Prosím o kontrolu

[Rubec]

Dobrý den,

prosím o kontrolu logu, podezření na viry. Ve správci úloh je spuštěný " TODO: <文件说明> ".
Děkuji.



Logfile of random's system information tool 1.10 (written by random/random)
Run by rubec at 2015-12-01 11:36:18
Microsoft Windows 10 Pro
System drive C: has 8 GB (10%) free of 74 GB
Total RAM: 8136 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:36:20, on 1.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\rubec\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\rundll32.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\vshub.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\Microsoft.VsHub.Server.HttpHost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\rubec.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Microsoft Web Test Recorder 14.0 Helper - {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} - C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_BD916E297E96217EBD316C0821D3E962] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [DAEMON Tools Ultra Agent] "C:\Program Files\DAEMON Tools Ultra\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [OneDrive] "C:\Users\rubec\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\Program Files\Microsoft Office\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem11.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Ultra Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LSCWinService - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SSFK - TODO: <???> - C:\Program Files (x86)\SFK\SSFK.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: WdsManPro Service (WdsManPro) - DTools LIMITED - C:\ProgramData\DWMiniProD\WMiniPro.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11519 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f4ace4fe-b672-4d58-a88b-c5e9dd93b08a -SystemEventPortName:HostProcess-ab5296d9-8e54-473f-8f6f-71400b92ae42 -IoCancelEventPortName:HostProcess-7d1a8688-0e62-4c46-862c-aebfc65fd0a2 -NonStateChangingEventPortName:HostProcess-68697c55-9f28-4f07-b7de-2a0df0e2616d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:75c8b124-5bbe-4f8d-8c42-f6737cd04eea -DeviceGroupId:
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k NetworkService
dashost.exe {ce4ef6be-a018-4f31-bcd87b1e8abeb377}
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\system32\mqsvc.exe
"C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\SFK\SSFK.exe" -s
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
C:\ProgramData\DWMiniProD\WMiniPro.exe -service
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
sihost.exe
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Users\rubec\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15361.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "0x10b0_0x10cc_0x287292b6d9"
"C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1511.60020.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.yoursearching.com/?type=sc&t ... RKZT6RKZT6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="10140.0.1633927976\1694413214" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45 --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.4229 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.2.1626777923\932492184" --font-cache-shared-handle=2688 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.3.87145185\1168913665" --font-cache-shared-handle=2640 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.4.1576325575\1146606712" --font-cache-shared-handle=2896 /prefetch:673131151
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\IdeaTouchPadPlugin\x64\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.66.134353877\1112632793" --font-cache-shared-handle=7384 /prefetch:673131151
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
"C:\WINDOWS\system32\mspaint.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.111.1922756702\350005732" --font-cache-shared-handle=7480 /prefetch:673131151

"C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe" "D:\Serialy\SG-1\S09\Stargate_SG1_-_9x01_-_Avalon,_cast_1.avi"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.166.1882591810\226349683" --font-cache-shared-handle=9820 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.167.1202276656\176732927" --font-cache-shared-handle=6060 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="10140.168.1104500690\1793637805" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
C:\WINDOWS\system32\rundll32.exe C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll,RunCustomMonitor
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 3b455f07-6f84-4f91-bc48-07392f5eecc0
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
-name cbe22b8f-2b4d-40f6-869b-3b03eb7a22d4 -runas
-name 779a753f-b8f3-48eb-8ae3-b0b506c7b64d -runas
-name 13992c3b-9768-48f9-b9fb-23e428aca4bf -runas
"C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\vshub.exe" EXECUTE -n vshub --console false --locationOutputPipeName 392eace3bd604e9ca8ede88faa6bfac4 -c:269324
"C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\Microsoft.VsHub.Server.HttpHost.exe" --hostId c71bf92d-7804-4af3-b87a-85ea3640cfb7 --controllerHostLocUri http://localhost:49153/vshub/2ace1c33ea ... HubService --hubName vshub --isFiddlerModeOn false -c:269324
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\Microsoft.VsHub.Server.HttpHostx64.exe" --hostId ce4e68f7-c2b9-454d-8100-6be5c80956d1 --controllerHostLocUri http://localhost:49153/vshub/2ace1c33ea ... HubService --hubName vshub --isFiddlerModeOn false -c:269324
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Users\rubec\Desktop\threads\Debug\threads.exe" 10000000
"C:\Users\rubec\Desktop\threads\Debug\threads.exe" 10000000
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.309.826563094\1514478010" --font-cache-shared-handle=4564 /prefetch:673131151
C:\Windows\System32\InstallAgent.exe -Embedding

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/AppBannerTriggering/Control/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/*NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="10140.313.772788996\1251985950" --font-cache-shared-handle=6080 /prefetch:673131151
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Programy - instal\RSITx64.exe"


======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-14 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-09-04 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-14 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-04 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3}]
Microsoft Web Test Recorder 14.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2015-07-07 75104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-28 11786344]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-27 2634872]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-08-27 1710568]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2015-09-02 9753024]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2015-09-02 5908928]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-10-04 3952800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_BD916E297E96217EBD316C0821D3E962"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-11-07 811848]
"DAEMON Tools Ultra Agent"=C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [2015-06-10 4644184]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-08-20 8455960]
"OneDrive"=C:\Users\rubec\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-16 548552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-06 6133520]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-01 11:23:17 ----D---- C:\Program Files\trend micro
2015-12-01 11:23:16 ----D---- C:\rsit
2015-12-01 11:02:27 ----D---- C:\Program Files (x86)\HTML Help Workshop
2015-12-01 10:58:46 ----D---- C:\Program Files\Application Verifier
2015-12-01 10:58:46 ----D---- C:\Program Files (x86)\Application Verifier
2015-12-01 10:58:42 ----D---- C:\ProgramData\Windows App Certification Kit
2015-12-01 10:34:46 ----D---- C:\ProgramData\Microsoft Visual Studio
2015-11-30 22:02:01 ----D---- C:\Program Files (x86)\AppInsights
2015-11-30 21:59:46 ----D---- C:\ProgramData\PreEmptive Solutions
2015-11-30 21:45:00 ----D---- C:\Program Files\Microsoft Visual Studio 12.0
2015-11-30 21:41:32 ----D---- C:\Program Files\IIS Express
2015-11-30 21:41:32 ----D---- C:\Program Files (x86)\IIS Express
2015-11-30 21:40:20 ----D---- C:\ProgramData\NuGet
2015-11-30 21:40:20 ----D---- C:\Program Files (x86)\NuGet
2015-11-30 21:40:06 ----D---- C:\Program Files (x86)\Microsoft Office365 Tools
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsRemoteEngine.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsProxyStub.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsExperiment.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsDesktopEngine.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsCapture.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARPDebug.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\VSD3DWARP12Debug.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\perf_gputiming.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXToolsReporting.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DxToolsReportGenerator.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXToolsOfflineAnalysis.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXToolsMonitor.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXGIDebug.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXCpl.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXCaptureReplay.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\DXCap.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\d3d12warp.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\d3d12SDKLayers.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\d3d11_3SDKLayers.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\SYSWOW64\d2d1debug3.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VsGraphicsProxyStub.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VsGraphicsExperiment.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VsGraphicsCapture.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VSD3DWARPDebug.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\perf_gputiming.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXToolsReporting.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DxToolsReportGenerator.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXToolsMonitor.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXGIDebug.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXCpl.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXCaptureReplay.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\DXCap.exe
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\d3d12warp.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\d3d12SDKLayers.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2015-11-30 21:18:08 ----A---- C:\WINDOWS\system32\d2d1debug3.dll
2015-11-27 22:42:30 ----D---- C:\Program Files (x86)\TempInstaller
2015-11-27 22:41:49 ----D---- C:\Program Files (x86)\SFK
2015-11-27 22:41:45 ----D---- C:\ProgramData\DWMiniProD
2015-11-27 22:41:45 ----A---- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-27 22:41:31 ----D---- C:\Users\rubec\AppData\Roaming\yoursearching
2015-11-25 09:16:09 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2015-11-25 09:16:09 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2015-11-25 09:16:09 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-11-25 09:16:09 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-11-25 09:16:09 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-25 09:16:09 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-11-19 21:31:16 ----A---- C:\WINDOWS\SYSWOW64\VSPerf140.dll
2015-11-19 21:31:16 ----A---- C:\WINDOWS\SYSWOW64\VsGraphicsHelper.dll
2015-11-19 20:02:30 ----A---- C:\WINDOWS\system32\VSPerf140.dll
2015-11-19 20:02:30 ----A---- C:\WINDOWS\system32\VSGraphicsHelper.dll
2015-11-19 10:40:54 ----A---- C:\WINDOWS\system32\shell32.dll
2015-11-19 10:40:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-11-19 10:40:50 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2015-11-19 10:40:49 ----A---- C:\WINDOWS\system32\twinui.dll
2015-11-19 10:40:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-11-19 10:40:47 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-11-19 10:40:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-11-19 10:40:46 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-11-19 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2015-11-19 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2015-11-19 10:40:45 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-19 10:40:45 ----A---- C:\WINDOWS\system32\mf.dll
2015-11-19 10:40:44 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2015-11-19 10:40:44 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2015-11-19 10:40:44 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-11-19 10:40:44 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-11-19 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-11-19 10:40:43 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-19 10:40:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-19 10:40:43 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\provengine.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\mfps.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-19 10:40:42 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-11-19 10:40:41 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-11-19 10:40:40 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2015-11-19 10:40:40 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2015-11-19 10:40:40 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2015-11-19 10:40:39 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-11-19 10:40:39 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-11-19 10:40:39 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-11-19 10:40:38 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-11-19 10:40:37 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-11-19 10:40:36 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-19 10:40:36 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-11-19 10:40:36 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-11-19 10:40:36 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-19 10:40:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-11-19 10:40:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-11-19 10:40:35 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2015-11-19 10:40:35 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\provops.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-11-19 10:40:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-19 10:40:32 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2015-11-19 10:40:32 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2015-11-19 10:40:32 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-19 10:40:32 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-19 10:40:32 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-11-19 10:40:32 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-19 10:40:31 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.proxy.dll
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\provtool.exe
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2015-11-19 10:40:31 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-19 10:40:30 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2015-11-19 10:40:30 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-19 10:40:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-11-19 10:40:29 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-11-17 07:20:03 ----D---- C:\WINDOWS\system32\SleepStudy
2015-11-16 01:06:48 ----SHD---- C:\Recovery
2015-11-16 00:59:00 ----ASH---- C:\hiberfil.sys
2015-11-16 00:47:38 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-11-16 00:42:39 ----SD---- C:\Users\rubec\AppData\Roaming\Microsoft
2015-11-16 00:41:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-16 00:41:46 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2015-11-16 00:39:10 ----D---- C:\WINDOWS\system32\SRSLabs
2015-11-16 00:39:09 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2015-11-16 00:39:09 ----D---- C:\Program Files\Realtek
2015-11-16 00:38:57 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-11-16 00:38:57 ----D---- C:\WINDOWS\system32\NV
2015-11-16 00:38:56 ----D---- C:\ProgramData\NVIDIA
2015-11-16 00:38:53 ----A---- C:\WINDOWS\SYSWOW64\oemdspif.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2015-11-16 00:38:53 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2015-11-16 00:38:49 ----HD---- C:\Program Files (x86)\Uninstall Information
2015-11-16 00:38:41 ----D---- C:\ProgramData\NVIDIA Corporation
2015-11-16 00:38:32 ----D---- C:\Program Files\NVIDIA Corporation
2015-11-16 00:38:32 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-11-16 00:38:13 ----D---- C:\Program Files\Synaptics
2015-11-16 00:38:13 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2015-11-16 00:36:33 ----AS---- C:\WINDOWS\bootstat.dat
2015-11-16 00:35:52 ----D---- C:\WINDOWS\Prefetch
2015-11-16 00:35:23 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-16 00:35:12 ----ASH---- C:\pagefile.sys
2015-11-16 00:34:33 ----DC---- C:\WINDOWS\Panther
2015-11-16 00:31:47 ----D---- C:\Windows.old
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\win32k.sys
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\lpk.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\jscript.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-11-16 00:31:35 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-11-16 00:31:15 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2015-11-16 00:31:15 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2015-11-16 00:31:15 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-11-16 00:31:15 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-11-16 00:31:15 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-11-16 00:30:36 ----D---- C:\WINDOWS\system32\Microsoft
2015-11-16 00:28:03 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2015-11-16 00:28:03 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2015-11-16 00:28:03 ----D---- C:\WINDOWS\system32\msmq
2015-11-16 00:28:03 ----D---- C:\WINDOWS\system32\BestPractices
2015-11-16 00:28:03 ----D---- C:\Program Files\Reference Assemblies
2015-11-16 00:28:03 ----D---- C:\Program Files\MSBuild
2015-11-16 00:28:03 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-11-16 00:28:03 ----D---- C:\inetpub
2015-11-16 00:28:03 ----AD---- C:\Program Files (x86)\MSBuild
2015-11-16 00:27:25 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2015-11-16 00:27:25 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2015-11-16 00:27:25 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-11-16 00:27:19 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-16 00:27:19 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-16 00:27:19 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-11-09 12:55:53 ----D---- C:\Users\rubec\AppData\Roaming\e-academy Inc
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vcruntime140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vcruntime140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vcomp140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vcomp140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vccorlib140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vccorlib140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vcamp140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\vcamp140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\msvcp140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\msvcp140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfcm140ud.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfcm140u.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfcm140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfcm140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140ud.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140u.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140rus.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140kor.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140jpn.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140ita.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140cht.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140chs.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140fra.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140esn.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140enu.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140deu.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\mfc140.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\concrt140d.dll
2015-11-05 22:57:36 ----A---- C:\WINDOWS\system32\concrt140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vcruntime140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vcruntime140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vcomp140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vcomp140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vccorlib140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vccorlib140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vcamp140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\vcamp140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\msvcp140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\msvcp140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfcm140ud.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfcm140u.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfcm140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfcm140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140ud.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140u.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140rus.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140kor.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140jpn.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140ita.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140cht.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140chs.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140fra.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140esn.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140enu.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140deu.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\mfc140.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\concrt140d.dll
2015-11-05 22:54:46 ----A---- C:\WINDOWS\SYSWOW64\concrt140.dll
2015-11-04 12:42:56 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-11-04 12:42:56 ----AD---- C:\Program Files\Microsoft Silverlight
2015-11-02 16:52:59 ----D---- C:\Users\rubec\AppData\Roaming\VisualAssistAtmel
2015-11-02 16:41:51 ----D---- C:\Users\rubec\AppData\Roaming\Atmel
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi1150.dll
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi1140.dll
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi1100.dll
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi1021.dll
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi102.dll
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi1011.dll
2015-11-02 16:40:58 ----A---- C:\WINDOWS\SYSWOW64\wdapi1010.dll
2015-11-02 16:40:53 ----D---- C:\Program Files (x86)\Atmel

======List of files/folders modified in the last 1 month======

2015-12-01 11:35:38 ----D---- C:\WINDOWS\Temp
2015-12-01 11:35:38 ----D---- C:\WINDOWS\AppReadiness
2015-12-01 11:35:33 ----D---- C:\Users\rubec\AppData\Roaming\uTorrent
2015-12-01 11:35:00 ----D---- C:\WINDOWS\system32\sru
2015-12-01 11:23:17 ----RD---- C:\Program Files
2015-12-01 11:08:34 ----D---- C:\ProgramData\Package Cache
2015-12-01 11:08:32 ----SHDC---- C:\WINDOWS\Installer
2015-12-01 11:02:27 ----RD---- C:\Program Files (x86)
2015-12-01 11:01:50 ----D---- C:\WINDOWS\SysWOW64
2015-12-01 11:01:49 ----D---- C:\WINDOWS\System32
2015-12-01 10:58:42 ----HD---- C:\ProgramData
2015-12-01 10:58:05 ----D---- C:\Program Files (x86)\Common Files
2015-12-01 10:57:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2015-12-01 10:57:41 ----D---- C:\Program Files (x86)\Windows Kits
2015-12-01 10:27:51 ----D---- C:\Program Files (x86)\SpeedFan
2015-12-01 07:12:32 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-01 07:02:07 ----RSD---- C:\WINDOWS\assembly
2015-11-30 21:59:46 ----AD---- C:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-11-30 21:53:59 ----AD---- C:\Program Files (x86)\Microsoft Web Tools
2015-11-30 21:47:22 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-11-30 21:44:58 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 12.0
2015-11-30 21:28:33 ----D---- C:\WINDOWS\SYSWOW64\1033
2015-11-30 21:28:05 ----D---- C:\WINDOWS\system32\1033
2015-11-30 21:25:56 ----D---- C:\WINDOWS\system32\config
2015-11-30 21:22:34 ----D---- C:\WINDOWS\system32\drivers
2015-11-30 21:22:32 ----D---- C:\WINDOWS\system32\DriverStore
2015-11-30 21:22:32 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-11-30 21:22:32 ----D---- C:\WINDOWS\INF
2015-11-30 21:21:03 ----D---- C:\Program Files\Microsoft SQL Server
2015-11-30 21:21:03 ----AD---- C:\Program Files\Common Files\microsoft shared
2015-11-30 21:21:03 ----AD---- C:\Program Files (x86)\Microsoft SQL Server
2015-11-30 21:20:55 ----D---- C:\WINDOWS\CbsTemp
2015-11-30 21:18:15 ----D---- C:\WINDOWS\WinSxS
2015-11-30 21:17:31 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-11-29 09:21:50 ----D---- C:\Windows
2015-11-28 21:45:28 ----D---- C:\WINDOWS\debug
2015-11-26 19:28:06 ----D---- C:\Users\rubec\AppData\Roaming\CodeBlocks
2015-11-26 16:08:12 ----D---- C:\WINDOWS\system32\WDI
2015-11-26 16:04:01 ----D---- C:\WINDOWS\SYSWOW64\migration
2015-11-26 16:04:01 ----D---- C:\WINDOWS\system32\migration
2015-11-26 06:30:04 ----HD---- C:\Program Files\WindowsApps
2015-11-22 10:33:58 ----D---- C:\WINDOWS\rescache
2015-11-20 10:22:56 ----AD---- C:\Program Files (x86)\Battle.net
2015-11-20 03:30:11 ----D---- C:\WINDOWS\SYSWOW64\Dism
2015-11-20 03:30:11 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-11-20 03:30:11 ----D---- C:\WINDOWS\system32\oobe
2015-11-20 03:30:11 ----D---- C:\WINDOWS\system32\Dism
2015-11-20 03:30:10 ----RD---- C:\WINDOWS\PurchaseDialog
2015-11-20 03:30:10 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-11-20 03:30:10 ----D---- C:\WINDOWS\system32\appraiser
2015-11-20 03:30:10 ----D---- C:\WINDOWS\Provisioning
2015-11-20 03:30:10 ----D---- C:\WINDOWS\AppPatch
2015-11-19 21:40:27 ----D---- C:\WINDOWS\system32\LogFiles
2015-11-19 10:37:37 ----D---- C:\WINDOWS\system32\catroot2
2015-11-19 07:12:58 ----D---- C:\WINDOWS\Logs
2015-11-16 08:04:32 ----RD---- C:\WINDOWS\DevicesFlow
2015-11-16 07:47:39 ----RD---- C:\WINDOWS\PrintDialog
2015-11-16 07:47:38 ----RD---- C:\WINDOWS\MiracastView
2015-11-16 03:05:28 ----D---- C:\WINDOWS\appcompat
2015-11-16 01:07:11 ----SD---- C:\ProgramData\Microsoft
2015-11-16 01:06:48 ----D---- C:\Program Files\Windows NT
2015-11-16 01:06:33 ----D---- C:\WINDOWS\SoftwareDistribution
2015-11-16 01:05:24 ----D---- C:\WINDOWS\Registration
2015-11-16 01:05:01 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-11-16 01:05:01 ----D---- C:\WINDOWS\system32\Tasks
2015-11-16 01:03:48 ----D---- C:\WINDOWS\system32\wbem
2015-11-16 01:03:30 ----D---- C:\WINDOWS\Tasks
2015-11-16 01:03:08 ----RSD---- C:\WINDOWS\Media
2015-11-16 01:03:03 ----D---- C:\WINDOWS\system32\drivers\etc
2015-11-16 00:58:29 ----D---- C:\WINDOWS\ShellNew
2015-11-16 00:48:49 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2015-11-16 00:48:49 ----D---- C:\WINDOWS\SYSWOW64\IME
2015-11-16 00:48:48 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-11-16 00:48:42 ----HD---- C:\WINDOWS\system32\WLANProfiles
2015-11-16 00:48:41 ----D---- C:\WINDOWS\system32\SPReview
2015-11-16 00:48:40 ----D---- C:\WINDOWS\system32\spool
2015-11-16 00:48:38 ----D---- C:\WINDOWS\system32\NDF
2015-11-16 00:48:38 ----D---- C:\WINDOWS\system32\IME
2015-11-16 00:48:37 ----D---- C:\WINDOWS\system32\EventProviders
2015-11-16 00:48:36 ----D---- C:\WINDOWS\system32\en-US
2015-11-16 00:48:12 ----D---- C:\WINDOWS\system32\CatRoot
2015-11-16 00:48:09 ----D---- C:\WINDOWS\schemas
2015-11-16 00:48:09 ----D---- C:\WINDOWS\PolicyDefinitions
2015-11-16 00:48:09 ----D---- C:\WINDOWS\OCR
2015-11-16 00:48:06 ----D---- C:\WINDOWS\LiveKernelReports
2015-11-16 00:47:58 ----RSD---- C:\WINDOWS\Fonts
2015-11-16 00:47:58 ----D---- C:\WINDOWS\ehome
2015-11-16 00:47:54 ----RD---- C:\Users
2015-11-16 00:47:54 ----D---- C:\ProgramData\USOPrivate
2015-11-16 00:47:48 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2015-11-16 00:47:47 ----D---- C:\Program Files (x86)\Windows Mail
2015-11-16 00:47:46 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-11-16 00:47:41 ----SHD---- C:\Program Files\Windows Sidebar
2015-11-16 00:47:41 ----D---- C:\Program Files\Windows Mail
2015-11-16 00:47:39 ----D---- C:\Program Files\Microsoft Games
2015-11-16 00:47:38 ----D---- C:\Program Files\Common Files
2015-11-16 00:47:38 ----AD---- C:\Program Files\IIS
2015-11-16 00:45:56 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-11-16 00:44:19 ----D---- C:\WINDOWS\system32\Recovery
2015-11-16 00:41:19 ----D---- C:\WINDOWS\system32\Sysprep
2015-11-16 00:39:20 ----D---- C:\WINDOWS\twain_32
2015-11-16 00:38:53 ----D---- C:\WINDOWS\Help
2015-11-16 00:35:31 ----D---- C:\WINDOWS\ServiceProfiles
2015-11-16 00:28:03 ----D---- C:\WINDOWS\SYSWOW64\MUI
2015-11-16 00:28:03 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2015-11-16 00:28:03 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-11-16 00:28:03 ----D---- C:\WINDOWS\system32\MUI
2015-11-16 00:28:03 ----D---- C:\WINDOWS\system32\inetsrv
2015-11-16 00:28:03 ----D---- C:\WINDOWS\system32\cs-CZ
2015-11-16 00:27:59 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2015-11-16 00:27:59 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2015-11-16 00:27:58 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-11-16 00:27:58 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-11-16 00:27:58 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-11-16 00:27:58 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-11-16 00:27:58 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-11-16 00:27:58 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-11-16 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2015-11-16 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2015-11-16 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2015-11-16 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2015-11-16 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2015-11-16 00:27:57 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2015-11-16 00:27:56 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2015-11-16 00:27:56 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-11-16 00:27:55 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-11-16 00:27:54 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-11-16 00:27:52 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-11-16 00:27:52 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-11-16 00:27:51 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-11-16 00:27:50 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2015-11-16 00:27:50 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-11-16 00:27:48 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2015-11-16 00:27:47 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-11-16 00:27:47 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-11-16 00:11:35 ----HD---- C:\$WINDOWS.~BT
2015-11-11 20:23:13 ----D---- C:\ProgramData\Microsoft Help
2015-11-11 20:17:47 ----D---- C:\WINDOWS\system32\MRT
2015-11-11 20:13:04 ----A---- C:\WINDOWS\system32\MRT.exe
2015-11-03 01:12:51 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-10-25 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-10-25 274808]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2015-09-02 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-08-30 40264]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2015-09-02 275552]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-10-25 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-11-06 1059656]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-11-06 449992]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-10-25 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-10-25 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-10-25 153744]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 ACPIVPC;@oem15.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2015-09-02 29792]
R3 AMPPAL;@oem25.inf,%AMPPAL.SVCDESC%;Virtuální adaptér Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed; C:\WINDOWS\System32\drivers\AMPPAL.sys [2013-07-29 164832]
R3 dtultrascsibus;@oem6.inf,%DTULTRASCSIBUS.DeviceDesc%;DAEMON Tools Ultra Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [2015-09-03 30264]
R3 dtultrausbbus;@oem66.inf,%DTULTRAUSBBUS.DeviceDesc%;DAEMON Tools Ultra Virtual USB Bus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [2015-09-03 47160]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2011-03-29 2819560]
R3 IntcDAud;@oem65.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-10-02 342528]
R3 k57nd60a;@netk57a.inf,%SvcDispName%;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\System32\drivers\k57nd60a.sys [2015-10-30 446464]
R3 MEIx64;@oem55.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-11-16 175616]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\WINDOWS\System32\drivers\NETwsw00.sys [2014-01-26 11521024]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-30 11188880]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-27 19576]
R3 nvvad_WaveExtensible;@oem42.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 rtsuvc;@oem4.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2011-03-23 8199016]
R3 SensorsSimulatorDriver;@oem22.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2015-10-30 216064]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-10-04 44192]
R3 SynTP;@oem69.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-10-04 630944]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 AMPPALP;@oem72.inf,%AMPPALP_Desc%;Protokol Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed; C:\WINDOWS\system32\DRIVERS\amppal.sys [2013-07-29 164832]
S3 bcbtums;@oem11.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-09-06 170712]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-10-30 112640]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-10-30 128512]
S3 BTHPORT;@Bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2015-10-30 953344]
S3 BTHUSB;@Bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2015-10-30 84992]
S3 btwampfl;@oem11.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-09-06 166104]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-10-30 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-10-30 175104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-25 146600]
R2 BcmBtRSupport;@oem11.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-09-06 2255064]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-27 1155192]
R2 ImControllerService;System Interface Foundation Service; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2015-11-13 35784]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-11-16 26624]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-27 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-27 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-25 937592]
R2 OneSyncSvc_11254b;Hostitel synchronizace_11254b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-02-21 134336]
R2 SSFK;SSFK; C:\Program Files (x86)\SFK\SSFK.exe [2015-11-27 170144]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-10-04 247968]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 Disc Soft Ultra Bus Service;Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [2015-06-10 1345368]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_11254b;Data kontaktů_11254b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-02-20 142336]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2015-08-17 272424]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_11254b;Služba zasílání zpráv_11254b; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

[Roli]

Zdravím, stiskni klávesy Windows + R do okna Spustit >> napiš - services.msc >> Enter. Najdi službu :

SSFK - TODO: <???>

dvojklikem se otevře karta kde nejprve službu zastav tlačítkem Zastavit u položky Typ spouštění vyber Zakázáno a klik na OK.


Stáhni a spusť OTMoveIt

do levého okna aplikace pod Paste Instructions for Items to be Moved zkopíruj tento text:

Kód: Vybrat vše

:processes
explorer.exe       

:files
C:\Program Files (x86)\SFK

:services
SSFK

:commands
[purity]
[emptytemp]
[start explorer]

klikni na MoveIt! a v pravém zeleném okně aplikace se Ti objeví info o provedene akci, obsah okna zkopíruj sem,

pokud aplikace bude požadovat restart, klikni na YES

v tom případě sem zkopíruj obsah logu uloženého na C:\_OTMoveIt\MovedFiles\


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

[Rubec]

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
C:\Program Files (x86)\SFK folder moved successfully.
========== SERVICES/DRIVERS ==========
Service SSFK stopped successfully!
Service SSFK deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 313848 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default.migrated

User: Public

User: rubec
->Temp folder emptied: 509263895 bytes
->Temporary Internet Files folder emptied: 10840359 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 229601605 bytes
->Flash cache emptied: 314354 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 11965802 bytes
RecycleBin emptied: 174 bytes

Total Files Cleaned = 727,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12012015_181120

Files moved on Reboot...
C:\Users\rubec\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[Rubec]

# AdwCleaner v5.023 - Logfile created 01/12/2015 at 18:30:21
# Updated 30/11/2015 by Xplode
# Database : 2015-11-30.1 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : rubec - RUBEC-PC
# Running from : C:\Users\rubec\Downloads\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : WdsManPro

***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\DWMiniProD
[-] Folder Deleted : C:\Users\rubec\AppData\Roaming\yoursearching

***** [ Files ] *****

[-] File Deleted : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro
[-] Key Deleted : HKLM\SOFTWARE\WdsManPro
[-] Key Deleted : HKLM\SOFTWARE\yoursearchingSoftware
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ask.com
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.ask.com
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ask.com
[-] Key Deleted : HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.ask.com

***** [ Web browsers ] *****

[-] [C:\Users\rubec\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.yoursearching.com/webfavicon.ico

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2275 bytes] ##########

[Roli]

Znovu spusť OTMoveIt a nahoře v aplikaci klini na CleanUP!

tímto po sobě uklidí.


Pak použij Mbam z mého podpisu a dej mi sem z něj log po smazání.

[Rubec]

Posílám log z mbam.
EDIT: Ale mám problém, během čištění, ale nedokážu říct ve kterém kroku, jestli po mbam, OTmoveit, nebo AdwCleaner, všiml jsem si toho až teď, mi přestala fungovat lišta ve windows. Po kliknutí levým na nabídku Start nebo v pravo pak na síť, zvuk, čas apod. se nic nestane.

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 1.12.2015
Čas skenování: 20:10
Protokol: mbam.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.01.04
Databáze rootkitů: v2015.11.26.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: rubec

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 437515
Uplynulý čas: 11 min, 53 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
PUP.Optional.DustApps, C:\Users\rubec\Downloads\connectify-hotspot.exe, Do karantény, [7c6ca6f91c6f94a2a00c95cb27dd7789],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Roli]

Posílám log z mbam.
EDIT: Ale mám problém, během čištění, ale nedokážu říct ve kterém kroku, jestli po mbam, OTmoveit, nebo AdwCleaner, všiml jsem si toho až teď, mi přestala fungovat lišta ve windows. Po kliknutí levým na nabídku Start nebo v pravo pak na síť, zvuk, čas apod. se nic nestane.

Tohle nezpůsobilo čištění ale systém napadený breberkama.

Dá se to opravit a jelikož se i to nechce psát ZDE je to hezky popsáno i s obrázky.

Pak dej vědět jak se PC chová.

[Rubec]

Zdravím,

uvedený postup jsem zkoušel, bohužel nepomohl. Asi budu muset win reinstalovat.
Ale jinak se PC chová i o něco líp a děkuji za pomoc.

[Roli]

Není zač a