-10-17 07:41:23 ----D---- C:\Program Files (x86)\ATI Technologies
2015-10-17 07:41:07 ----D---- C:\ProgramData\Package Cache
2015-10-17 07:40:18 ----D---- C:\Program Files\Synaptics
2015-10-17 07:39:53 ----D---- C:\AMD
2015-10-17 07:39:24 ----D---- C:\Program Files\AMD
2015-10-17 07:35:39 ----D---- C:\WINDOWS\Prefetch
2015-10-17 07:34:55 ----ASH---- C:\swapfile.sys
2015-10-16 20:35:29 ----ASH---- C:\pagefile.sys
2015-10-16 20:35:20 ----ASH---- C:\hiberfil.sys
2015-10-16 14:57:05 ----D---- C:\Program Files\CCleaner
2015-10-16 14:51:12 ----D---- C:\AdwCleaner
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 17:45:44 ----A---- C:\WINDOWS\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 17:45:43 ----A---- C:\WINDOWS\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 17:45:42 ----A---- C:\WINDOWS\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 17:45:41 ----A---- C:\WINDOWS\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 17:45:40 ----A---- C:\WINDOWS\system32\api-ms-win-core-file-l1-2-0.dll

======List of files/folders modified in the last 1 month======

2015-10-19 19:18:51 ----D---- C:\WINDOWS\Temp
2015-10-19 19:17:54 ----D---- C:\WINDOWS\System32
2015-10-19 19:17:54 ----D---- C:\WINDOWS\INF
2015-10-19 19:16:12 ----D---- C:\ProgramData\clear.fi
2015-10-19 19:10:18 ----D---- C:\WINDOWS\system32\sru
2015-10-19 19:08:37 ----D---- C:\WINDOWS\SysWOW64
2015-10-19 19:05:51 ----D---- C:\WINDOWS\Tasks
2015-10-19 18:35:29 ----D---- C:\WINDOWS\system32\drivers
2015-10-19 18:35:20 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-10-19 17:10:27 ----D---- C:\WINDOWS\AppReadiness
2015-10-19 09:20:19 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-19 09:11:40 ----RD---- C:\WINDOWS\assembly
2015-10-19 07:34:49 ----D---- C:\WINDOWS\system32\LogFiles
2015-10-18 20:32:11 ----D---- C:\WINDOWS\system32\config
2015-10-18 20:06:20 ----HD---- C:\Program Files\WindowsApps
2015-10-18 19:45:30 ----SHD---- C:\WINDOWS\Installer
2015-10-18 19:45:17 ----D---- C:\ProgramData\Microsoft Help
2015-10-18 19:44:22 ----D---- C:\WINDOWS\system32\MRT
2015-10-18 19:37:50 ----D---- C:\WINDOWS\appcompat
2015-10-18 01:12:49 ----D---- C:\WINDOWS\system32\WDI
2015-10-17 17:23:17 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-10-17 17:23:17 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-17 17:23:16 ----SD---- C:\WINDOWS\system32\F12
2015-10-17 17:23:16 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-17 17:23:16 ----D---- C:\WINDOWS\system32\Boot
2015-10-17 17:23:16 ----D---- C:\WINDOWS\system32\appraiser
2015-10-17 17:23:16 ----D---- C:\WINDOWS\Provisioning
2015-10-17 17:23:15 ----D---- C:\WINDOWS\L2Schemas
2015-10-17 17:23:15 ----D---- C:\WINDOWS\AppPatch
2015-10-17 16:57:27 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2015-10-17 16:57:27 ----D---- C:\WINDOWS\system32\inetsrv
2015-10-17 16:57:01 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2015-10-17 16:57:01 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-10-17 16:56:58 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2015-10-17 16:56:54 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2015-10-17 16:56:53 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2015-10-17 16:56:53 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2015-10-17 16:56:52 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-10-17 16:56:51 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2015-10-17 16:56:50 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-10-17 16:56:48 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-10-17 16:56:42 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-10-17 16:56:42 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-10-17 16:56:39 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-10-17 16:56:37 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2015-10-17 16:56:37 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-10-17 16:56:33 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2015-10-17 16:56:30 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-10-17 16:56:30 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-10-17 13:06:17 ----D---- C:\WINDOWS\debug
2015-10-17 13:06:11 ----A---- C:\WINDOWS\system32\MRT.exe
2015-10-17 13:05:58 ----D---- C:\WINDOWS\CbsTemp
2015-10-17 13:05:57 ----D---- C:\WINDOWS\WinSxS
2015-10-17 13:00:35 ----D---- C:\WINDOWS\Logs
2015-10-17 12:11:08 ----RD---- C:\Program Files
2015-10-17 12:01:16 ----D---- C:\ProgramData\AVAST Software
2015-10-17 12:01:03 ----D---- C:\Windows
2015-10-17 11:59:46 ----D---- C:\Users\Bianca\AppData\Roaming\uTorrent
2015-10-17 11:52:54 ----D---- C:\WINDOWS\system32\Tasks
2015-10-17 11:50:39 ----SHD---- C:\System Volume Information
2015-10-17 11:47:27 ----D---- C:\WINDOWS\system32\restore
2015-10-17 11:09:16 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-17 11:03:18 ----D---- C:\WINDOWS\OCR
2015-10-17 11:01:05 ----HD---- C:\ProgramData
2015-10-17 11:01:00 ----D---- C:\ProgramData\boost_interprocess
2015-10-17 10:59:20 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-17 08:36:14 ----D---- C:\WINDOWS\rescache
2015-10-17 08:24:21 ----D---- C:\WINDOWS\Registration
2015-10-17 08:24:06 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-17 08:20:36 ----D---- C:\WINDOWS\system32\drivers\etc
2015-10-17 08:20:02 ----RSD---- C:\WINDOWS\Media
2015-10-17 08:08:38 ----D---- C:\WINDOWS\SYSWOW64\vbox
2015-10-17 08:08:38 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-10-17 08:08:37 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2015-10-17 08:08:37 ----D---- C:\WINDOWS\system32\vbox
2015-10-17 08:08:35 ----D---- C:\WINDOWS\system32\OEM
2015-10-17 08:08:35 ----D---- C:\WINDOWS\system32\NDF
2015-10-17 08:08:34 ----D---- C:\WINDOWS\ShellNew
2015-10-17 08:08:32 ----RSD---- C:\WINDOWS\Fonts
2015-10-17 08:08:32 ----D---- C:\WINDOWS\en
2015-10-17 08:08:31 ----RD---- C:\Program Files (x86)
2015-10-17 07:54:43 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2015-10-17 07:54:43 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2015-10-17 07:54:42 ----D---- C:\WINDOWS\SYSWOW64\Samsung_USB_Drivers
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2015-10-17 07:54:41 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2015-10-17 07:54:40 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2015-10-17 07:54:39 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2015-10-17 07:54:38 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2015-10-17 07:54:37 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\zh-TW
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\zh-HK
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\zh-CN
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\tr-TR
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\sv-SE
2015-10-17 07:54:32 ----D---- C:\WINDOWS\system32\SPReview
2015-10-17 07:54:27 ----D---- C:\WINDOWS\system32\ru-RU
2015-10-17 07:54:26 ----D---- C:\WINDOWS\system32\pt-PT
2015-10-17 07:54:26 ----D---- C:\WINDOWS\system32\pt-BR
2015-10-17 07:54:26 ----D---- C:\WINDOWS\system32\pl-PL
2015-10-17 07:54:25 ----D---- C:\WINDOWS\system32\oobe
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\nl-NL
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\nb-NO
2015-10-17 07:54:24 ----D---- C:\WINDOWS\system32\migration
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\ko-KR
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\ja-JP
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\it-IT
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\IME
2015-10-17 07:54:23 ----D---- C:\WINDOWS\system32\hu-HU
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\fr-FR
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\fi-FI
2015-10-17 07:54:22 ----D---- C:\WINDOWS\system32\EventProviders
2015-10-17 07:54:21 ----D---- C:\WINDOWS\system32\es-ES
2015-10-17 07:54:20 ----D---- C:\WINDOWS\system32\en-US
2015-10-17 07:54:19 ----D---- C:\WINDOWS\system32\el-GR
2015-10-17 07:54:18 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-10-17 07:54:18 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-10-17 07:54:18 ----D---- C:\WINDOWS\system32\de-DE
2015-10-17 07:54:17 ----D---- C:\WINDOWS\system32\da-DK
2015-10-17 07:54:17 ----D---- C:\WINDOWS\system32\cs-CZ
2015-10-17 07:52:07 ----D---- C:\WINDOWS\system32\%LOCALAPPDATA%
2015-10-17 07:52:00 ----D---- C:\WINDOWS\schemas
2015-10-17 07:52:00 ----D---- C:\WINDOWS\PolicyDefinitions
2015-10-17 07:51:56 ----D---- C:\WINDOWS\LiveKernelReports
2015-10-17 07:51:37 ----D---- C:\WINDOWS\IME
2015-10-17 07:51:35 ----D---- C:\WINDOWS\ehome
2015-10-17 07:51:34 ----D---- C:\WINDOWS\DigitalLocker
2015-10-17 07:51:31 ----RD---- C:\Users
2015-10-17 07:51:29 ----SD---- C:\ProgramData\Microsoft
2015-10-17 07:51:14 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2015-10-17 07:51:13 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-10-17 07:51:13 ----D---- C:\Program Files (x86)\Microsoft
2015-10-17 07:50:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-10-17 07:50:58 ----D---- C:\Program Files (x86)\Common Files
2015-10-17 07:50:53 ----D---- C:\Program Files (x86)\Acer
2015-10-17 07:50:51 ----SHD---- C:\Program Files\Windows Sidebar
2015-10-17 07:50:51 ----D---- C:\Program Files\Microsoft Games
2015-10-17 07:50:50 ----D---- C:\Program Files\Internet Explorer
2015-10-17 07:50:49 ----D---- C:\Program Files\DVD Maker
2015-10-17 07:50:49 ----D---- C:\Program Files\CONEXANT
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files\microsoft shared
2015-10-17 07:50:49 ----D---- C:\Program Files\Common Files
2015-10-17 07:49:55 ----D---- C:\WINDOWS\system32\Recovery
2015-10-17 07:49:50 ----HD---- C:\WINDOWS\system32\GroupPolicy
2015-10-17 07:45:17 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-10-17 07:44:33 ----D---- C:\WINDOWS\system32\Sysprep
2015-10-17 07:38:54 ----D---- C:\WINDOWS\system32\catroot2
2015-10-17 06:09:09 ----HD---- C:\$Windows.~BT
2015-10-16 15:25:54 ----D---- C:\Program Files (x86)\Opera
2015-10-02 19:36:41 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2015-10-17 148632]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2015-08-06 28600]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2010-12-02 22912]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2010-12-02 20328]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2010-12-02 62584]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2015-10-17 137800]
R2 avnetflt;avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [2015-10-17 74440]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 amdiox64;@oem6.inf,%amdio.SvcDesc%;AMD IO Driver; C:\WINDOWS\System32\drivers\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-08-20 21632992]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-08-20 673776]
R3 athr;@oem2.inf,%ATHR.Service.DispName%;Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athrx.sys [2010-05-11 2229608]
R3 AtiHDAudioService;@oem15.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2015-05-28 102912]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2015-06-18 129224]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-10-17 175104]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 SynTP;@oem5.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-07-29 1383472]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752]
S3 RSUSBSTOR;@oem4.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-03-26 16448]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-08-20 255472]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2015-08-03 344064]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [2015-09-24 461672]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\Antivirus\sched.exe [2015-09-24 461672]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 77128]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-12-31 310864]
R2 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2010-09-28 172912]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-10-29 868224]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-10-17 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2010-11-12 257344]
R2 OneSyncSvc_Session1;Sync Host_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [2015-09-24 932912]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [2015-10-14 1147720]
S2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2015-09-10 240872]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-18 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-01-22 655624]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-18 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-01-27 643880]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-13 114800]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Contact Data_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;User Data Storage_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-06-19 50352]

-----------------EOF-----------------

#10 Příspěvek od **Rudy** » 19 říj 2015 18:29

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Jak se teď PC chová?

VIRY.CZ

možna haveď

možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď

Re: možna haveď