PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Zpráva

gerard3866 · #1 Příspěvek od **gerard3866** » 05 pro 2015 21:18

Dnes jsem řešil http://forum.viry.cz/viewtopic.php?f=13&t=147062 a vše bylo OK, teď jsem vložil stejný flash disk do tohoto počítače a flash disk zase nefunguje...nutně potřebuji jednu skladbu převést na MP3...do práce na zítra (neděli) pomoc,pomoc pomoc. Děkuji
Log bez flashdisku.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Toshiba at 2015-12-05 21:16:58
Microsoft Windows 10 Home
System drive C: has 62 GB (13%) free of 465 GB
Total RAM: 6027 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:17:06, on 5. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNACBSWK.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Dropbox\DropboxSetup\DropboxSetup.exe
C:\Program Files\trend micro\Toshiba.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ToshibaDynamicIconUtility] "C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe"
O4 - HKLM\..\Run: [TPUReg(x86)] "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
O4 - HKLM\..\Run: [TPUReg] "C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe" /Retimes
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKCU\..\Run: [EPLTarget\P0000000000000002] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIIKE.EXE /EPT "EPLTarget\P0000000000000002" /M "XP-302 303 305 306 Series"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: STOPzilla! (SBAMSvc) - ThreatTrack Security Inc. - C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SBAMSvc.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: STOPzilla Service (sz7) - iS3, Inc. - C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SZServer.exe
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Teco\TecoService.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12329 bytes

======Listing Processes======

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\igfxCUIService.exe
dashost.exe {7ccdf7c6-4c4d-4a87-9c1bc92a09d4ec27}
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\Windows\system32\TODDSrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe"
"C:\Program Files\TOSHIBA\Teco\TecoService.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
sihost.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}

igfxEM.exe
igfxHK.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe"
"C:\Program Files\TOSHIBA\Teco\TecoResident.exe"
"C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe" /f="C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_HD.zip" /h
"C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE"
"C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe"
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNACBSWK.EXE !hide Canon LBP7010C/7018C
"C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"fontdrvhost.exe"
"C:\Program Files (x86)\Dropbox\DropboxSetup\DropboxSetup.exe" auto
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe"
"C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16565_none_1162030161f5c19b\TiWorker.exe -Embedding
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SBAMSvc.exe"
"C:\Users\Toshiba\Desktop\antivir\RSITx64.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\9e1joyvy.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Nero.com/KM]
"Description"=
"Path"=C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-25 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-25 565304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24 13885696]
"TCrdMain"=C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2012-08-14 2608040]
"TODDMain"=C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [2012-08-05 213136]
"TecoResident"=C:\Program Files\TOSHIBA\Teco\TecoResident.exe [2012-08-14 169896]
"TosWaitSrv"=C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [2012-07-11 356776]
"SRS Premium Sound HD"=C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2012-07-27 2170784]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-08-04 3946184]
"CNAP2 Launcher"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [2010-10-14 226784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000002"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIIKE.EXE /EPT EPLTarget\P0000000000000002 /M XP-302 303 305 306 Series []
"OneDrive"=C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-03 548552]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]
"Uninstall C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ToshibaDynamicIconUtility"=C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [2012-08-09 1498624]
"TPUReg(x86)"=C:\Program Files\TOSHIBA\Password Utility\TosPU.exe /Retimes []
"TPUReg"=C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [2012-08-23 6884352]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2015-11-05 36713096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SBAMSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-05 09:00:35 ----HD---- C:\OneDriveTemp
2015-12-04 10:34:11 ----D---- C:\UsbFix
2015-12-03 12:10:25 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-12-02 21:58:48 ----D---- C:\Program Files (x86)\ESET
2015-11-18 14:11:39 ----HD---- C:\$WINDOWS.~BT
2015-11-12 10:32:35 ----A---- C:\WINDOWS\system32\{86F549EB-A66B-4D6C-958D-CDDD66410751}.bat
2015-11-11 17:56:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2015-11-11 17:56:19 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-11 17:56:19 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-11 17:56:19 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-11 17:56:18 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-11-11 17:56:18 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-11-11 17:56:18 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-11 17:56:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-11 17:56:17 ----A---- C:\WINDOWS\system32\esent.dll
2015-11-11 17:56:17 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-11-11 17:56:17 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-11 17:56:15 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-11-11 17:56:15 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-11 17:56:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-11-11 17:56:14 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-11-11 17:56:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-11-11 17:56:10 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-11 17:56:09 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2015-11-11 17:56:09 ----A---- C:\WINDOWS\system32\dlnashext.dll
2015-11-11 17:56:09 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-11 17:56:06 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-11-11 17:56:05 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-11 17:56:03 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-11-11 17:56:03 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-11-11 17:56:01 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-11-11 17:56:01 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-11-11 17:56:00 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-11 17:55:59 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-11-11 17:55:59 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-11-11 17:55:55 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 17:55:55 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-11-11 17:55:55 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2015-11-11 17:55:51 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-11-11 17:55:51 ----A---- C:\WINDOWS\system32\internetmail.dll
2015-11-11 17:55:51 ----A---- C:\WINDOWS\system32\dssvc.dll
2015-11-11 17:55:50 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-11-11 17:55:49 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-11 17:55:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-11-11 17:55:47 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-11 17:55:46 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-11-11 17:55:46 ----A---- C:\WINDOWS\system32\browserbroker.dll
2015-11-11 17:55:41 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-11-11 17:55:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2015-11-11 17:55:40 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-11 17:55:39 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-11-11 17:55:38 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-11-11 17:55:37 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-11 17:55:35 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-11-11 17:55:35 ----A---- C:\WINDOWS\system32\jscript.dll
2015-11-11 17:55:32 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-11-11 17:55:31 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-11-11 17:55:31 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2015-11-11 17:55:31 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-11-11 16:14:54 ----A---- C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2015-11-11 16:14:53 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxTray.exe
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxext.exe
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxexps.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxCoIn_v4276.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\system32\igdmd64.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\SYSWOW64\igdmd32.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\SYSWOW64\igdail32.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\system32\igdde64.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\system32\igdail64.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\system32\ig7icd64.dll
2015-11-11 16:14:49 ----A---- C:\WINDOWS\SYSWOW64\ig7icd32.dll
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\IccLibDll_x64.dll
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\Gfxv4_0.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\Gfxv2_0.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\GfxUIEx.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\DPTopologyApp.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\difx64.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-11-11 16:14:49 ----A---- C:\WINDOWS\system32\CustomModeApp.exe

======List of files/folders modified in the last 1 month======

2015-12-05 21:17:06 ----D---- C:\WINDOWS\Prefetch
2015-12-05 21:17:05 ----D---- C:\Program Files\trend micro
2015-12-05 21:14:46 ----D---- C:\WINDOWS\Temp
2015-12-05 21:14:46 ----D---- C:\Program Files (x86)\Opera
2015-12-05 21:14:41 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-12-05 21:11:32 ----D---- C:\ProgramData\STOPzilla!
2015-12-05 21:11:27 ----SHD---- C:\WINDOWS\Installer
2015-12-05 21:11:14 ----D---- C:\WINDOWS\system32\sru
2015-12-05 21:10:35 ----D---- C:\WINDOWS\system32\catroot2
2015-12-05 21:09:22 ----D---- C:\WINDOWS\System32
2015-12-05 21:07:44 ----D---- C:\AdwCleaner
2015-12-05 20:49:24 ----D---- C:\WINDOWS\INF
2015-12-05 20:49:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-05 10:17:15 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-05 09:20:50 ----D---- C:\WINDOWS\AppReadiness
2015-12-05 09:20:36 ----HD---- C:\Program Files\WindowsApps
2015-12-05 08:57:27 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-04 12:04:39 ----RD---- C:\Program Files (x86)
2015-12-03 23:22:43 ----D---- C:\FFOutput
2015-12-03 16:15:31 ----D---- C:\Users\Toshiba\AppData\Roaming\vlc
2015-12-03 15:53:09 ----D---- C:\Users\Toshiba\AppData\Roaming\Audacity
2015-12-02 21:44:01 ----HD---- C:\ProgramData
2015-11-29 12:47:42 ----SHD---- C:\System Volume Information
2015-11-26 15:21:56 ----D---- C:\WINDOWS\system32\config
2015-11-25 21:48:26 ----D---- C:\WINDOWS\WinSxS
2015-11-18 14:14:02 ----DC---- C:\WINDOWS\Panther
2015-11-18 14:11:38 ----D---- C:\WINDOWS\Logs
2015-11-18 13:47:05 ----D---- C:\WINDOWS\system32\NDF
2015-11-14 12:48:30 ----D---- C:\WINDOWS\rescache
2015-11-13 15:04:59 ----D---- C:\WINDOWS\LiveKernelReports
2015-11-13 09:02:58 ----RD---- C:\WINDOWS\assembly
2015-11-12 23:05:46 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-11-12 23:05:46 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-11-12 23:05:46 ----D---- C:\WINDOWS\SysWOW64
2015-11-12 23:05:45 ----D---- C:\WINDOWS\system32\en-US
2015-11-12 23:05:45 ----D---- C:\WINDOWS\system32\cs-CZ
2015-11-12 23:05:45 ----D---- C:\WINDOWS\system32\appraiser
2015-11-12 23:05:43 ----D---- C:\WINDOWS\system32\drivers
2015-11-12 23:05:43 ----D---- C:\WINDOWS\AppPatch
2015-11-12 23:05:40 ----D---- C:\WINDOWS\system32\DriverStore
2015-11-12 12:42:37 ----D---- C:\WINDOWS\CbsTemp
2015-11-12 12:40:08 ----D---- C:\WINDOWS\system32\MRT
2015-11-12 12:36:38 ----A---- C:\WINDOWS\system32\MRT.exe
2015-11-12 10:32:35 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-11-11 23:37:17 ----D---- C:\WINDOWS\system32\CatRoot
2015-11-11 17:52:22 ----D---- C:\Windows
2015-11-11 16:14:53 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-11-11 16:14:53 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxLHM.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxHK.exe
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxEM.exe
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDI.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxDH.dll
2015-11-11 16:14:52 ----A---- C:\WINDOWS\system32\igfxCUIService.exe
2015-11-11 16:14:51 ----A---- C:\WINDOWS\SYSWOW64\igdusc32.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\SYSWOW64\igdumdim32.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\system32\igdusc64.dll
2015-11-11 16:14:51 ----A---- C:\WINDOWS\system32\igdumdim64.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\SYSWOW64\igd10iumd32.dll
2015-11-11 16:14:50 ----A---- C:\WINDOWS\system32\igd10iumd64.dll
2015-11-11 10:56:53 ----D---- C:\Program Files (x86)\Dropbox
2015-11-08 12:43:29 ----SD---- C:\Users\Toshiba\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-04-25 65736]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-04-25 272248]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-31 645952]
R0 tos_sps64;@oem9.inf,%SERVICE_DESC_amd64%;TOSHIBA tos_sps64 Service; C:\WINDOWS\System32\drivers\tos_sps64.sys [2012-06-18 499096]
R0 TVALZ;@oem38.inf,%TVALZ.SvcDesc%;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\WINDOWS\System32\drivers\TVALZ_O.SYS [2015-07-25 41568]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-04-25 93528]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-06-29 442264]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R1 sbwfw;sbwfw; C:\WINDOWS\system32\DRIVERS\sbwfw.sys [2015-05-01 345392]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-04-25 29168]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-04-25 89944]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-04-25 137288]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 PEGAGFN;PEGAGFN; \??\C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [2009-09-11 14344]
R2 sbapifs;sbapifs; C:\WINDOWS\system32\DRIVERS\sbapifs.sys [2015-05-01 88928]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver; C:\WINDOWS\system32\DRIVERS\TVALZFL.sys [2012-07-22 16768]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-11-11 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem58.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem36.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 MEIx64;@oem26.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-10 587264]
R3 RtkBtFilter2;@oem57.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Module; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2015-03-11 593624]
R3 rtwlane_13;@netrtwlane_13.inf,%rtwlane_13.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\System32\drivers\rtwlane_13.sys [2015-07-10 3749888]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-08-04 42696]
R3 SynTP;@oem6.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-08-04 618696]
R3 TDCMDPST;TOSHIBA Writing Engine Filter Driver; C:\WINDOWS\system32\DRIVERS\tdcmdpst.sys [2012-07-25 31184]
R3 Thotkey;@oem42.inf,%Thotkey%;Toshiba Hotkey Driver; C:\WINDOWS\System32\drivers\Thotkey.sys [2015-07-25 45448]
R3 tosrfec;@oem23.inf,%busenum.SVCDESC%;Bluetooth ACPI; C:\WINDOWS\System32\drivers\tosrfec.sys [2013-11-01 27032]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-04-25 1047320]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 dg_ssudbus;@oem10.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-05-21 110720]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 gfiark;gfiark; C:\WINDOWS\system32\drivers\gfiark.sys [2013-05-23 41032]
S3 gfiutil;gfiutil; C:\WINDOWS\system32\drivers\gfiutil.sys [2013-09-04 31264]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;@oem12.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 nmwcd;@oem52.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2015-09-05 19968]
S3 nmwcdc;@oem56.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2015-09-05 27136]
S3 nmwcdnsucx64;@oem53.inf,%ServiceDisplayName%;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsucx64.sys [2015-09-05 12800]
S3 nmwcdnsux64;@oem44.inf,%ServiceDisplayName%;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsux64.sys [2015-09-05 171008]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-31 934752]
S3 RSUSBSTOR;@oem15.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2012-06-13 252048]
S3 RtkBtFilter;@oem47.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2015-03-11 593624]
S3 SBHIPS;sbhips; C:\WINDOWS\system32\drivers\sbhips.sys [2015-05-01 63696]
S3 sbwtis;sbwtis; C:\WINDOWS\system32\DRIVERS\sbwtis.sys [2015-05-01 95608]
S3 ssudmdm;@oem22.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-05-21 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-07-31 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 77128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-25 343336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 GFNEXSrv;GFNEX Service; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [2011-10-13 156672]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-11-11 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-06-24 303360]
R2 SBAMSvc;STOPzilla!; C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SBAMSvc.exe [2015-05-01 3985352]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2015-05-21 743688]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-08-04 246472]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2009-07-28 140632]
R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\Teco\TecoService.exe [2012-08-25 291240]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 TPCHSrv;TPCH Service; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2012-07-28 458152]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-15 134512]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session23;Hostitel synchronizace_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S2 sz7;STOPzilla Service; C:\Program Files (x86)\iS3\STOPzilla AntiVirus\SZServer.exe [2015-09-02 1743040]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-11-11 291744]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-15 134512]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2015-09-17 655624]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-04 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session23;Data kontaktů_Session23; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-31 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TMachInfo;TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2012-07-27 53384]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 06 pro 2015 03:11

Dobry den,

tezko rict, jestli to stihame pred zacatkem pracovni doby, protoze na urgentni pripady zde mame http://neslape.cz/ . Aplikujte znovu USBFix http://forum.viry.cz/viewtopic.php?f=24&t=140144

Pote dejte logy z FRST (i Addition), at Vas toho svinstva zbavime http://forum.viry.cz/viewtopic.php?f=30&t=133101

gerard3866 · #3 Příspěvek od **gerard3866** » 07 pro 2015 14:45

Tak v práci jsem to naštěstí vyřešil...bylo to trošku rychlý, ale povedlo se.
Přesto potřebuju prosím odstranit to svinstvo.
USB fix projel flasku.
Pokusil jsem se stáhnout FRST, uložil na plochu, spustil...asi 10x a pořád mi píše, že není na ploše????

#4 Příspěvek od **altrok** » 08 pro 2015 13:35

Spustte jen samotny FRST.exe/FRST64.exe (bez FRSTLauncheru).

gerard3866 · #5 Příspěvek od **gerard3866** » 08 pro 2015 20:21

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-12-2015
Ran by Toshiba (2015-12-08 20:18:24)
Running from C:\Users\Toshiba\Desktop
Windows 10 Home (X64) (2015-12-08 04:17:43)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1889331998-2119579927-1594466533-500 - Administrator - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-1889331998-2119579927-1594466533-503 - Limited - Disabled)
gerard (S-1-5-21-1889331998-2119579927-1594466533-1011 - Limited - Enabled)
Guest (S-1-5-21-1889331998-2119579927-1594466533-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1889331998-2119579927-1594466533-1009 - Limited - Enabled)
Toshiba (S-1-5-21-1889331998-2119579927-1594466533-1002 - Administrator - Enabled) => C:\Users\Toshiba

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: STOPzilla AntiVirus (Disabled - Out of date) {581418F3-DCB4-03A7-8970-1C2B5929FC27}
AS: STOPzilla AntiVirus (Disabled - Out of date) {E375F917-FA8E-0C29-B3C0-275922AEB69A}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe After Effects CS4 (HKLM-x32\...\Adobe_3dcb365ab9e01871fb8c6f27b0ea079) (Version: 9 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon LBP7010C/7018C (HKLM\...\Canon LBP7010C/7018C) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.11 - Dropbox, Inc.)
Dropbox Setup (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 1.0.0.2 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.33 - Dropbox, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - )
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 42.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 cs)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Mozilla Thunderbird 38.4.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 38.4.0 (x86 cs)) (Version: 38.4.0 - Mozilla)
Nero 12 Essentials Toshiba (HKLM-x32\...\{BA8958DC-ADD7-41E5-8436-5883C7E871C7}) (Version: 12.0.00400 - Nero AG)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Premium Sound HD (HKLM\...\{94F03B8E-CB73-4653-AFE9-79112C01FED2}) (Version: 1.12.4600 - SRS Labs, Inc.)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Realtek Bluetooth Filter Driver Package (HKLM-x32\...\InstallShield_{0CC0980D-811D-43B8-A455-8D150EB5BC0D}) (Version: 12.24.2012.0802 - REALTEK Semiconductor Corp)
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.30136 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0020 - REALTEK Semiconductor Corp.)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
STOPzilla AntiVirus 7 (HKLM-x32\...\{9BF28B89-3A53-4A4F-ACEF-7392D37853E4}) (Version: 7.0.3.111 - iS3, Inc.)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.16.3 - Synaptics Incorporated)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.00.6425 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
Toshiba Password Utility (HKLM-x32\...\InstallShield_{6D35FF17-A8B3-43D3-917E-5A1F2C3FB628}) (Version: 2.00.910 - Toshiba Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.8.17.640104 - Toshiba Corporation)
Toshiba Places Icon Utility (HKLM\...\{C991A8C4-307C-4FDD-8AAE-A1BF44881E95}) (Version: 2.1.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM\...\{B8C8422F-01F1-4791-B084-047AAFF9BFCC}) (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0012 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.6.0 - Toshiba Europe GmbH)
TOSHIBA VIDEO PLAYER (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 5.3.49.124 - Toshiba Corporation)
UsbFix (HKLM-x32\...\Usbfix) (Version: 8.158 - El Desaparecido - www.usbfix.net - www.sosvirus.net)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Welcome App (Start-up experience) (x32 Version: 12.0.13000 - Nero AG) Hidden
Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (07/11/2012 2.3.13.3) (HKLM\...\57F58DC141BEB353704E041792E5B00606694FEA) (Version: 07/11/2012 2.3.13.3 - Realtek Semiconductor Corp.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_CZ_is1) (Version: 17.0.1.12 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002_Classes\CLSID\{00000001-0E3A-4123-8B32-4B68A91E104A}\InprocServer32 -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIBasePlace.dll (Toshiba Corporation)
CustomCLSID: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_2\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-10-01 23:22 - 00000828 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {088BFCCB-B975-48AE-BEB0-10FD2C66ADCE} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.)
Task: {09426F76-ABA7-452C-B6FA-0B34A3EF412B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1E80317B-0B48-4B74-ADB4-75755098EBE4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {2F1B0B00-D697-4D74-9454-94F91F571AD8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {41DF44FE-5377-45A8-9B60-11B7580D0E3E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {444804B7-BDE7-4498-A527-D247C654E71A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {466BB40C-DF52-4AAE-9B04-0EECFDF24DFE} - System32\Tasks\{9AC0B91D-0924-4AA5-9331-CC7E0EFC6CBD} => pcalua.exe -a C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IINSIKE.EXE -c /R /APD /P:"EPSON XP-302 303 305 306 Series"
Task: {61193CCC-ED8C-47B3-82FF-25FF6785EF7D} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.)
Task: {63C00ED0-F266-4133-8BB8-E8AF2553F0BC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {6815D23F-0A28-4223-BCEF-3D437E837B79} - System32\Tasks\DropboxSetup => C:\Program Files (x86)\Dropbox\DropboxSetup\DropboxSetup.exe [2015-06-10] ()
Task: {7A9BC198-F0EC-4F6B-BF7E-0C4738D9E3F9} - System32\Tasks\{91ABBB02-8F81-41DA-B0B5-A6F45252D6FB} => Firefox.exe hxxp://ui.skype.com/ui/0/7.4.0.102/cs/abandoninstall?source=lightinstaller&page=tsBing
Task: {A8490E0D-7960-437D-B3C7-0D8DAFA45FB9} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A96EDADC-1714-478C-843A-92D7CA4337C4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {BD5D8866-241F-4A6B-809D-212FE4EAD7A1} - System32\Tasks\{0479BA9E-8358-4C3C-BA81-09FEA075E199} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" -c /uninstall PROPLUS /dll OSETUP.DLL
Task: {C9A23F09-15D7-4B8D-9E85-F59C90FE5B3D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-12] (Microsoft Corporation)
Task: {D603F28F-7EDF-40A3-A082-ECA90F830097} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {DC0AA52E-5A4B-4738-87A8-78916D01E24C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E88C4B73-D263-4DDE-A4BB-DD017E72F329} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {F4D57118-14FC-4A59-8703-EE71C2E68EB6} - System32\Tasks\Opera scheduled Autoupdate 1432822515 => C:\Program Files (x86)\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {FC7230FC-BC8A-4B40-968A-95A23FFA95F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-03] (Avast Software s.r.o.)
Task: {FE4D3538-DFE5-4C5C-8C34-3771B589A2D0} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2011-10-13 23:38 - 2011-10-13 23:38 - 00156672 _____ () C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
2015-05-15 15:26 - 2015-05-15 15:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 15:26 - 2015-05-15 15:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-07-19 03:38 - 2012-07-19 03:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-19 03:38 - 2012-07-19 03:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2012-08-14 04:13 - 2012-08-14 04:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2015-12-08 06:02 - 2015-12-08 06:03 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-07 20:02 - 2015-12-07 20:02 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-12-07 20:02 - 2015-12-07 20:02 - 11526656 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-12-07 19:57 - 2015-12-07 19:59 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-04-25 23:09 - 2015-04-25 23:09 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-25 23:09 - 2015-04-25 23:09 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-08 00:59 - 2015-12-08 00:59 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120702\algo.dll
2015-12-08 19:13 - 2015-12-08 19:13 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120800\algo.dll
2012-12-15 06:58 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-05-14 16:23 - 2014-09-09 12:30 - 00603648 _____ () C:\Program Files\Zoner\Photo Studio 17\Program32\SpiderMonkey.dll
2015-04-25 23:09 - 2015-04-25 23:09 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-12-08 06:02 - 2015-12-08 06:03 - 00152064 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-12-08 06:02 - 2015-12-08 06:03 - 18906624 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-12-03 12:10 - 2015-12-03 12:10 - 00153768 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-12-03 12:10 - 2015-12-03 12:10 - 00023208 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\...\StartupApproved\Run: => "AdobeBridge"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B1AE49A2-C3AD-4C76-B626-62CB66A79613}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{A5DA156F-4F95-44CC-92E4-285645A3EC60}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BFEB5D35-BF98-48FA-826C-C22AF56C82C0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{3D859A56-E978-443A-AC26-9A84213D1DAA}C:\program files (x86)\ps3 media server\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ps3 media server\jre\bin\javaw.exe
FirewallRules: [TCP Query User{77876400-4673-41E4-9D89-2F79B99EC043}C:\program files (x86)\ps3 media server\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ps3 media server\jre\bin\javaw.exe
FirewallRules: [{B359046E-94AE-4F2A-B2CC-28E09C015AE2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{1C344238-4B12-4E05-A893-7F3B191BFCE4}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{608D43D0-C4DB-479D-A055-A34BB2A42D20}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{D2DD30A2-1328-4D39-BD28-07CDD126583A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EC7EC46B-0F13-4284-B097-2DFFC579BCC7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9DD1BEF6-1D65-441F-85F5-FBFED6C4EE1C}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe
FirewallRules: [{E37BDA05-09F9-4BF5-9ED4-9ABC22EA506D}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe
FirewallRules: [{C602A751-DD65-4EB5-9872-60D47123BD6D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{EFEB7603-8D93-49C3-B5B6-816FD28171F1}] => (Allow) LPort=2869
FirewallRules: [{69A19BD2-DC41-4E42-8672-9D6A2BC7DF91}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{3F09FB4B-B7F5-4B63-AC4E-5C8B50057008}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{995C7B10-608D-491A-9F05-6F82B86B4D64}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{100D9D2F-7FB4-4CAB-A14E-4090143A62DF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2348FA52-DFAC-47E5-8817-2C6106A3877A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D745997B-F22D-468C-95DF-E110B38F25ED}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{28D1CFCE-8791-4C85-94A1-DE9A9A17ACDD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5F919D29-9522-4ABE-AB65-5975E41C0D5F}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{21DFF3D0-B52D-4E5B-9387-A083F068FD5E}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [TCP Query User{F1AF2599-7DAA-4741-AD5D-BB4ED84BA14C}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{16F6FA46-9294-4C7C-8D58-1DF7E1D375AC}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{822C082E-5491-47EB-8B07-1AC2DF498E4E}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{06BCAAA5-D81B-4B6D-B52E-969BB0D9C6BF}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{C0D01377-0E84-45D1-AA19-A799F9E74A35}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe
FirewallRules: [TCP Query User{DD7FB2EB-640B-4AD0-8FC6-FD3F39DEE917}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{05A5CA30-E34B-49CE-B1F7-7F7E8F1494FA}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{134F1FFA-6367-4938-B6CD-A0E63F9C2D6D}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{CB7F2434-8C02-41C6-8979-BF61FDA076CE}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (12/08/2015 06:14:41 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 06:02:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:56:46 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:55:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:49:41 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:40:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:09:21 AM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (12/08/2015 05:03:26 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: STOPzilla AntiVirus 7 -- Error 1706. No valid source could be found for product STOPzilla AntiVirus 7. The Windows Installer cannot continue.

Error: (12/08/2015 05:03:15 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: STOPzilla AntiVirus 7 -- Error 1706. No valid source could be found for product STOPzilla AntiVirus 7. The Windows Installer cannot continue.

Error: (12/08/2015 05:03:10 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: NT AUTHORITY)
Description: Aplikaci nebo službu STOPzilla Service nelze ukončit.

System errors:
=============
Error: (12/08/2015 07:15:32 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníAktivace{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)Není k dispoziciNení k dispozici

Error: (12/08/2015 10:11:38 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníAktivace{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)Není k dispoziciNení k dispozici

Error: (12/08/2015 06:46:49 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: specifické pro aplikaciMístníAktivace{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (pomocí LRPC)Není k dispoziciNení k dispozici

Error: (12/08/2015 05:29:05 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

Error: (12/08/2015 05:22:02 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/08/2015 05:22:02 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/08/2015 05:22:02 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/08/2015 05:22:02 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/08/2015 05:22:00 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/08/2015 05:22:00 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

CodeIntegrity:
===================================
Date: 2015-12-08 05:08:41.903
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-12-08 05:04:11.792
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-12-08 04:34:28.510
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU 1000M @ 1.80GHz
Percentage of memory in use: 39%
Total physical RAM: 6027.22 MB
Available physical RAM: 3649.73 MB
Total Virtual: 7691.22 MB
Available Virtual: 5267.9 MB

==================== Drives ================================

Drive c: (TI30983100B) (Fixed) (Total:454.25 GB) (Free:174.15 GB) NTFS
Drive f: (VLACH_USB) (Removable) (Total:28.89 GB) (Free:5.99 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 28.9 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=28.9 GB) - (Type=0C)

==================== End of Addition.txt ============================

#6 Příspěvek od **altrok** » 08 pro 2015 22:44

Odinstalujte STOPzilla AntiVirus - muze kolidovat s Avastem.

Mate vypnutou funkci bodu obnoveni - velice doporucuji tuto funkci zapnout.

Kliknete pravym na Tento pocitac -> Vlastnosti -> Upresnit nastaveni systemu -> nahore zalozka Ochrana systemu -> Konfigurovat -> vyberte Obnovit nastaveni systemu a predchozi verze souboru a ulozte klikem na Pouzit.
Pokud si chcete hrat s velikosti mista na disku, ktere je vyuzito body obnoveni, nedoporucuji tuto hranici snizovat pod 1 GB. Pokud mate mista na disku dost, ponechte defaultni 3-5% vyuziti disku.

Pote dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pozn. pri druhem a dalsim spusteni je pro vytvoreni logu Addition.txt nutne tuto volbu explicitne zatrhnout pred zacatkem skenu.

gerard3866 · #7 Příspěvek od **gerard3866** » 09 pro 2015 08:08

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015
Ran by Toshiba (administrator) on TOSHIBA (09-12-2015 08:02:18)
Running from C:\Users\Toshiba\Desktop
Loaded Profiles: Toshiba (Available Profiles: Toshiba & Administrator)
Platform: Windows 10 Home Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Společnost TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\Temp\4553D054-9B61-4ADF-BB5A-298DE4721824\DismHost.exe
(Microsoft Corporation) C:\Windows\System32\SrTasks.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-07-27] (SRS Labs, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3946184 2015-08-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [ToshibaDynamicIconUtility] => C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [1498624 2012-08-09] (Toshiba)
HKLM-x32\...\Run: [TPUReg(x86)] => "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [6884352 2012-08-23] (Pegatron Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36713096 2015-11-05] (Dropbox, Inc.)
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-25] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{15f332ce-609a-4172-aca1-4b99f0f67ad9}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002 -> {35B4F660-AECA-4E1A-91FC-32976F340D4A} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=Searchmodule_1
SearchScopes: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002 -> {5747DE6D-E89F-4445-8B8B-6440DE679436} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-25] (Avast Software s.r.o.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-25] (Avast Software s.r.o.)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002 -> hxxp://www.delta-homes.com/?type=hp&ts=1444730 ... X92C3YVO1F

FireFox:
========
FF ProfilePath: C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\9e1joyvy.default
FF Homepage: hxxps://www.seznam.cz/
FF Session Restore: -> is enabled.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-11-05] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-11-05] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-07-24] (Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Tab Mix Plus - C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\9e1joyvy.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-09-02]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-03] [not signed]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-25]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-25] (Avast Software s.r.o.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-15] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-15] (Dropbox, Inc.)
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-11-11] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-08-04] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S2 RtkAudioService; "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-25] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-29] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-25] ()
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
R3 RtkBtFilter2; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [65792 2015-12-07] (Realtek Microelectronics)
R3 rtwlane_13; C:\Windows\System32\drivers\rtwlane_13.sys [3749888 2015-10-30] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-08-04] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [54424 2015-12-07] (Toshiba Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-09 07:51 - 2015-12-09 07:51 - 00000000 ___HD C:\OneDriveTemp
2015-12-08 20:18 - 2015-12-08 20:19 - 00035803 _____ C:\Users\Toshiba\Desktop\Addition.txt
2015-12-08 20:16 - 2015-12-09 08:02 - 00016966 _____ C:\Users\Toshiba\Desktop\FRST.txt
2015-12-08 20:16 - 2015-12-09 08:02 - 00000000 ____D C:\FRST
2015-12-08 20:16 - 2015-12-08 20:16 - 02369024 _____ (Farbar) C:\Users\Toshiba\Desktop\FRST64.exe
2015-12-08 20:11 - 2015-12-08 20:11 - 00015327 _____ C:\Users\Toshiba\Desktop\LM.bat
2015-12-08 05:20 - 2015-12-08 05:20 - 00000000 ____D C:\Users\Toshiba\AppData\Local\ActiveSync
2015-12-08 05:18 - 2015-12-08 05:18 - 00000020 ___SH C:\Users\Toshiba\ntuser.ini
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Šablony
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Poslední
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Okolní síť
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Dokumenty
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\Data aplikací
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-12-08 05:17 - 2015-12-08 05:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2015-12-08 05:08 - 2015-12-08 05:08 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-08 04:53 - 2015-12-08 04:53 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-08 04:46 - 2015-12-08 04:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-08 04:43 - 2015-12-09 07:50 - 00000000 ____D C:\Users\Toshiba
2015-12-08 04:43 - 2015-12-08 05:03 - 00000000 ____D C:\Users\Administrator
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Šablony
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Soubory cookie
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Poslední
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Okolní tiskárny
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Okolní síť
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Nabídka Start
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Dokumenty
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Documents\Obrázky
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Documents\Hudba
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Documents\Filmy
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\Data aplikací
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Toshiba\AppData\Local\Data aplikací
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Šablony
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Soubory cookie
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Poslední
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Okolní tiskárny
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Okolní síť
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Nabídka Start
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Dokumenty
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Documents\Obrázky
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Documents\Hudba
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Documents\Filmy
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\Data aplikací
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-12-08 04:43 - 2015-12-08 04:43 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Data aplikací
2015-12-08 04:39 - 2015-12-08 04:39 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-12-08 04:39 - 2015-12-08 04:39 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2015-12-08 04:38 - 2015-12-08 04:46 - 00000000 ____D C:\Program Files\Intel
2015-12-08 04:38 - 2015-12-08 04:38 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-12-08 04:38 - 2015-12-08 04:38 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-12-08 04:38 - 2015-12-08 04:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-08 04:38 - 2015-12-08 04:38 - 00000000 ____D C:\Program Files\Synaptics
2015-12-08 04:38 - 2015-12-08 04:38 - 00000000 ____D C:\Program Files\Realtek
2015-12-08 04:38 - 2015-11-11 16:14 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-12-08 04:38 - 2015-11-11 16:14 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-12-08 04:35 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-08 04:32 - 2015-12-08 04:58 - 04843688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-08 04:30 - 2015-12-08 06:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-08 04:23 - 2015-12-08 04:24 - 00000000 ____D C:\Windows.old
2015-12-08 04:22 - 2015-12-08 04:22 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 22394880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 13380608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 12124672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 03670832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-08 04:22 - 2015-12-08 04:22 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-08 04:22 - 2015-12-08 04:22 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-08 04:22 - 2015-12-08 04:22 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-08 04:22 - 2015-12-08 04:22 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-08 04:22 - 2015-12-08 04:22 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-08 04:22 - 2015-12-08 04:22 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-08 04:22 - 2015-12-08 04:22 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-08 04:22 - 2015-12-08 04:22 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-08 04:17 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-08 04:17 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-08 04:17 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-08 04:17 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-08 04:17 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-08 04:03 - 2015-12-08 04:03 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-08 03:59 - 2015-12-08 03:59 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-08 03:59 - 2015-12-08 03:59 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-08 03:59 - 2015-12-08 03:59 - 00000000 ____D C:\Program Files\MSBuild
2015-12-08 03:59 - 2015-12-08 03:59 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-08 03:59 - 2015-12-08 03:59 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-08 03:58 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-08 03:58 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-08 03:58 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-08 03:58 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-08 03:58 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-08 03:58 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-07 14:31 - 2015-12-08 20:11 - 00029696 _____ C:\Users\Toshiba\AppData\Local\MSGBOX.EXE
2015-12-07 14:25 - 2015-12-07 14:25 - 00065792 _____ (Realtek Microelectronics) C:\WINDOWS\system32\Drivers\RtkBtfilter.sys
2015-12-07 14:25 - 2015-12-07 14:25 - 00054424 _____ (Toshiba Corporation) C:\WINDOWS\system32\Drivers\Thotkey.sys
2015-12-07 14:25 - 2015-12-07 14:25 - 00049528 _____ C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll
2015-12-07 14:25 - 2015-12-07 14:25 - 00040984 _____ C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll
2015-12-07 14:25 - 2015-12-07 14:25 - 00037884 _____ C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll
2015-12-05 22:40 - 2015-12-05 22:40 - 00000000 ____D C:\Users\Toshiba\Impostazioni locali
2015-12-05 21:00 - 2015-12-05 21:01 - 03061488 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\Toshiba\Downloads\UsbFix_2016_8.160.exe
2015-12-04 10:34 - 2015-12-07 14:27 - 00000000 ____D C:\UsbFix
2015-12-03 16:36 - 2015-12-03 16:36 - 00000000 ____D C:\Users\Toshiba\Documents\FormatFactory
2015-12-03 12:10 - 2015-12-04 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-12-02 21:58 - 2015-12-02 21:58 - 00000000 ____D C:\Program Files (x86)\ESET
2015-11-30 15:00 - 2015-11-30 15:00 - 06441113 _____ C:\Users\Toshiba\Desktop\Call-Recorder---ACR-Premium-[4allmobile.eu].apk
2015-11-29 15:09 - 2015-12-03 16:33 - 00000000 ____D C:\Users\Toshiba\Desktop\Toshiba
2015-11-26 12:21 - 2015-11-26 12:21 - 00114203 _____ C:\Users\Toshiba\Desktop\notebook.pdf
2015-11-26 12:21 - 2015-11-26 12:21 - 00068921 _____ C:\Users\Toshiba\Desktop\tiskárna.pdf
2015-11-18 06:50 - 2015-11-18 06:53 - 00000000 ____D C:\Users\Toshiba\Desktop\mt
2015-11-11 16:15 - 2015-11-11 16:15 - 00188884 _____ C:\WINDOWS\system32\resTHA.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00181524 _____ C:\WINDOWS\system32\resELL.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00177300 _____ C:\WINDOWS\system32\resRUS.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00163044 _____ C:\WINDOWS\system32\resARA.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00162500 _____ C:\WINDOWS\system32\resHEB.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00162484 _____ C:\WINDOWS\system32\resJPN.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00157860 _____ C:\WINDOWS\system32\resHUN.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00157844 _____ C:\WINDOWS\system32\resFRA.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00156100 _____ C:\WINDOWS\system32\resKOR.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00156020 _____ C:\WINDOWS\system32\resDEU.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00155988 _____ C:\WINDOWS\system32\resITA.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00155828 _____ C:\WINDOWS\system32\resROM.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00155716 _____ C:\WINDOWS\system32\resESN.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00155268 _____ C:\WINDOWS\system32\resPLK.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00155172 _____ C:\WINDOWS\system32\resSKY.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00154980 _____ C:\WINDOWS\system32\resNLD.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00154372 _____ C:\WINDOWS\system32\resPTB.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00154260 _____ C:\WINDOWS\system32\resTRK.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00154212 _____ C:\WINDOWS\system32\resCSY.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00154084 _____ C:\WINDOWS\system32\resPTG.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00153620 _____ C:\WINDOWS\system32\resFIN.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00153236 _____ C:\WINDOWS\system32\resHRV.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00152772 _____ C:\WINDOWS\system32\resSVE.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00152644 _____ C:\WINDOWS\system32\resSLV.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00151668 _____ C:\WINDOWS\system32\resNOR.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00151156 _____ C:\WINDOWS\system32\resDAN.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00149812 _____ C:\WINDOWS\system32\resENU.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00148052 _____ C:\WINDOWS\system32\resCHT.cui
2015-11-11 16:15 - 2015-11-11 16:15 - 00147188 _____ C:\WINDOWS\system32\resCHS.cui
2015-11-11 16:14 - 2015-11-11 16:14 - 22915568 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 17846272 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 12335600 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 11905432 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 11053048 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 10574992 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 08528896 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 06513648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 04637640 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 04371888 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 04369816 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 04025864 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 03797424 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2015-11-11 16:14 - 2015-11-11 16:14 - 03672344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 02813952 _____ C:\WINDOWS\system32\iglhxa64.cpa
2015-11-11 16:14 - 2015-11-11 16:14 - 02506960 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 02037232 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 01995760 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 01793024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 01768432 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 01470472 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 01156000 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 01151840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00970656 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00866824 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00680432 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00661000 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00618992 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00617992 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00556960 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00554928 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00541600 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00469216 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00444832 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00410528 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00409520 _____ (Intel Corporation) C:\WINDOWS\system32\CustomModeApp.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00395168 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTray.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00394224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00387056 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00378824 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00374272 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00357912 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00330136 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00329216 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00316245 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2015-11-11 16:14 - 2015-11-11 16:14 - 00296944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00291744 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00285184 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00265712 _____ C:\WINDOWS\system32\igfxCPL.cpl
2015-11-11 16:14 - 2015-11-11 16:14 - 00262640 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00258456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00232960 _____ C:\WINDOWS\system32\igdde64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00230384 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00229664 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00225288 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00216552 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4276.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00205728 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00199088 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00194560 _____ C:\WINDOWS\SysWOW64\igdde32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00194368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00193536 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00192520 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00172528 _____ C:\WINDOWS\system32\igdail64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00169368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00165808 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2015-11-11 16:14 - 2015-11-11 16:14 - 00163840 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00154096 _____ C:\WINDOWS\SysWOW64\igdail32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00143368 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00109064 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00102912 _____ C:\WINDOWS\system32\IccLibDll_x64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00096752 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00078336 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00069616 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00044025 _____ C:\WINDOWS\system32\iglhxo64.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00043816 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00043494 _____ C:\WINDOWS\system32\iglhxc64.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00043298 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00043256 _____ C:\WINDOWS\system32\iglhxg64.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00042232 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00042079 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00039424 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00020976 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00018944 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00018944 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00018944 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00015344 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00013824 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2015-11-11 16:14 - 2015-11-11 16:14 - 00002560 _____ C:\WINDOWS\system32\iglhxs64.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2015-11-11 16:14 - 2015-11-11 16:14 - 00000895 _____ C:\WINDOWS\system32\Gfxv2_0.exe.config
2015-11-11 16:14 - 2015-11-11 16:14 - 00000895 _____ C:\WINDOWS\system32\DPTopologyAppv2_0.exe.config
2015-11-11 16:14 - 2015-11-11 16:14 - 00000895 _____ C:\WINDOWS\system32\CustomModeAppv2_0.exe.config
2015-11-11 16:14 - 2015-11-11 16:14 - 00000889 _____ C:\WINDOWS\system32\Gfxv4_0.exe.config
2015-11-11 16:14 - 2015-11-11 16:14 - 00000889 _____ C:\WINDOWS\system32\DPTopologyApp.exe.config
2015-11-11 16:14 - 2015-11-11 16:14 - 00000889 _____ C:\WINDOWS\system32\CustomModeApp.exe.config
2015-11-11 10:56 - 2015-12-08 04:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-09 08:00 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-09 07:59 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-09 07:56 - 2015-10-14 13:51 - 00000000 ____D C:\ProgramData\STOPzilla!
2015-12-09 07:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-09 07:53 - 2015-06-15 20:43 - 00000926 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2015-12-09 07:52 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-09 07:51 - 2014-06-28 09:10 - 00000000 __RDO C:\Users\Toshiba\OneDrive
2015-12-09 07:50 - 2015-07-31 13:58 - 00000000 __SHD C:\Users\Toshiba\IntelGraphicsProfiles
2015-12-09 07:50 - 2015-06-15 20:43 - 00000922 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2015-12-08 20:19 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-08 20:18 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-08 20:16 - 2015-04-09 15:59 - 00000000 ____D C:\Users\Toshiba\Desktop\antivir
2015-12-08 17:02 - 2015-05-28 15:15 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-08 09:46 - 2015-10-30 19:31 - 00751272 _____ C:\WINDOWS\system32\perfh005.dat
2015-12-08 09:46 - 2015-10-30 19:31 - 00150860 _____ C:\WINDOWS\system32\perfc005.dat
2015-12-08 09:46 - 2015-07-31 13:36 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-08 05:41 - 2015-04-25 21:01 - 00000000 ____D C:\Users\Toshiba\AppData\Local\Packages
2015-12-08 05:39 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-08 05:29 - 2015-07-31 14:10 - 00002379 _____ C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-08 05:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-08 05:20 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-08 05:20 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-08 05:19 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-08 05:19 - 2013-08-02 06:16 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-08 05:18 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-08 05:18 - 2015-07-31 13:58 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-12-08 05:17 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-08 05:16 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-08 05:16 - 2015-04-27 16:23 - 00064773 _____ C:\WINDOWS\diagwrn.xml
2015-12-08 05:16 - 2015-04-27 16:23 - 00064773 _____ C:\WINDOWS\diagerr.xml
2015-12-08 05:13 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-08 05:09 - 2015-05-09 14:25 - 00002414 _____ C:\WINDOWS\System32\Tasks\{0479BA9E-8358-4C3C-BA81-09FEA075E199}
2015-12-08 05:09 - 2015-05-01 16:01 - 00002282 _____ C:\WINDOWS\System32\Tasks\{91ABBB02-8F81-41DA-B0B5-A6F45252D6FB}
2015-12-08 05:09 - 2015-04-27 16:57 - 00023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-08 05:09 - 2015-04-25 21:09 - 00002940 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1889331998-2119579927-1594466533-1002
2015-12-08 05:09 - 2012-12-15 07:27 - 00002878 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1889331998-2119579927-1594466533-500
2015-12-08 05:08 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-08 05:08 - 2015-09-30 17:37 - 00002346 _____ C:\WINDOWS\System32\Tasks\{9AC0B91D-0924-4AA5-9331-CC7E0EFC6CBD}
2015-12-08 05:08 - 2015-06-15 20:43 - 00003462 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2015-12-08 05:08 - 2015-06-15 20:43 - 00003234 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2015-12-08 05:08 - 2015-06-15 20:41 - 00002336 _____ C:\WINDOWS\System32\Tasks\DropboxSetup
2015-12-08 05:08 - 2015-05-28 15:15 - 00003280 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1432822515
2015-12-08 05:08 - 2015-04-25 23:10 - 00003160 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-08 04:57 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-08 04:57 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-08 04:57 - 2015-10-03 09:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Printer Uninstaller
2015-12-08 04:57 - 2015-07-31 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-08 04:57 - 2015-06-07 11:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-12-08 04:57 - 2015-05-28 17:18 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2015-12-08 04:57 - 2015-05-12 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2015-12-08 04:57 - 2015-05-09 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-12-08 04:57 - 2015-04-28 23:10 - 00000000 ____D C:\WINDOWS\cs
2015-12-08 04:57 - 2015-04-25 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-12-08 04:57 - 2015-04-25 22:42 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-12-08 04:57 - 2015-04-25 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-12-08 04:57 - 2012-12-15 07:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
2015-12-08 04:57 - 2012-08-28 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2015-12-08 04:53 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-08 04:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-08 04:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-12-08 04:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-12-08 04:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-08 04:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-12-08 04:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-12-08 04:50 - 2012-12-15 07:06 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-12-08 04:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-12-08 04:49 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-08 04:49 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-08 04:47 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\ShellNew
2015-12-08 04:47 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-08 04:47 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-08 04:47 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2015-12-08 04:47 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-08 04:47 - 2015-08-29 09:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-08 04:47 - 2015-06-04 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-12-08 04:47 - 2015-05-17 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-12-08 04:47 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-12-08 04:47 - 2012-08-28 19:46 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2015-12-08 04:46 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-08 04:44 - 2012-08-28 19:43 - 00000000 ____D C:\Users\Administrator\AppData\Local\Packages
2015-12-08 04:42 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-08 04:32 - 2015-10-30 19:41 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-08 04:30 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-08 04:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-08 04:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-08 04:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-08 04:23 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-08 04:23 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-08 04:18 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\OCR
2015-12-08 04:16 - 2015-10-30 19:35 - 00000000 ____D C:\Program Files\Windows Journal
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-12-08 04:16 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-12-08 04:16 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-12-08 04:16 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\servicing
2015-12-08 03:59 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-08 03:59 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-08 03:31 - 2015-10-30 20:11 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-07 13:18 - 2015-09-25 10:08 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\Audacity
2015-12-06 22:55 - 2013-10-27 10:27 - 00000000 ____D C:\Users\Toshiba\Documents\Peťa
2015-12-05 21:38 - 2015-04-25 21:01 - 00000000 ____D C:\Users\Toshiba\AppData\Local\VirtualStore
2015-12-05 21:17 - 2015-10-19 15:19 - 00000000 ____D C:\Program Files\trend micro
2015-12-05 21:07 - 2015-04-09 17:09 - 00000000 ____D C:\AdwCleaner
2015-12-05 08:57 - 2015-04-25 21:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-03 23:22 - 2013-08-12 09:49 - 00000000 ____D C:\FFOutput
2015-12-03 16:25 - 2015-07-15 21:39 - 00000000 ____D C:\Users\Toshiba\Desktop\Time-lapse
2015-12-03 16:15 - 2015-04-25 23:13 - 00000000 ____D C:\Users\Toshiba\AppData\Roaming\vlc
2015-11-14 19:22 - 2015-11-03 21:10 - 00000000 ____D C:\Users\Toshiba\Desktop\PunkBull
2015-11-12 12:40 - 2015-04-27 08:28 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-12 12:36 - 2015-04-27 08:28 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 10:56 - 2015-06-15 20:41 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-11-10 09:14 - 2015-10-24 23:11 - 00000000 ____D C:\Users\Toshiba\Desktop\Silvestr 2015

==================== Files in the root of some directories =======

2015-12-07 14:31 - 2015-12-08 20:11 - 0029696 _____ () C:\Users\Toshiba\AppData\Local\MSGBOX.EXE
2015-09-07 22:09 - 2015-09-07 22:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Toshiba\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpexzaog.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-12-08 04:32

==================== End of FRST.txt ============================

gerard3866 · #8 Příspěvek od **gerard3866** » 09 pro 2015 08:08

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-12-2015
Ran by Toshiba (2015-12-09 08:03:45)
Running from C:\Users\Toshiba\Desktop
Windows 10 Home (X64) (2015-12-08 04:17:43)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1889331998-2119579927-1594466533-500 - Administrator - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-1889331998-2119579927-1594466533-503 - Limited - Disabled)
gerard (S-1-5-21-1889331998-2119579927-1594466533-1011 - Limited - Enabled)
Guest (S-1-5-21-1889331998-2119579927-1594466533-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1889331998-2119579927-1594466533-1009 - Limited - Enabled)
Toshiba (S-1-5-21-1889331998-2119579927-1594466533-1002 - Administrator - Enabled) => C:\Users\Toshiba

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: STOPzilla AntiVirus (Disabled - Out of date) {581418F3-DCB4-03A7-8970-1C2B5929FC27}
AS: STOPzilla AntiVirus (Disabled - Out of date) {E375F917-FA8E-0C29-B3C0-275922AEB69A}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe After Effects CS4 (HKLM-x32\...\Adobe_3dcb365ab9e01871fb8c6f27b0ea079) (Version: 9 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon LBP7010C/7018C (HKLM\...\Canon LBP7010C/7018C) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.11 - Dropbox, Inc.)
Dropbox Setup (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 1.0.0.2 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.33 - Dropbox, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - )
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 42.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 cs)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Mozilla Thunderbird 38.4.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 38.4.0 (x86 cs)) (Version: 38.4.0 - Mozilla)
Nero 12 Essentials Toshiba (HKLM-x32\...\{BA8958DC-ADD7-41E5-8436-5883C7E871C7}) (Version: 12.0.00400 - Nero AG)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Premium Sound HD (HKLM\...\{94F03B8E-CB73-4653-AFE9-79112C01FED2}) (Version: 1.12.4600 - SRS Labs, Inc.)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Realtek Bluetooth Filter Driver Package (HKLM-x32\...\InstallShield_{0CC0980D-811D-43B8-A455-8D150EB5BC0D}) (Version: 12.24.2012.0802 - REALTEK Semiconductor Corp)
Realtek Bluetooth Filter Driver Package (x32 Version: 12.24.2012.0802 - REALTEK Semiconductor Corp) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.30136 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0020 - REALTEK Semiconductor Corp.)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.16.3 - Synaptics Incorporated)
TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.00.0007.00002 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.0.0.6415 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.00.6425 - Toshiba Corporation)
TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)
Toshiba Password Utility (HKLM-x32\...\InstallShield_{6D35FF17-A8B3-43D3-917E-5A1F2C3FB628}) (Version: 2.00.910 - Toshiba Corporation)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.8.17.640104 - Toshiba Corporation)
Toshiba Places Icon Utility (HKLM\...\{C991A8C4-307C-4FDD-8AAE-A1BF44881E95}) (Version: 2.1.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.2.0.54043005 - Toshiba Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.2.2.00 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM\...\{B8C8422F-01F1-4791-B084-047AAFF9BFCC}) (Version: 2.4.4 - TOSHIBA)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0012 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.00.0002.32002 - Toshiba Corporation)
Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.6.0 - Toshiba Europe GmbH)
TOSHIBA VIDEO PLAYER (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 5.3.49.124 - Toshiba Corporation)
UsbFix (HKLM-x32\...\Usbfix) (Version: 8.158 - El Desaparecido - www.usbfix.net - www.sosvirus.net)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Welcome App (Start-up experience) (x32 Version: 12.0.13000 - Nero AG) Hidden
Windows Driver Package - Realtek Semiconductor Corp. RtkBtFilter Bluetooth (07/11/2012 2.3.13.3) (HKLM\...\57F58DC141BEB353704E041792E5B00606694FEA) (Version: 07/11/2012 2.3.13.3 - Realtek Semiconductor Corp.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_CZ_is1) (Version: 17.0.1.12 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002_Classes\CLSID\{00000001-0E3A-4123-8B32-4B68A91E104A}\InprocServer32 -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIBasePlace.dll (Toshiba Corporation)
CustomCLSID: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Toshiba\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_2\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

09-12-2015 07:54:26 Removed STOPzilla AntiVirus 7.

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-10-01 23:22 - 00000828 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {088BFCCB-B975-48AE-BEB0-10FD2C66ADCE} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.)
Task: {09426F76-ABA7-452C-B6FA-0B34A3EF412B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1E80317B-0B48-4B74-ADB4-75755098EBE4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {2F1B0B00-D697-4D74-9454-94F91F571AD8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {41DF44FE-5377-45A8-9B60-11B7580D0E3E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {444804B7-BDE7-4498-A527-D247C654E71A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {466BB40C-DF52-4AAE-9B04-0EECFDF24DFE} - System32\Tasks\{9AC0B91D-0924-4AA5-9331-CC7E0EFC6CBD} => pcalua.exe -a C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IINSIKE.EXE -c /R /APD /P:"EPSON XP-302 303 305 306 Series"
Task: {61193CCC-ED8C-47B3-82FF-25FF6785EF7D} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.)
Task: {63C00ED0-F266-4133-8BB8-E8AF2553F0BC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {6815D23F-0A28-4223-BCEF-3D437E837B79} - System32\Tasks\DropboxSetup => C:\Program Files (x86)\Dropbox\DropboxSetup\DropboxSetup.exe [2015-06-10] ()
Task: {7A9BC198-F0EC-4F6B-BF7E-0C4738D9E3F9} - System32\Tasks\{91ABBB02-8F81-41DA-B0B5-A6F45252D6FB} => Firefox.exe hxxp://ui.skype.com/ui/0/7.4.0.102/cs/abandoninstall?source=lightinstaller&page=tsBing
Task: {A8490E0D-7960-437D-B3C7-0D8DAFA45FB9} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A96EDADC-1714-478C-843A-92D7CA4337C4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {BD5D8866-241F-4A6B-809D-212FE4EAD7A1} - System32\Tasks\{0479BA9E-8358-4C3C-BA81-09FEA075E199} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" -c /uninstall PROPLUS /dll OSETUP.DLL
Task: {C9A23F09-15D7-4B8D-9E85-F59C90FE5B3D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-12] (Microsoft Corporation)
Task: {D603F28F-7EDF-40A3-A082-ECA90F830097} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {DC0AA52E-5A4B-4738-87A8-78916D01E24C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E88C4B73-D263-4DDE-A4BB-DD017E72F329} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {F4D57118-14FC-4A59-8703-EE71C2E68EB6} - System32\Tasks\Opera scheduled Autoupdate 1432822515 => C:\Program Files (x86)\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {FC7230FC-BC8A-4B40-968A-95A23FFA95F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-03] (Avast Software s.r.o.)
Task: {FE4D3538-DFE5-4C5C-8C34-3771B589A2D0} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2011-10-13 23:38 - 2011-10-13 23:38 - 00156672 _____ () C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
2015-05-15 15:26 - 2015-05-15 15:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 15:26 - 2015-05-15 15:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-08 06:02 - 2015-12-08 06:03 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-08 04:22 - 2015-12-08 04:22 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-07-19 03:38 - 2012-07-19 03:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-19 03:38 - 2012-07-19 03:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2012-08-14 04:13 - 2012-08-14 04:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2015-04-25 23:09 - 2015-04-25 23:09 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-25 23:09 - 2015-04-25 23:09 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-08 00:59 - 2015-12-08 00:59 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120702\algo.dll
2015-12-08 19:13 - 2015-12-08 19:13 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120800\algo.dll
2012-12-15 06:58 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-12-08 06:02 - 2015-12-08 06:03 - 00152064 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-05-14 16:23 - 2014-09-09 12:30 - 00603648 _____ () C:\Program Files\Zoner\Photo Studio 17\Program32\SpiderMonkey.dll
2015-04-25 23:09 - 2015-04-25 23:09 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\...\StartupApproved\Run: => "AdobeBridge"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B1AE49A2-C3AD-4C76-B626-62CB66A79613}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{A5DA156F-4F95-44CC-92E4-285645A3EC60}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BFEB5D35-BF98-48FA-826C-C22AF56C82C0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{3D859A56-E978-443A-AC26-9A84213D1DAA}C:\program files (x86)\ps3 media server\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ps3 media server\jre\bin\javaw.exe
FirewallRules: [TCP Query User{77876400-4673-41E4-9D89-2F79B99EC043}C:\program files (x86)\ps3 media server\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ps3 media server\jre\bin\javaw.exe
FirewallRules: [{B359046E-94AE-4F2A-B2CC-28E09C015AE2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{1C344238-4B12-4E05-A893-7F3B191BFCE4}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{608D43D0-C4DB-479D-A055-A34BB2A42D20}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{D2DD30A2-1328-4D39-BD28-07CDD126583A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EC7EC46B-0F13-4284-B097-2DFFC579BCC7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9DD1BEF6-1D65-441F-85F5-FBFED6C4EE1C}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe
FirewallRules: [{E37BDA05-09F9-4BF5-9ED4-9ABC22EA506D}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe
FirewallRules: [{C602A751-DD65-4EB5-9872-60D47123BD6D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{EFEB7603-8D93-49C3-B5B6-816FD28171F1}] => (Allow) LPort=2869
FirewallRules: [{69A19BD2-DC41-4E42-8672-9D6A2BC7DF91}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{3F09FB4B-B7F5-4B63-AC4E-5C8B50057008}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{995C7B10-608D-491A-9F05-6F82B86B4D64}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{100D9D2F-7FB4-4CAB-A14E-4090143A62DF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2348FA52-DFAC-47E5-8817-2C6106A3877A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D745997B-F22D-468C-95DF-E110B38F25ED}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{28D1CFCE-8791-4C85-94A1-DE9A9A17ACDD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5F919D29-9522-4ABE-AB65-5975E41C0D5F}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{21DFF3D0-B52D-4E5B-9387-A083F068FD5E}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [TCP Query User{F1AF2599-7DAA-4741-AD5D-BB4ED84BA14C}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{16F6FA46-9294-4C7C-8D58-1DF7E1D375AC}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{822C082E-5491-47EB-8B07-1AC2DF498E4E}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{06BCAAA5-D81B-4B6D-B52E-969BB0D9C6BF}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{C0D01377-0E84-45D1-AA19-A799F9E74A35}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe
FirewallRules: [TCP Query User{DD7FB2EB-640B-4AD0-8FC6-FD3F39DEE917}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{05A5CA30-E34B-49CE-B1F7-7F7E8F1494FA}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{134F1FFA-6367-4938-B6CD-A0E63F9C2D6D}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{CB7F2434-8C02-41C6-8979-BF61FDA076CE}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (12/09/2015 07:54:43 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (12/09/2015 07:51:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SkypeHost.exe, verze: 10.0.0.507, časové razítko: 0x56422ca1
Název chybujícího modulu: SkypeBackgroundTasks.dll, verze: 0.0.0.0, časové razítko: 0x56422c6c
Kód výjimky: 0xc0000602
Posun chyby: 0x0000caa1
ID chybujícího procesu: 0xdf8
Čas spuštění chybující aplikace: 0xSkypeHost.exe0
Cesta k chybující aplikaci: SkypeHost.exe1
Cesta k chybujícímu modulu: SkypeHost.exe2
ID zprávy: SkypeHost.exe3
Úplný název chybujícího balíčku: SkypeHost.exe4
ID aplikace související s chybujícím balíčkem: SkypeHost.exe5

Error: (12/08/2015 06:14:41 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 06:02:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:56:46 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:55:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:49:41 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:40:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOSHIBA)
Description: Aplikaci Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App se nepovedlo aktivovat, protože došlo k chybě: -2147024770. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (12/08/2015 05:09:21 AM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: 0x8007085A

Error: (12/08/2015 05:03:26 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: STOPzilla AntiVirus 7 -- Error 1706. No valid source could be found for product STOPzilla AntiVirus 7. The Windows Installer cannot continue.

System errors:
=============
Error: (12/09/2015 07:53:05 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:45 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (12/09/2015 07:52:44 AM) (Source: DCOM) (EventID: 10016) (User: TOSHIBA)
Description: výchozí pro počítačMístníAktivace{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}TOSHIBAToshibaS-1-5-21-1889331998-2119579927-1594466533-1002LocalHost (pomocí LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

CodeIntegrity:
===================================
Date: 2015-12-08 05:08:41.903
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-12-08 05:04:11.792
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-12-08 04:34:28.510
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU 1000M @ 1.80GHz
Percentage of memory in use: 37%
Total physical RAM: 6027.22 MB
Available physical RAM: 3794.43 MB
Total Virtual: 7691.22 MB
Available Virtual: 5576.55 MB

==================== Drives ================================

Drive c: (TI30983100B) (Fixed) (Total:454.25 GB) (Free:171.31 GB) NTFS
Drive f: (VLACH_USB) (Removable) (Total:28.89 GB) (Free:5.99 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 28.9 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=28.9 GB) - (Type=0C)

==================== End of Addition.txt ============================

#9 Příspěvek od **altrok** » 09 pro 2015 18:57

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
File: C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002 -> {5747DE6D-E89F-4445-8B8B-6440DE679436} URL = 
2015-12-08 20:18 - 2015-12-08 20:19 - 00035803 _____ C:\Users\Toshiba\Desktop\Addition.txt
2015-12-08 20:16 - 2015-12-09 08:02 - 00016966 _____ C:\Users\Toshiba\Desktop\FRST.txt
2015-12-08 20:11 - 2015-12-08 20:11 - 00015327 _____ C:\Users\Toshiba\Desktop\LM.bat
2015-12-09 07:56 - 2015-10-14 13:51 - 00000000 ____D C:\ProgramData\STOPzilla!
Hosts:
EmptyTemp:
End

gerard3866 · #10 Příspěvek od **gerard3866** » 09 pro 2015 22:39

Fix result of Farbar Recovery Scan Tool (x64) Version:05-12-2015
Ran by Toshiba (2015-12-09 22:28:40) Run:1
Running from C:\Users\Toshiba\Desktop
Loaded Profiles: Toshiba (Available Profiles: Toshiba & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
File: C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1889331998-2119579927-1594466533-1002 -> {5747DE6D-E89F-4445-8B8B-6440DE679436} URL =
2015-12-08 20:18 - 2015-12-08 20:19 - 00035803 _____ C:\Users\Toshiba\Desktop\Addition.txt
2015-12-08 20:16 - 2015-12-09 08:02 - 00016966 _____ C:\Users\Toshiba\Desktop\FRST.txt
2015-12-08 20:11 - 2015-12-08 20:11 - 00015327 _____ C:\Users\Toshiba\Desktop\LM.bat
2015-12-09 07:56 - 2015-10-14 13:51 - 00000000 ____D C:\ProgramData\STOPzilla!
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.

========================= File: C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ========================

"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" => not found.
====== End of File: ======

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value removed successfully
HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-1889331998-2119579927-1594466533-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5747DE6D-E89F-4445-8B8B-6440DE679436}" => key removed successfully
HKCR\CLSID\{5747DE6D-E89F-4445-8B8B-6440DE679436} => key not found.
C:\Users\Toshiba\Desktop\Addition.txt => moved successfully
C:\Users\Toshiba\Desktop\FRST.txt => moved successfully
C:\Users\Toshiba\Desktop\LM.bat => moved successfully
C:\ProgramData\STOPzilla! => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 1.4 GB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 22:31:27 ====

#11 Příspěvek od **altrok** » 09 pro 2015 22:47

Ulozte na plochu MBAR - http://www.bleepingcomputer.com/downloa ... i-rootkit/

Spuste dvojklikem a extrahujte na plochu
kliknete na Next
Aktualizujte virovou databazi klikem na Update a pokracujte na Next
Vsechny 3 moznosti nechte zaskrtnute a zvolte Scan (potrva cca 15 minut)
zatrhnete vsechny nalezy a take zkontrolujte zatrzitko u Create Restore Point
kliknete na Cleanup a souhlaste s restartem - Yes
obsah logu ulozene na plose v mbar\mbar-log-2015-mm-dd (hh-mm-ss).txt vlozte do pristi odpovedi

gerard3866 · #12 Příspěvek od **gerard3866** » 10 pro 2015 18:18

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
main: v2015.12.10.04
rootkit: v2015.12.07.01

Windows 10 x64 NTFS
Internet Explorer 11.20.10586.0
Toshiba :: TOSHIBA [administrator]

10. 12. 2015 17:01:24
mbar-log-2015-12-10 (17-01-24).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 421237
Time elapsed: 51 minute(s), 14 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\Toshiba\Desktop\Adobe After Effects CS6\Patch\32bit\amtlib.dll (CrackTool.Agent) -> Delete on reboot. [a8c4742fcebd49edc64cac675da53cc4]
C:\Users\Toshiba\Desktop\Adobe After Effects CS6\Patch\64bit\amtlib.dll (CrackTool.Agent) -> Delete on reboot. [6ffdc9daf893be783af848cb5ba7ca36]

Physical Sectors Detected: 0
(No malicious items detected)

(end)

#13 Příspěvek od **altrok** » 10 pro 2015 22:01

Ulozte na plochu ESET Online Scanner kliknutim na esetsmartinstaller_csy.exe

ulozeny esetsmartinstaller_csy.exe dvojklikem spustte
zaskrtnete Ano, souhlasim s podminkami uziti a kliknete na Spustit
vyberte moznost Povolit detekci nechtenych aplikaci
rozkliknete moznost Rozsirene nastaveni a
- zruste zatrzitko u volby Odstranit nalezene infiltrace
- ponechte zatrhnutou moznost Pouzit technologii Anti-Stealth
kliknete na Kontrola, cimz se spusti az nekolikahodinovy sken
po dokonceni skenu kliknete na Seznam nalezenych infiltraci (v pripade zadneho nalezu log nevytvorite)
kliknete na Ulozit do textoveho souboru, log pojmenujte jako ESETlog a ulozte na plochu
obsah logu vlozte do pristi odpovedi
kliknete na << Zpet a zatrhnete moznost Odinstalovat
klikem na Dokoncit ESET Online Scanner zavrete.

gerard3866 · #14 Příspěvek od **gerard3866** » 11 pro 2015 14:35

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SFK\SSFK.exe.vir varianta infiltrace Win32/ELEX.FO potenciálně nechtěná aplikace
C:\AdwCleaner\Quarantine\C\ProgramData\cWdsManProc\update\update.exe.vir varianta infiltrace Win32/ELEX.FR potenciálně nechtěná aplikace
C:\AdwCleaner\Quarantine\C\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\9e1joyvy.default\Extensions\defsearchp@gmail.com\chrome\content\jquery-2.1.0.min.js.vir Win32/Toolbar.TNT2.I potenciálně nechtěná aplikace
C:\AdwCleaner\Quarantine\C\WINDOWS\System32\roboot64.exe.vir varianta infiltrace Win64/Systweak.A potenciálně nechtěná aplikace
C:\ProgramData\cWdsManProc\update\update.exe varianta infiltrace Win32/ELEX.FR potenciálně nechtěná aplikace
C:\Users\All Users\cWdsManProc\update\update.exe varianta infiltrace Win32/ELEX.FR potenciálně nechtěná aplikace
C:\Windows.old\Users\All Users\cWdsManProc\update\update.exe varianta infiltrace Win32/ELEX.FR potenciálně nechtěná aplikace
C:\Windows.old\Users\Toshiba\AppData\Local\Temp\~eqtmp402537781\eInstall\eInstall.exe varianta infiltrace Win32/ELEX.DS potenciálně nechtěná aplikace
C:\Windows.old\Users\Toshiba\AppData\Local\Temp\~eqtmp402537781\omigazip\dup.exe Win32/ELEX.FM potenciálně nechtěná aplikace
C:\Windows.old\Users\Toshiba\AppData\Local\Temp\~eqtmp402537781\omigazip\eUninstall.exe varianta infiltrace Win32/ELEX.BU potenciálně nechtěná aplikace
C:\Windows.old\Users\Toshiba\AppData\Local\Temp\~eqtmp402537781\omigazip\winzipersvc.exe varianta infiltrace Win32/ELEX.CK potenciálně nechtěná aplikace
C:\Windows.old\Users\Toshiba\AppData\Local\Temp\~eqtmp402537781\omigazip\WinZipper.exe varianta infiltrace Win32/ELEX.DS potenciálně nechtěná aplikace
C:\Windows.old\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\zip14[1].exe varianta infiltrace Win32/ELEX.FR potenciálně nechtěná aplikace

#15 Příspěvek od **altrok** » 11 pro 2015 17:02

Jak se chova pocitac? Pozorujete nejake problemy?

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
Folder: C:\ProgramData\cWdsManProc
Folder: C:\Users\All Users\cWdsManProc
C:\ProgramData\cWdsManProc\update\update.exe
C:\Users\All Users\cWdsManProc\update\update.exe
End

VIRY.CZ

PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC

Re: PARDON Z PREVENTIVKY SE STÁVÁ VOLÁNÍ O POMOC