W10 preventivka

Zpráva

lebka75 · #1 Příspěvek od **lebka75** » 18 říj 2015 10:57

zdravim, tak jsem take presel na W10 prosim o preventivku jestli je vse ok. Zatim pouze obas problem pri nacitani videii, kdy to pise nejakou chybu scriptu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by VladaS75 at 2015-10-18 11:54:25
Microsoft Windows 10 Home
System drive C: has 137 GB (76%) free of 181 GB
Total RAM: 3978 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:54:29, on 18. 10. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\VladaS75.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={862FA8BC ... 2015-02-24 11:15:59&v=4.1.0.411&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [abDocsDllLoader] C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [AcerPortal] "C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" startup
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: 1Password - {35BA58F0-BE4F-4DB5-B6D7-4A593C4B7951} - (no file)
O9 - Extra 'Tools' menuitem: 1Password - {35BA58F0-BE4F-4DB5-B6D7-4A593C4B7951} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: Intel(R) Technology Access Software Asset Manager (Intel(R) TA SAM) - Unknown owner - C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe
O23 - Service: Intel(R) Technology Access Legacy CS Loader - Intel(R) Corporation - C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe
O23 - Service: Intel(R) Technology Access Service (Intel(R) TechnologyAccessService) - Intel(R) Corporation - C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10703 bytes

======Listing Processes======

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9160b169-285b-4a0c-89e8-e4aee69c82b0 -SystemEventPortName:HostProcess-53756a8f-3977-4f9a-8a42-d214b45146a0 -IoCancelEventPortName:HostProcess-cb9c4964-72f6-41b5-8e1f-d1f28f9ba149 -NonStateChangingEventPortName:HostProcess-f265d760-8ecb-4c15-9f3e-3dc2485534f4 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d3c14e3f-d088-4c7d-b943-5136975b0814 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
dashost.exe {dcc72e6d-2b0f-489f-a05e0793b3cec492}
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe"
"C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe"
"C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe"
"C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\Acer\AOP Framework\acer\\ccd.exe" -r "C:\Users\VladaS75\AppData\Local\AOP SDK\acer infra\acer\SyncAgent" -u S-1-5-21-2050458597-771828282-1207966475-1001 -c 508 -s 476 -g "C:\ProgramData\acer\CCD"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxHK.exe
igfxTray.exe
"C:\WINDOWS\system32\igfxEM.exe" -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe"
"C:\Program Files\Acer\Acer Quick Access\QASvc.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QAEvent.exe"
"C:\Program Files\Acer\Acer Launch Manager\LMTray.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Quick Access\QAMsg.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
C:\WINDOWS\system32\igfxext.exe -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe"
"C:\Program Files\Acer\Acer Quick Access\RMSvc.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" task
"C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" task
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

"C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe"
"C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe"
taskhostw.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 616 620 628 8192 624
"C:\Users\VladaS75\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll

C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
{2d3fbcf7-be69-4433-8858-c621a8d0e58d}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-03 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-03 559624]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-06-30 13672664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2015-01-28 688984]
"AcerPortal"=C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-08-13 2665984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2014-10-07 2109952]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"abDocsDllLoader"=C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [2015-07-27 91488]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-10-07 6134544]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-15 19:06:12 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-10-14 16:09:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-14 16:09:32 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-14 16:09:29 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-10-14 16:09:27 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-14 16:09:24 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-14 16:09:22 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-10-14 16:09:20 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-10-14 16:09:18 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-14 16:09:16 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 16:09:15 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-14 16:09:13 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-14 16:09:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-14 16:09:09 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-10-14 16:09:07 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2015-10-14 16:09:07 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-14 16:09:05 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-10-14 16:09:04 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-14 16:09:03 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-14 16:09:03 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-14 16:09:03 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-14 16:09:02 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-14 16:09:02 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-14 16:09:02 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-14 16:09:02 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-14 16:09:02 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-14 16:09:01 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2015-10-14 16:09:01 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2015-10-14 16:09:01 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-10-14 16:09:01 ----A---- C:\WINDOWS\system32\jscript.dll
2015-10-14 16:09:01 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-14 16:09:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-14 16:09:00 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2015-10-14 16:09:00 ----A---- C:\WINDOWS\system32\winload.exe
2015-10-14 16:08:59 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-10-14 16:08:59 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2015-10-14 16:08:59 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-14 16:08:58 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-10-14 16:08:58 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-10-14 16:08:58 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2015-10-14 16:08:58 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-14 16:08:58 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-10-14 16:08:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 16:08:57 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2015-10-14 16:08:57 ----A---- C:\WINDOWS\system32\winresume.exe
2015-10-14 16:08:57 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-10-14 16:08:56 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2015-10-14 16:08:56 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-14 16:08:56 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 16:08:56 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-14 16:08:55 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2015-10-14 16:08:55 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2015-10-14 16:08:55 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-14 16:08:55 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-14 16:08:55 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-14 16:08:55 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-14 16:08:54 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2015-10-09 19:40:48 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\SYSWOW64\igdusc32.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxCoIn_v4276.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igdumdim64.dll
2015-10-09 19:40:46 ----A---- C:\WINDOWS\SYSWOW64\igdumdim32.dll
2015-10-09 19:40:46 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2015-10-09 19:40:46 ----A---- C:\WINDOWS\SYSWOW64\igdmd32.dll
2015-10-09 19:40:46 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2015-10-09 19:40:46 ----A---- C:\WINDOWS\system32\igdmd64.dll
2015-10-09 19:40:46 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\SYSWOW64\igdail32.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\SYSWOW64\igd10iumd32.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\SYSWOW64\ig7icd32.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\system32\igdde64.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\system32\igdail64.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\system32\ig7icd64.dll
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\IccLibDll_x64.dll
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\Gfxv4_0.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\Gfxv2_0.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\GfxUIEx.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\DPTopologyApp.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\difx64.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-10-09 19:40:44 ----A---- C:\WINDOWS\system32\CustomModeApp.exe
2015-10-07 17:22:24 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-10-07 17:22:16 ----A---- C:\WINDOWS\avastSS.scr
2015-10-02 17:34:59 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-10-01 15:34:22 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2015-10-01 15:34:21 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 15:34:20 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 15:34:20 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 15:34:19 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2015-10-01 15:34:18 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2015-10-01 15:34:16 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 15:34:16 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 15:34:15 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 15:34:14 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 15:34:13 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 15:34:13 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 15:34:12 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-10-01 15:34:12 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 15:34:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-10-01 15:34:10 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-10-01 15:34:10 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 15:34:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2015-10-01 15:34:06 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2015-10-01 15:34:06 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 15:34:05 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-10-01 15:34:04 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 15:34:04 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 15:34:03 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2015-10-01 15:34:03 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 15:34:03 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 15:34:02 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 15:34:02 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 15:34:01 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-10-01 15:34:01 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 15:34:01 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 15:34:01 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 15:34:00 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2015-10-01 15:34:00 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 15:34:00 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 15:33:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2015-10-01 15:33:59 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2015-10-01 15:33:59 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll
2015-10-01 15:33:59 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 15:33:59 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 15:33:59 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 15:33:58 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 15:33:58 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 15:33:58 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-01 15:33:57 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-10-01 15:33:57 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2015-10-01 15:33:57 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 15:33:57 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 15:33:57 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 15:33:57 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 15:33:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 15:33:55 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2015-10-01 15:33:55 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 15:33:55 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 15:33:55 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 15:33:54 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 15:33:54 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 15:33:54 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 15:33:53 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2015-10-01 15:33:53 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 15:33:53 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 15:33:53 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 15:33:52 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2015-10-01 15:33:52 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 15:33:52 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 15:33:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 15:33:51 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 15:33:51 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 15:33:50 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2015-10-01 15:33:50 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll
2015-10-01 15:33:50 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 15:33:50 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 15:33:50 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 15:33:49 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2015-10-01 15:33:49 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-10-01 15:33:49 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 15:33:49 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 15:33:48 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2015-10-01 15:33:48 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2015-10-01 15:33:48 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2015-10-01 15:33:48 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 15:33:48 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 15:33:48 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 15:33:47 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2015-10-01 15:33:47 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 15:33:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-10-01 15:33:46 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2015-10-01 15:33:46 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2015-10-01 15:33:46 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 15:33:45 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2015-10-01 15:33:45 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2015-10-01 15:33:45 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 15:33:45 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 15:33:45 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-10-01 15:33:44 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 15:33:44 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 15:33:44 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 15:33:44 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 15:33:44 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 15:33:43 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 15:33:43 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 15:33:43 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 15:33:43 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 15:33:43 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 15:33:42 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2015-10-01 15:33:42 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2015-10-01 15:33:42 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 15:33:42 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 15:33:42 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 15:33:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 15:33:41 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 15:33:41 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 15:33:41 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 15:33:41 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 15:33:40 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-10-01 15:33:40 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 15:33:40 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 15:33:40 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 15:33:40 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 15:33:40 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 15:33:39 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 15:33:39 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 15:33:38 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 15:33:38 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 15:33:38 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 15:33:38 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 15:33:37 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 15:33:37 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 15:33:37 ----A---- C:\WINDOWS\system32\mfps.dll
2015-10-01 15:33:37 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 15:33:36 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 15:33:35 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2015-10-01 15:33:35 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 15:33:35 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 15:33:35 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 15:33:35 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 15:33:34 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-10-01 15:33:34 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 15:33:34 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 15:33:34 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 15:33:34 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 15:33:34 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 15:33:33 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 15:33:33 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 15:33:32 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 15:33:32 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 15:33:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll
2015-10-01 15:33:31 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 15:33:30 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 15:33:30 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 15:33:30 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 15:33:29 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 15:33:28 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 15:33:28 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 15:33:27 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 15:33:27 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 15:33:27 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 15:33:27 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-01 15:33:26 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-10-01 15:33:26 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 15:33:26 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 15:33:26 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 15:33:26 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 15:33:26 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-10-01 15:33:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2015-10-01 15:33:25 ----A---- C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 15:33:25 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 15:33:25 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 15:33:25 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 15:33:24 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2015-10-01 15:33:23 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2015-10-01 15:33:23 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 15:33:23 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 15:33:23 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 15:33:22 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2015-10-01 15:33:22 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2015-10-01 15:33:22 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-10-01 15:33:21 ----A---- C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 15:33:19 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 15:33:19 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 15:33:19 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 15:33:19 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 15:33:19 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 15:33:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 15:33:18 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 15:33:18 ----A---- C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 15:33:17 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 15:33:17 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 15:33:17 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-09-27 10:55:40 ----D---- C:\Program Files (x86)\Intel Corporation

======List of files/folders modified in the last 1 month======

2015-10-18 11:54:27 ----D---- C:\Program Files\trend micro
2015-10-18 11:53:36 ----D---- C:\WINDOWS\Prefetch
2015-10-18 11:43:43 ----D---- C:\WINDOWS\system32\sru
2015-10-18 11:31:50 ----HD---- C:\Program Files\WindowsApps
2015-10-18 11:31:50 ----D---- C:\WINDOWS\AppReadiness
2015-10-18 11:31:44 ----D---- C:\WINDOWS\Temp
2015-10-18 11:23:18 ----D---- C:\WINDOWS\System32
2015-10-17 17:53:51 ----D---- C:\WINDOWS\system32\config
2015-10-17 17:31:17 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-17 17:30:42 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-17 15:26:51 ----D---- C:\Users\VladaS75\AppData\Roaming\KeePass
2015-10-17 13:05:11 ----D---- C:\WINDOWS\SysWOW64
2015-10-16 16:49:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-16 16:08:01 ----D---- C:\WINDOWS\WinSxS
2015-10-16 16:07:54 ----SHD---- C:\System Volume Information
2015-10-16 14:48:13 ----RD---- C:\Program Files (x86)
2015-10-15 19:19:40 ----D---- C:\Users\VladaS75\AppData\Roaming\vlc
2015-10-15 17:50:52 ----D---- C:\WINDOWS\INF
2015-10-14 19:41:03 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-10-14 19:41:03 ----D---- C:\WINDOWS\system32\Boot
2015-10-14 19:41:03 ----D---- C:\WINDOWS\system32\appraiser
2015-10-14 19:41:03 ----D---- C:\WINDOWS\AppPatch
2015-10-14 19:41:01 ----D---- C:\WINDOWS\system32\drivers
2015-10-14 16:32:25 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-14 16:22:16 ----D---- C:\WINDOWS\CbsTemp
2015-10-14 16:20:54 ----D---- C:\WINDOWS\system32\MRT
2015-10-14 16:14:56 ----A---- C:\WINDOWS\system32\MRT.exe
2015-10-14 16:03:21 ----D---- C:\WINDOWS\system32\catroot2
2015-10-14 15:59:01 ----D---- C:\Windows
2015-10-12 15:40:31 ----A---- C:\IFRToolLog.txt
2015-10-11 20:51:08 ----D---- C:\Windows.old
2015-10-11 18:06:39 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-10-09 19:51:32 ----D---- C:\WINDOWS\system32\CatRoot
2015-10-09 19:43:05 ----SHD---- C:\WINDOWS\Installer
2015-10-09 19:43:02 ----D---- C:\Program Files (x86)\VirtMould
2015-10-09 19:43:02 ----D---- C:\Program Files (x86)\Common Files
2015-10-09 19:40:48 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-10-09 19:40:48 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxTray.exe
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxLHM.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxHK.exe
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxext.exe
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxexps.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxEM.exe
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDI.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxDH.dll
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igfxCUIService.exe
2015-10-09 19:40:47 ----A---- C:\WINDOWS\system32\igdusc64.dll
2015-10-09 19:40:45 ----A---- C:\WINDOWS\system32\igd10iumd64.dll
2015-10-07 17:22:36 ----D---- C:\WINDOWS\system32\Tasks
2015-10-04 15:12:38 ----D---- C:\WINDOWS\rescache
2015-10-02 21:08:26 ----D---- C:\ProgramData\Package Cache
2015-10-01 21:27:24 ----SD---- C:\WINDOWS\SYSWOW64\F12
2015-10-01 21:27:24 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-10-01 21:27:23 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-01 21:27:23 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-01 21:27:21 ----SD---- C:\WINDOWS\system32\F12
2015-10-01 21:27:21 ----D---- C:\WINDOWS\system32\migration
2015-10-01 21:27:20 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-01 21:27:20 ----D---- C:\WINDOWS\Provisioning
2015-10-01 21:27:20 ----D---- C:\WINDOWS\L2Schemas
2015-10-01 20:03:07 ----D---- C:\WINDOWS\debug
2015-10-01 19:10:19 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-01 17:31:11 ----D---- C:\Program Files\CCleaner
2015-10-01 15:18:31 ----D---- C:\WINDOWS\system32\WDI
2015-09-25 10:50:35 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-09-21 11:13:43 ----D---- C:\Users\VladaS75\AppData\Roaming\ViberPC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-10-07 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-10-07 274808]
R0 BTATH_BUS;@oem21.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2014-04-29 35016]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-10-07 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-10-07 1049880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-10-07 448968]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 ndisrd;@oem19.inf,%ndisrfl_Desc%;Intel(R) Technology Access Filter Driver; C:\WINDOWS\system32\DRIVERS\ndisrfl.sys [2015-07-28 50448]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-10-07 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-10-07 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-10-07 153744]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 athr;@oem16.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athwbx.sys [2014-04-03 3893248]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-03-09 599240]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 GPIO;@oem5.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpioe.sys [2014-06-09 31232]
R3 iaioi2c;@oem9.inf,%Driver_Service.Desc%;I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2ce.sys [2014-06-09 69632]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-09 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-07-08 4007512]
R3 IntcDAud;@oem28.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 LMDriver;@oem26.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\WINDOWS\System32\drivers\LMDriver.sys [2013-07-18 21360]
R3 NetTap630;@oem12.inf,%NetTap.Service.DispName%;Intel(R) Technology Access TAP Driver (NDIS 6.30); C:\WINDOWS\system32\DRIVERS\nettap630.sys [2015-04-30 67800]
R3 RadioShim;@oem26.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\WINDOWS\System32\drivers\RadioShim.sys [2013-07-18 14680]
R3 RTL8168;@oem17.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2014-05-29 873176]
R3 RTSUER;@oem36.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-09-11 410848]
R3 tap0901;@oem25.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\System32\drivers\tap0901.sys [2013-08-22 40664]
R3 TXEIx64;@oem6.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-15 88592]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-06 934752]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-06 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-07 146600]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2015-07-23 2858336]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-09 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-02 733696]
R2 Intel(R) Technology Access Legacy CS Loader;Intel(R) Technology Access Legacy CS Loader; C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe [2015-07-31 144128]
R2 Intel(R) TechnologyAccessService;Intel(R) Technology Access Service; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [2015-07-31 481536]
R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-12-30 455912]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-04-17 5448976]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-06-12 2573032]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-10-17 458984]
R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-10-17 449768]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-07-15 234240]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-09 291744]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2015-01-28 517464]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-02 822232]
S3 Intel(R) TA SAM;Intel(R) Technology Access Software Asset Manager; C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18 18064]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09 174368]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-15 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-06 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S4 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe []
S4 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 19 říj 2015 10:41

Krasny den Vam preju

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

lebka75 · #3 Příspěvek od **lebka75** » 20 říj 2015 06:53

dobry den, děkuji

# AdwCleaner v5.014 - Logfile created 20/10/2015 at 07:41:06
# Updated 18/10/2015 by Xplode
# Database : 2015-10-18.5 [Server]
# Operating system : Windows 10 Home (x64)
# Username : VladaS75 - VLADAS
# Running from : C:\Users\VladaS75\Desktop\adwcleaner_5.014.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92
[!] Folder Not Deleted : C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92
[-] Folder Deleted : C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92
[!] Folder Not Deleted : C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92
[-] Folder Deleted : C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

***** [ Files ] *****

[-] File Deleted : C:\Users\VladaS75\AppData\Local\Temp\task.vbs
[-] File Deleted : C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202\user.js

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}

***** [ Web browsers ] *****

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2019 bytes] ##########

#4 Příspěvek od **altrok** » 20 říj 2015 09:07

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

lebka75 · #5 Příspěvek od **lebka75** » 20 říj 2015 22:13

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015
Ran by VladaS75 (administrator) on VLADAS (20-10-2015 23:09:12)
Running from C:\Users\VladaS75\Desktop
Loaded Profiles: VladaS75 (Available Profiles: VladaS75)
Platform: Windows 10 Home (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Users\VladaS75\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\VladaS75\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\Calculator.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(Microsoft Corporation) C:\Windows\System32\LockAppHost.exe
(forum.viry.cz) C:\Users\VladaS75\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672664 2014-06-30] (Realtek Semiconductor)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2109952 2014-10-07] (Dominik Reichl)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2015-07-27] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-07] (AVAST Software)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2015-01-28] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [AcerPortal] => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2665984 2015-08-13] (Acer)
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\VladaS75\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\VladaS75\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Mystify.scr [150528 2015-07-10] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-07] (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{42f69aad-8f6f-44c7-a791-7d0c5100ea1b}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{9e908a73-c517-4f7a-a2ce-583f5e0888de}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=16194
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {1DE7A86E-1DF9-41D5-8835-B57DAFA1F22C} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {30EE35F4-486A-4C68-8F6E-ABDC86764ABA} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {344771A7-7A66-4BB8-A465-34EA70F7A807} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {3BB0AF15-2BF4-4BE5-913E-3805674E70B2} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {465D0D38-20B5-47EB-AD42-76D359462514} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {52BD1FF2-88D4-4626-9126-9F84CFCA9E35} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {59452DEC-53FD-4158-B0BA-85520884C486} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {86B154EB-04C2-4BD0-96BD-5FDEA635F1B6} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-2050458597-771828282-1207966475-1001 -> {AB0F32EF-5076-480E-8A2B-60BBAF350D80} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-03] (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-03] (AVAST Software)
BHO-x32: Loot Find -> {b99604a6-a864-4b48-a1e0-63048b520129} -> C:\Program Files (x86)\Loot Find\Extensions\b99604a6-a864-4b48-a1e0-63048b520129.dll => No File

FireFox:
========
FF ProfilePath: C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202
FF Homepage: hxxps://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Garmin Communicator - C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2015-03-22] [not signed]
FF Extension: Seznam lištička - C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2015-10-20]
FF Extension: YouTube to MP3 Button - C:\Users\VladaS75\AppData\Roaming\Mozilla\Firefox\Profiles\92i3t47e.default-1422739369202\Extensions\flvto@hotger.com.xpi [2015-07-11]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-08-03] [not signed]

Chrome:
=======
CHR Profile: C:\Users\VladaS75\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\VladaS75\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbfgnpioikkmnfmeoofopagjneckehp [2015-02-07]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-03]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-07] (AVAST Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2858336 2015-07-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
S3 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [517464 2015-01-28] (Garmin Ltd or its subsidiaries)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-09] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
S3 Intel(R) TA SAM; C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18064 2015-04-18] ()
R2 Intel(R) Technology Access Legacy CS Loader; C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe [144128 2015-07-31] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [481536 2015-07-31] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-06-09] ()
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-10-17] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-10-17] (Acer Incorporate)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 Service Mgr LootFind; "C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92\plugincontainer.exe" [X]
S2 Update Mgr LootFind; "C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92\updater.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-07] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-07] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-07] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-07] (AVAST Software)
R3 athr; C:\Windows\System32\drivers\athwbx.sys [3893248 2014-04-03] (Qualcomm Atheros Communications, Inc.)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2014-06-09] (Intel Corporation)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [69632 2014-06-09] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [50448 2015-07-28] (Intel Corporation)
R3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2015-04-30] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [410848 2015-09-11] (Realsil Semiconductor Corporation)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-20 23:09 - 2015-10-20 23:09 - 00018090 _____ C:\Users\VladaS75\Desktop\FRST.txt
2015-10-20 23:08 - 2015-10-20 23:09 - 00000000 ____D C:\FRST
2015-10-20 23:07 - 2015-10-20 23:07 - 02196992 _____ (Farbar) C:\Users\VladaS75\Desktop\FRST64.exe
2015-10-20 23:06 - 2015-10-20 23:06 - 00112640 _____ (forum.viry.cz) C:\Users\VladaS75\Desktop\FRSTLauncher.exe
2015-10-20 22:54 - 2015-10-20 22:54 - 00016148 _____ C:\WINDOWS\system32\VLADAS_VladaS75_HistoryPrediction.bin
2015-10-20 07:39 - 2015-10-20 07:41 - 00000000 ____D C:\AdwCleaner
2015-10-19 12:36 - 2015-10-19 12:36 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2015-10-19 12:35 - 2015-10-20 22:48 - 00000000 ____D C:\Users\VladaS75\AppData\Roaming\Seznam.cz
2015-10-19 10:42 - 2015-10-20 07:55 - 00000000 ____D C:\Users\VladaS75\AppData\Local\Deployment
2015-10-19 10:42 - 2015-10-19 10:42 - 00000000 ____D C:\Users\VladaS75\AppData\Local\Apps\2.0
2015-10-18 19:56 - 2015-10-18 19:56 - 00008391 _____ C:\Users\VladaS75\Desktop\ASX servis.xlsx
2015-10-15 19:06 - 2015-10-16 16:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 16:09 - 2015-10-10 08:40 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-10-14 16:09 - 2015-10-10 08:07 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-10-14 16:09 - 2015-10-06 05:03 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-14 16:09 - 2015-10-06 04:46 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-10-14 16:09 - 2015-10-01 06:01 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-10-14 16:09 - 2015-10-01 06:01 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-10-14 16:09 - 2015-10-01 06:00 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 16:09 - 2015-09-25 06:01 - 02573768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-10-14 16:09 - 2015-09-25 05:56 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-10-14 16:09 - 2015-09-25 05:33 - 01997336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-10-14 16:09 - 2015-09-25 05:26 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-10-14 16:09 - 2015-09-25 05:17 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-14 16:09 - 2015-09-25 05:09 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-14 16:09 - 2015-09-25 05:07 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-14 16:09 - 2015-09-25 05:04 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-14 16:09 - 2015-09-25 05:04 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-14 16:09 - 2015-09-25 05:03 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2015-10-14 16:09 - 2015-09-25 05:02 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-10-14 16:09 - 2015-09-25 05:02 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-10-14 16:09 - 2015-09-25 05:01 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-14 16:09 - 2015-09-25 05:01 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-10-14 16:09 - 2015-09-25 05:00 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-10-14 16:09 - 2015-09-25 05:00 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-10-14 16:09 - 2015-09-25 04:59 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-14 16:09 - 2015-09-25 04:59 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-10-14 16:09 - 2015-09-25 04:58 - 01871360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-10-14 16:09 - 2015-09-25 04:48 - 19325952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-14 16:09 - 2015-09-25 04:38 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-14 16:09 - 2015-09-25 04:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2015-10-14 16:09 - 2015-09-25 04:36 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-14 16:09 - 2015-09-25 04:36 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-10-14 16:09 - 2015-09-25 04:34 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-10-14 16:09 - 2015-09-25 04:34 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-10-14 16:09 - 2015-09-25 04:32 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-10-14 16:08 - 2015-10-10 09:12 - 00078528 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-14 16:08 - 2015-10-01 06:01 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-10-14 16:08 - 2015-10-01 06:01 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-10-14 16:08 - 2015-10-01 05:03 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-10-14 16:08 - 2015-09-25 06:01 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-10-14 16:08 - 2015-09-25 05:52 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-10-14 16:08 - 2015-09-25 05:11 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-14 16:08 - 2015-09-25 05:11 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-14 16:08 - 2015-09-25 05:04 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-10-14 16:08 - 2015-09-25 05:03 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-14 16:08 - 2015-09-25 05:02 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 16:08 - 2015-09-25 05:02 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-10-14 16:08 - 2015-09-25 05:00 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-10-14 16:08 - 2015-09-25 05:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2015-10-14 16:08 - 2015-09-25 04:59 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2015-10-14 16:08 - 2015-09-25 04:59 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2015-10-14 16:08 - 2015-09-25 04:59 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-14 16:08 - 2015-09-25 04:59 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-14 16:08 - 2015-09-25 04:59 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-14 16:08 - 2015-09-25 04:47 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2015-10-14 16:08 - 2015-09-25 04:47 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2015-10-14 16:08 - 2015-09-25 04:38 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-14 16:08 - 2015-09-25 04:38 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2015-10-14 16:08 - 2015-09-25 04:38 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-14 16:08 - 2015-09-25 04:37 - 00766976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-10-14 16:08 - 2015-09-25 04:37 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 16:08 - 2015-09-25 04:34 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2015-10-14 16:08 - 2015-09-25 04:34 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2015-10-14 16:08 - 2015-09-25 04:34 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2015-10-14 16:08 - 2015-09-25 04:33 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2015-10-14 16:08 - 2015-09-25 04:32 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 22915568 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 17846272 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 11905432 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 11053048 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 10574992 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 08528896 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 06513648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 04371888 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 04369816 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 04025864 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 03672344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 02506960 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 02037232 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 01995760 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 01793024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 01768432 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 01470472 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 01156000 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 01151840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00970656 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00866824 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00661000 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00618992 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00617992 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00556960 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00554928 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00469216 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00444832 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00410528 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00409520 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeApp.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00387056 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00378824 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00374272 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00357912 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00329216 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00316245 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2015-10-09 19:40 - 2015-10-09 19:40 - 00296944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00291744 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00265712 _____ C:\WINDOWS\system32\igfxCPL.cpl
2015-10-09 19:40 - 2015-10-09 19:40 - 00232960 _____ C:\WINDOWS\system32\igdde64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00229664 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00225288 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00216552 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4276.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00199088 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00194560 _____ C:\WINDOWS\SysWOW64\igdde32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00194368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00193536 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00192520 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00188884 _____ C:\WINDOWS\system32\resTHA.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00181524 _____ C:\WINDOWS\system32\resELL.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00177300 _____ C:\WINDOWS\system32\resRUS.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00172528 _____ C:\WINDOWS\system32\igdail64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00169368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00165808 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2015-10-09 19:40 - 2015-10-09 19:40 - 00163840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00163044 _____ C:\WINDOWS\system32\resARA.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00162500 _____ C:\WINDOWS\system32\resHEB.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00162484 _____ C:\WINDOWS\system32\resJPN.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00157860 _____ C:\WINDOWS\system32\resHUN.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00157844 _____ C:\WINDOWS\system32\resFRA.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00156100 _____ C:\WINDOWS\system32\resKOR.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00156020 _____ C:\WINDOWS\system32\resDEU.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00155988 _____ C:\WINDOWS\system32\resITA.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00155828 _____ C:\WINDOWS\system32\resROM.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00155716 _____ C:\WINDOWS\system32\resESN.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00155268 _____ C:\WINDOWS\system32\resPLK.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00155172 _____ C:\WINDOWS\system32\resSKY.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00154980 _____ C:\WINDOWS\system32\resNLD.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00154372 _____ C:\WINDOWS\system32\resPTB.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00154260 _____ C:\WINDOWS\system32\resTRK.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00154212 _____ C:\WINDOWS\system32\resCSY.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00154096 _____ C:\WINDOWS\SysWOW64\igdail32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00154084 _____ C:\WINDOWS\system32\resPTG.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00153620 _____ C:\WINDOWS\system32\resFIN.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00153236 _____ C:\WINDOWS\system32\resHRV.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00152772 _____ C:\WINDOWS\system32\resSVE.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00152644 _____ C:\WINDOWS\system32\resSLV.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00151668 _____ C:\WINDOWS\system32\resNOR.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00151156 _____ C:\WINDOWS\system32\resDAN.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00149812 _____ C:\WINDOWS\system32\resENU.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00148052 _____ C:\WINDOWS\system32\resCHT.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00147188 _____ C:\WINDOWS\system32\resCHS.cui
2015-10-09 19:40 - 2015-10-09 19:40 - 00143368 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00109064 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00102912 _____ C:\WINDOWS\system32\IccLibDll_x64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00096752 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00078336 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00069616 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00039424 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00020976 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00018944 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00018944 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00018944 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00015344 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00013824 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2015-10-09 19:40 - 2015-10-09 19:40 - 00002560 _____ C:\WINDOWS\system32\iglhxs64.vp
2015-10-07 17:22 - 2015-10-07 17:22 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-10-07 17:22 - 2015-10-07 17:22 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-10-02 17:34 - 2015-10-16 05:10 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-02 17:34 - 2015-10-16 05:10 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-02 17:33 - 2015-10-20 07:29 - 00107324 _____ C:\WINDOWS\PFRO.log
2015-10-01 19:10 - 2015-10-20 22:42 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-01 19:10 - 2015-10-17 13:34 - 00002607 _____ C:\WINDOWS\setupact.log
2015-10-01 19:10 - 2015-10-01 19:10 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-01 15:34 - 2015-09-17 08:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-10-01 15:34 - 2015-09-17 08:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-10-01 15:34 - 2015-09-17 08:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-10-01 15:34 - 2015-09-17 08:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 15:34 - 2015-09-17 08:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 15:34 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-10-01 15:34 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-10-01 15:34 - 2015-09-17 08:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 15:34 - 2015-09-17 08:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 15:34 - 2015-09-17 08:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-10-01 15:34 - 2015-09-17 08:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-10-01 15:34 - 2015-09-17 08:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-10-01 15:34 - 2015-09-17 08:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2015-10-01 15:34 - 2015-09-17 08:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-10-01 15:34 - 2015-09-17 08:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 15:34 - 2015-09-17 08:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-10-01 15:34 - 2015-09-17 08:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 15:34 - 2015-09-17 08:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 15:34 - 2015-09-17 07:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-10-01 15:34 - 2015-09-17 07:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 15:34 - 2015-09-17 07:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-10-01 15:34 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-10-01 15:34 - 2015-09-17 07:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 15:34 - 2015-09-17 07:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-01 15:34 - 2015-09-17 07:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 15:34 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 15:34 - 2015-09-17 07:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 15:34 - 2015-09-17 07:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 15:34 - 2015-09-17 07:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-10-01 15:34 - 2015-09-17 07:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-10-01 15:34 - 2015-09-17 07:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-10-01 15:34 - 2015-09-17 07:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-10-01 15:34 - 2015-09-17 07:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-01 15:34 - 2015-09-17 07:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-10-01 15:34 - 2015-09-17 07:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-10-01 15:33 - 2015-09-19 07:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2015-10-01 15:33 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-10-01 15:33 - 2015-09-17 08:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 15:33 - 2015-09-17 08:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-10-01 15:33 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-10-01 15:33 - 2015-09-17 08:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 15:33 - 2015-09-17 08:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-10-01 15:33 - 2015-09-17 08:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-10-01 15:33 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 15:33 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-10-01 15:33 - 2015-09-17 08:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-10-01 15:33 - 2015-09-17 08:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2015-10-01 15:33 - 2015-09-17 08:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-10-01 15:33 - 2015-09-17 08:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-10-01 15:33 - 2015-09-17 08:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-10-01 15:33 - 2015-09-17 08:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 15:33 - 2015-09-17 08:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2015-10-01 15:33 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-10-01 15:33 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-10-01 15:33 - 2015-09-17 08:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2015-10-01 15:33 - 2015-09-17 08:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-10-01 15:33 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-10-01 15:33 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2015-10-01 15:33 - 2015-09-17 08:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2015-10-01 15:33 - 2015-09-17 08:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-10-01 15:33 - 2015-09-17 08:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-10-01 15:33 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-10-01 15:33 - 2015-09-17 08:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-10-01 15:33 - 2015-09-17 08:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-10-01 15:33 - 2015-09-17 08:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-10-01 15:33 - 2015-09-17 08:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 15:33 - 2015-09-17 08:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 15:33 - 2015-09-17 08:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-10-01 15:33 - 2015-09-17 08:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-10-01 15:33 - 2015-09-17 08:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 15:33 - 2015-09-17 08:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 15:33 - 2015-09-17 08:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 15:33 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 15:33 - 2015-09-17 08:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 15:33 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 15:33 - 2015-09-17 08:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 15:33 - 2015-09-17 08:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 15:33 - 2015-09-17 08:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 15:33 - 2015-09-17 08:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 15:33 - 2015-09-17 08:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 15:33 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 15:33 - 2015-09-17 08:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 15:33 - 2015-09-17 08:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 15:33 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 15:33 - 2015-09-17 08:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 15:33 - 2015-09-17 08:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 15:33 - 2015-09-17 08:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 15:33 - 2015-09-17 07:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 15:33 - 2015-09-17 07:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 15:33 - 2015-09-17 07:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 15:33 - 2015-09-17 07:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 15:33 - 2015-09-17 07:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 15:33 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 15:33 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2015-10-01 15:33 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-10-01 15:33 - 2015-09-17 07:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-10-01 15:33 - 2015-09-17 07:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 15:33 - 2015-09-17 07:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 15:33 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 15:33 - 2015-09-17 07:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-10-01 15:33 - 2015-09-17 07:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 15:33 - 2015-09-17 07:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-10-01 15:33 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-10-01 15:33 - 2015-09-17 07:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2015-10-01 15:33 - 2015-09-17 07:50 - 00929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-10-01 15:33 - 2015-09-17 07:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-10-01 15:33 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-10-01 15:33 - 2015-09-17 07:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 15:33 - 2015-09-17 07:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll
2015-10-01 15:33 - 2015-09-17 07:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll
2015-10-01 15:33 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys
2015-10-01 15:33 - 2015-09-17 07:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 15:33 - 2015-09-17 07:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2015-10-01 15:33 - 2015-09-17 07:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-10-01 15:33 - 2015-09-17 07:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 15:33 - 2015-09-17 07:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 15:33 - 2015-09-17 07:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 15:33 - 2015-09-17 07:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 15:33 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 15:33 - 2015-09-17 07:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-01 15:33 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 15:33 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 15:33 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll
2015-10-01 15:33 - 2015-09-17 07:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 15:33 - 2015-09-17 07:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-10-01 15:33 - 2015-09-17 07:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 15:33 - 2015-09-17 07:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2015-10-01 15:33 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 15:33 - 2015-09-17 07:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-10-01 15:33 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2015-10-01 15:33 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2015-10-01 15:33 - 2015-09-17 07:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 15:33 - 2015-09-17 07:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-10-01 15:33 - 2015-09-17 07:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-10-01 15:33 - 2015-09-17 07:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-10-01 15:33 - 2015-09-17 07:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-10-01 15:33 - 2015-09-17 07:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-01 15:33 - 2015-09-17 07:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 15:33 - 2015-09-17 07:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2015-10-01 15:33 - 2015-09-17 07:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-10-01 15:33 - 2015-09-17 07:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll
2015-10-01 15:33 - 2015-09-17 07:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-01 15:33 - 2015-09-17 07:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-10-01 15:33 - 2015-09-17 07:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-10-01 15:33 - 2015-09-17 07:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-10-01 15:33 - 2015-09-17 07:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-01 15:33 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2015-10-01 15:33 - 2015-09-17 07:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2015-10-01 15:33 - 2015-09-17 07:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-10-01 15:33 - 2015-09-17 07:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-10-01 15:33 - 2015-09-17 07:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-10-01 15:33 - 2015-09-17 07:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-10-01 15:33 - 2015-09-17 07:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-10-01 15:33 - 2015-09-17 07:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-10-01 15:33 - 2015-09-13 04:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-10-01 15:33 - 2015-09-13 03:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-09-27 10:55 - 2015-09-27 10:55 - 00003886 _____ C:\WINDOWS\System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d
2015-09-27 10:55 - 2015-09-27 10:55 - 00003652 _____ C:\WINDOWS\System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d-Logon
2015-09-27 10:55 - 2015-09-27 10:55 - 00000000 ____D C:\Program Files (x86)\Intel Corporation

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-20 23:05 - 2015-02-01 01:35 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-10-20 22:51 - 2015-01-31 21:35 - 00004198 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0EBBCCD9-88A9-43B6-B212-353EA04F2023}
2015-10-20 22:42 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-20 12:39 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-20 12:38 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-20 09:45 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-20 07:38 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-19 11:56 - 2015-02-16 21:29 - 00006670 _____ C:\Users\VladaS75\Documents\newdatabaze.kdbx
2015-10-19 11:56 - 2015-02-16 21:11 - 00000000 ____D C:\Users\VladaS75\AppData\Roaming\KeePass
2015-10-19 09:56 - 2015-09-06 21:33 - 01762290 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-19 09:56 - 2015-07-10 18:02 - 00746648 _____ C:\WINDOWS\system32\perfh005.dat
2015-10-19 09:56 - 2015-07-10 18:02 - 00149550 _____ C:\WINDOWS\system32\perfc005.dat
2015-10-18 17:04 - 2015-02-14 00:27 - 00000000 ____D C:\Users\VladaS75\AppData\Roaming\vlc
2015-10-18 11:54 - 2015-06-11 20:04 - 00000000 ____D C:\Program Files\trend micro
2015-10-16 16:49 - 2015-02-07 15:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-14 19:41 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-14 16:20 - 2015-02-01 01:38 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-14 16:14 - 2015-02-01 01:38 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-11 20:51 - 2015-09-06 21:59 - 00000000 ____D C:\Windows.old
2015-10-11 18:06 - 2015-09-06 21:48 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-10-09 19:45 - 2015-02-18 20:13 - 00000000 ___RD C:\Users\VladaS75\Desktop\programy
2015-10-09 19:43 - 2015-04-22 23:21 - 00000000 ____D C:\Program Files (x86)\VirtMould
2015-10-09 19:40 - 2015-09-06 21:54 - 00394224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2015-10-09 19:40 - 2015-09-06 21:54 - 00230384 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2015-10-09 19:40 - 2015-09-06 21:09 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-10-09 19:40 - 2015-09-06 21:09 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-10-09 19:40 - 2015-07-30 22:46 - 12335600 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2015-10-09 19:40 - 2015-07-30 22:46 - 04637640 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2015-10-09 19:40 - 2015-07-30 22:46 - 00042232 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-10-09 19:40 - 2015-07-30 22:45 - 03797424 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2015-10-09 19:40 - 2015-07-30 22:45 - 00680432 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2015-10-09 19:40 - 2015-07-30 22:45 - 00541600 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2015-10-09 19:40 - 2015-07-30 22:45 - 00395168 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTray.exe
2015-10-09 19:40 - 2015-07-30 22:45 - 00330136 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2015-10-09 19:40 - 2015-07-30 22:45 - 00285184 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2015-10-09 19:40 - 2015-07-30 22:45 - 00262640 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2015-10-09 19:40 - 2015-07-30 22:45 - 00258456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2015-10-09 19:40 - 2015-07-30 22:45 - 00205728 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-10-07 17:22 - 2015-08-03 19:40 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-10-07 17:22 - 2015-08-03 19:40 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-04 15:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2015-10-02 21:08 - 2014-07-25 11:32 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-01 21:27 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-01 17:31 - 2015-03-13 11:34 - 00000000 ____D C:\Program Files\CCleaner
2015-09-27 18:38 - 2015-02-22 14:27 - 00003834 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-09-21 23:05 - 2015-02-01 01:35 - 00003900 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-09-21 11:13 - 2015-02-04 20:07 - 00000000 ____D C:\Users\VladaS75\AppData\Roaming\ViberPC

==================== Files in the root of some directories =======

2015-02-07 14:32 - 2015-02-07 14:34 - 31990778 _____ () C:\Users\VladaS75\AppData\Roaming\arsiv.exe
2015-02-07 14:32 - 2015-02-07 14:32 - 0000009 _____ () C:\Users\VladaS75\AppData\Roaming\ok.txt
2015-02-07 14:34 - 2015-02-07 14:34 - 0000028 _____ () C:\Users\VladaS75\AppData\Roaming\setting
2015-01-30 10:37 - 1999-07-01 19:36 - 0073216 _____ () C:\Users\VladaS75\AppData\Roaming\wget.exe
2015-08-09 19:35 - 2015-08-09 19:36 - 0014182 _____ () C:\Users\VladaS75\AppData\Local\HWVendorDetection.log
2015-09-06 21:10 - 2015-09-06 21:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\VladaS75\AppData\Local\Temp\SC3.6.7 removed perm popu_Downloader.exe
C:\Users\VladaS75\AppData\Local\Temp\SC3.6.7 removed perm popu__10924_i1715759533_il121538.exe
C:\Users\VladaS75\AppData\Local\Temp\sqlite3.dll
C:\Users\VladaS75\AppData\Local\Temp\{11977F81-7758-4F74-83EA-DFC28986258E}.dll
C:\Users\VladaS75\AppData\Local\Temp\{8141BF66-3409-4582-B1D9-78407F66B8D5}.dll
C:\Users\VladaS75\AppData\Local\Temp\{A470CAD4-57C1-491F-A22E-894768E09FD1}.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\VladaS75\Desktop" je 2 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000

==================== End Of Log ==============================

lebka75 · #6 Příspěvek od **lebka75** » 20 říj 2015 22:14

Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-10-2015
Ran by VladaS75 (2015-10-20 23:11:01)
Running from C:\Users\VladaS75\Desktop
Windows 10 Home (X64) (2015-09-06 19:48:28)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2050458597-771828282-1207966475-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2050458597-771828282-1207966475-503 - Limited - Disabled)
Guest (S-1-5-21-2050458597-771828282-1207966475-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2050458597-771828282-1207966475-1003 - Limited - Enabled)
VladaS75 (S-1-5-21-2050458597-771828282-1207966475-1001 - Administrator - Enabled) => C:\Users\VladaS75

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.08.2003 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2000 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.01.2005 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.07.2004 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8105 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3018 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.09.2004.0 - Acer Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.6.7716 - )
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
Elevated Installer (x32 Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden
Foxit PhantomPDF (HKLM-x32\...\{2DF18CA8-86F2-4F3A-A1BF-A2A7D39B9161}) (Version: 7.0.49.127 - Foxit Software Inc.)
Garmin Express (HKLM-x32\...\{714dc1e5-69a4-4ecd-9552-93397e084298}) (Version: 3.2.29.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{fb74531f-28c3-4dca-9849-e6b8faa85afe}) (Version: 1.5.0.1021 - Intel Corporation)
Intel(R) Technology Access Software Asset Manager (x32 Version: 1.0.1562 - Intel Corporation) Hidden
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
KeePass Password Safe 2.28 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.28 - Dominik Reichl)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 41.0.2 (x86 cs) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 cs)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.322 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.33 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.39059 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.33.529.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7288 - Realtek Semiconductor Corp.)
Seznam Software (HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\SeznamInstall) (Version: - Seznam.cz)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
Viber (HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Viber) (Version: 5.2.0.2546 - Viber Media Inc)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2050458597-771828282-1207966475-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

12-10-2015 18:07:54 Intel(R) Technology Access
13-10-2015 21:42:31 Intel(R) Technology Access
15-10-2015 19:18:18 Intel(R) Technology Access
18-10-2015 13:10:05 Intel(R) Technology Access
20-10-2015 10:29:17 Intel(R) Technology Access

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2015-05-08 21:22 - 00000883 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 tools.google.com
127.0.0.1 clients4.google.com

There are 1 more lines.

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {10EB21E7-7F80-4BA8-B214-9911CA8C7E87} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-14] (Microsoft Corporation)
Task: {13AB8ABC-070E-4A6D-A433-6CBB1A78B157} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2015-01-28] ()
Task: {279C6110-2D04-473E-BEE8-9A7FF66E904A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {4615425F-E987-4BC6-AD5E-C6505AB393BA} - System32\Tasks\{41189090-3670-47DD-AAAC-694DB722CAB8} => pcalua.exe -a "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Task: {46C6F073-6EC0-465E-9AEF-71B4CB21FCFE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {46E8F617-7630-45F4-AEEF-C3E29C6C148F} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-10-17] (Acer Incorporate)
Task: {48B906CF-ABC7-4F25-9B0F-6F359464D75C} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-10-17] (Acer Incorporate)
Task: {65511C8C-4435-4709-ABEF-5D871047F460} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-08-13] (Acer)
Task: {6FB6BE8A-46C8-49AA-BB44-CBB6E1ED7730} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: {7D92E03A-86FC-43A5-9736-8EF312F84ACC} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-06-12] (Acer Incorporated)
Task: {7E11F047-4D63-4E98-8D4D-465B8A346BEB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated)
Task: {86BB18D0-8E2A-4B8A-94FB-650491D63458} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {89D3B26D-2C38-4CC2-87F2-2B8F75A3C521} - System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d => C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18] ()
Task: {9B225D04-7D76-435D-8AA5-56B887B0C34C} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {9DC7E818-1DB1-4928-B021-12ED5B610EEE} - System32\Tasks\{B1A43CDF-F78A-4FA5-931E-F6142CA52209} => pcalua.exe -a "C:\Program Files (x86)\1Password 4\unins000.exe"
Task: {AFD3C2FD-122C-441E-969B-99AEBD0DC495} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D2D92C7E-7D30-42B4-8689-3A13A4F82FEA} - System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d-Logon => C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18] ()
Task: {EEB7F45B-3DF6-49DA-8569-FDC6AB95CD15} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-10-07] (AVAST Software)
Task: {F00B4BC3-6ED3-4DAA-83E3-235921847BBF} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2015-07-23] (Acer Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

#7 Příspěvek od **altrok** » 20 říj 2015 22:21

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
File: C:\Users\VladaS75\AppData\Roaming\arsiv.exe
File: C:\Users\VladaS75\AppData\Roaming\wget.exe
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\VladaS75\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\VladaS75\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
BHO-x32: Loot Find -> {b99604a6-a864-4b48-a1e0-63048b520129} -> C:\Program Files (x86)\Loot Find\Extensions\b99604a6-a864-4b48-a1e0-63048b520129.dll => No File
C:\Program Files (x86)\Loot Find
CHR Extension: (No Name) - C:\Users\VladaS75\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbfgnpioikkmnfmeoofopagjneckehp [2015-02-07]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <not found>
S2 Service Mgr LootFind; "C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92\plugincontainer.exe" [X]
S2 Update Mgr LootFind; "C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92\updater.exe" [X]
C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92
C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92
2015-10-20 23:09 - 2015-10-20 23:09 - 00018090 _____ C:\Users\VladaS75\Desktop\FRST.txt
2015-10-20 23:06 - 2015-10-20 23:06 - 00112640 _____ (forum.viry.cz) C:\Users\VladaS75\Desktop\FRSTLauncher.exe
2015-10-20 07:39 - 2015-10-20 07:41 - 00000000 ____D C:\AdwCleaner
Hosts:
EmptyTemp:
End

lebka75 · #8 Příspěvek od **lebka75** » 20 říj 2015 23:13

Fix result of Farbar Recovery Scan Tool (x64) Version:18-10-2015
Ran by VladaS75 (2015-10-21 00:02:28) Run:1
Running from C:\Users\VladaS75\Desktop
Loaded Profiles: VladaS75 (Available Profiles: VladaS75)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
File: C:\Users\VladaS75\AppData\Roaming\arsiv.exe
File: C:\Users\VladaS75\AppData\Roaming\wget.exe
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\VladaS75\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\VladaS75\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
BHO-x32: Loot Find -> {b99604a6-a864-4b48-a1e0-63048b520129} -> C:\Program Files (x86)\Loot Find\Extensions\b99604a6-a864-4b48-a1e0-63048b520129.dll => No File
C:\Program Files (x86)\Loot Find
CHR Extension: (No Name) - C:\Users\VladaS75\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbfgnpioikkmnfmeoofopagjneckehp [2015-02-07]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <not found>
S2 Service Mgr LootFind; "C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92\plugincontainer.exe" [X]
S2 Update Mgr LootFind; "C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92\updater.exe" [X]
C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92
C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92
2015-10-20 23:09 - 2015-10-20 23:09 - 00018090 _____ C:\Users\VladaS75\Desktop\FRST.txt
2015-10-20 23:06 - 2015-10-20 23:06 - 00112640 _____ (forum.viry.cz) C:\Users\VladaS75\Desktop\FRSTLauncher.exe
2015-10-20 07:39 - 2015-10-20 07:41 - 00000000 ____D C:\AdwCleaner
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.

========================= File: C:\Users\VladaS75\AppData\Roaming\arsiv.exe ========================

File not signed
MD5: 0C4950E06182DF940D3E841551AA4378
Creation and modification date: 2015-02-07 14:32 - 2015-02-07 14:34
Size: 31990778
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:

====== End of File: ======

========================= File: C:\Users\VladaS75\AppData\Roaming\wget.exe ========================

File not signed
MD5: F98D5A7924143F6E687DD92D9AF8F3A9
Creation and modification date: 2015-01-30 10:37 - 1999-07-01 19:36
Size: 0073216
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:

====== End of File: ======

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value removed successfully
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value removed successfully
HKU\S-1-5-21-2050458597-771828282-1207966475-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b99604a6-a864-4b48-a1e0-63048b520129}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{b99604a6-a864-4b48-a1e0-63048b520129}" => key removed successfully
"C:\Program Files (x86)\Loot Find" => not found.
C:\Users\VladaS75\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbfgnpioikkmnfmeoofopagjneckehp => moved successfully
"HKLM\SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho" => key removed successfully
Service Mgr LootFind => service removed successfully
Update Mgr LootFind => service removed successfully
"C:\ProgramData\a755da99-68c7-47d2-8e1e-cc341d3d0f92" => not found.
"C:\Program Files (x86)\Common Files\a755da99-68c7-47d2-8e1e-cc341d3d0f92" => not found.
"C:\Users\VladaS75\Desktop\FRST.txt" => not found.
C:\Users\VladaS75\Desktop\FRSTLauncher.exe => moved successfully
C:\AdwCleaner => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 645.5 MB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 00:05:52 ====

#9 Příspěvek od **altrok** » 20 říj 2015 23:16

Smazte jeste rucne tento soubor: C:\Users\VladaS75\AppData\Roaming\wget.exe

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

VIRY.CZ

W10 preventivka

W10 preventivka

Re: W10 preventivka

Re: W10 preventivka

Re: W10 preventivka

Re: W10 preventivka

Re: W10 preventivka

Re: W10 preventivka

Re: W10 preventivka

Re: W10 preventivka