Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

něco zaplňuje místo na HDD

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
vsn
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 12 úno 2012 14:47

něco zaplňuje místo na HDD

#1 Příspěvek od vsn »

Zdravím,

něco zaplňuje místo na HDD, zbyde volné cca 1GB, nepovedlo se mi najít co je to za soubory, kde se berou a když dám sečíst obsazenost tak je toho o dost méně než je obsazené místo na HDD

děkuji za rady

RSIT LOG:


Logfile of random's system information tool 1.10 (written by random/random)
Run by MSI at 2015-12-12 14:21:32
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 4 GB (6%) free of 70 GB
Total RAM: 2815 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:21:35, on 12.12.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16723)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Users\MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\Macromed\Flash\FlashUtil32_20_0_0_228_ActiveX.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\system32\taskeng.exe
C:\windows\system32\taskmgr.exe
C:\windows\system32\prevhost.exe
C:\Users\MSI\Downloads\RSIT.exe
C:\windows\system32\DllHost.exe
C:\Program Files\trend micro\MSI.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [EPSON SX210 Series] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE /FU "C:\windows\TEMP\E_S7628.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{67F3BABB-7203-4DF8-8471-C2889CD868E2}: NameServer = 10.10.17.91
O17 - HKLM\System\CCS\Services\Tcpip\..\{D7B4178A-E751-45D4-82F8-C4877D101FEC}: NameServer = 10.10.10.10,10.10.11.11
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\windows\system32\nvvsvc.exe
O23 - Service: WMI_Hook_Service - MICRO-STAR INT'L,.LTD. - C:\Program Files\msi\WMIHookBtnFn\WMI_Hook_Service.exe

--
End of file - 9497 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\DropboxUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job - C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\windows\tasks\DropboxUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job - C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job - C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job - C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2011-05-13 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2009-07-18 13797920]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"EEventManager"=C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe [2008-12-04 665424]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-29 981688]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX210 Series"=C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE [2008-11-06 199680]
"Google Update"=C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
"cz.seznam.software.autoupdate"=C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-08-27 22041192]
"Dropbox Update"=C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]

C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-12 14:16:28 ----D---- C:\rsit
2015-12-12 14:16:28 ----D---- C:\Program Files\trend micro
2015-12-10 19:12:13 ----A---- C:\windows\system32\win32k.sys
2015-12-10 19:12:12 ----A---- C:\windows\system32\user32.dll
2015-12-10 19:12:12 ----A---- C:\windows\system32\DWrite.dll
2015-12-10 19:12:11 ----A---- C:\windows\system32\FntCache.dll
2015-12-10 19:10:06 ----A---- C:\windows\system32\vbscript.dll
2015-12-10 19:10:06 ----A---- C:\windows\system32\mshta.exe
2015-12-10 19:10:06 ----A---- C:\windows\system32\dxtmsft.dll
2015-12-10 19:10:05 ----A---- C:\windows\system32\urlmon.dll
2015-12-10 19:10:05 ----A---- C:\windows\system32\msfeedssync.exe
2015-12-10 19:10:05 ----A---- C:\windows\system32\msfeedsbs.dll
2015-12-10 19:10:05 ----A---- C:\windows\system32\jsproxy.dll
2015-12-10 19:10:04 ----A---- C:\windows\system32\msfeeds.dll
2015-12-10 19:10:04 ----A---- C:\windows\system32\jscript.dll
2015-12-10 19:10:04 ----A---- C:\windows\system32\ieUnatt.exe
2015-12-10 19:10:03 ----A---- C:\windows\system32\url.dll
2015-12-10 19:10:03 ----A---- C:\windows\system32\iertutil.dll
2015-12-10 19:10:02 ----A---- C:\windows\system32\wininet.dll
2015-12-10 19:10:02 ----A---- C:\windows\system32\jscript9.dll
2015-12-10 19:10:02 ----A---- C:\windows\system32\ieframe.dll
2015-12-10 19:10:01 ----A---- C:\windows\system32\mshtmled.dll
2015-12-10 19:10:00 ----A---- C:\windows\system32\ieui.dll
2015-12-10 19:10:00 ----A---- C:\windows\system32\dxtrans.dll
2015-12-10 19:09:56 ----A---- C:\windows\system32\mshtml.dll
2015-12-10 19:05:32 ----A---- C:\windows\system32\wucltux.dll
2015-12-10 19:05:32 ----A---- C:\windows\system32\wuaueng.dll
2015-12-10 19:05:32 ----A---- C:\windows\system32\wuapi.dll
2015-12-10 19:05:31 ----A---- C:\windows\system32\wuwebv.dll
2015-12-10 19:05:31 ----A---- C:\windows\system32\wups2.dll
2015-12-10 19:05:31 ----A---- C:\windows\system32\wups.dll
2015-12-10 19:05:31 ----A---- C:\windows\system32\wudriver.dll
2015-12-10 19:05:31 ----A---- C:\windows\system32\wuauclt.exe
2015-12-10 19:05:31 ----A---- C:\windows\system32\wuapp.exe
2015-12-10 19:05:31 ----A---- C:\windows\system32\wu.upgrade.ps.dll
2015-12-10 19:05:31 ----A---- C:\windows\system32\WinSetupUI.dll
2015-12-09 21:39:15 ----A---- C:\windows\system32\comsvcs.dll
2015-12-09 21:39:14 ----A---- C:\windows\system32\catsrvut.dll
2015-12-09 21:34:19 ----A---- C:\windows\system32\tzres.dll
2015-12-09 21:34:12 ----A---- C:\windows\system32\els.dll
2015-12-09 21:33:38 ----A---- C:\windows\system32\nlsbres.dll
2015-12-09 21:33:38 ----A---- C:\windows\system32\KBDAZEL.DLL
2015-12-09 21:33:38 ----A---- C:\windows\system32\KBDAZE.DLL
2015-12-09 21:33:37 ----A---- C:\windows\system32\kbdgeoqw.dll
2015-12-09 21:32:38 ----A---- C:\windows\system32\usp10.dll
2015-12-09 21:30:37 ----A---- C:\windows\system32\wshrm.dll
2015-12-09 21:30:37 ----A---- C:\windows\system32\drivers\rmcast.sys
2015-12-06 20:44:00 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2015-12-06 20:44:00 ----A---- C:\windows\system32\msrating.dll
2015-12-06 20:44:00 ----A---- C:\windows\system32\msls31.dll
2015-12-06 20:44:00 ----A---- C:\windows\system32\ieakeng.dll
2015-12-06 20:44:00 ----A---- C:\windows\system32\IEAdvpack.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\wextract.exe
2015-12-06 20:43:59 ----A---- C:\windows\system32\webcheck.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2015-12-06 20:43:59 ----A---- C:\windows\system32\mshtmler.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\licmgr10.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\inseng.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\iexpress.exe
2015-12-06 20:43:59 ----A---- C:\windows\system32\iesysprep.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\iesetup.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\iernonce.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\iedkcs32.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\ieapfltr.dll
2015-12-06 20:43:59 ----A---- C:\windows\system32\ieapfltr.dat
2015-12-06 20:43:59 ----A---- C:\windows\system32\ie4uinit.exe
2015-12-06 20:43:59 ----A---- C:\windows\system32\icardie.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\pngfilt.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\occache.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\imgutil.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\iepeers.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\ieakui.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\ieaksie.dll
2015-12-06 20:43:58 ----A---- C:\windows\system32\admparse.dll
2015-12-06 17:28:54 ----D---- C:\Users\MSI\AppData\Roaming\Seznam Browser
2015-12-05 18:36:06 ----D---- C:\Users\MSI\AppData\Roaming\dvdcss

======List of files/folders modified in the last 1 month======

2015-12-12 14:21:23 ----D---- C:\windows\Prefetch
2015-12-12 14:16:29 ----D---- C:\windows\Temp
2015-12-12 14:16:28 ----D---- C:\Program Files
2015-12-12 14:01:26 ----D---- C:\windows\system32\LogFiles
2015-12-12 13:58:23 ----D---- C:\windows\System32
2015-12-12 13:58:23 ----D---- C:\windows\inf
2015-12-12 13:58:22 ----D---- C:\windows\debug
2015-12-12 13:58:22 ----D---- C:\Windows
2015-12-12 13:57:15 ----D---- C:\windows\winsxs
2015-12-12 13:55:53 ----D---- C:\windows\system32\catroot2
2015-12-12 13:53:50 ----D---- C:\windows\system32\config
2015-12-12 11:27:32 ----D---- C:\Program Files\MyAshampoo
2015-12-12 10:30:26 ----D---- C:\windows\Downloaded Program Files
2015-12-12 10:27:49 ----D---- C:\Downloads
2015-12-12 10:21:33 ----D---- C:\Users\MSI\AppData\Roaming\Seznam.cz
2015-12-12 10:21:29 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-12-12 10:18:00 ----D---- C:\Users\MSI\AppData\Roaming\Skype
2015-12-12 10:16:44 ----D---- C:\Users\MSI\AppData\Roaming\Dropbox
2015-12-12 10:15:17 ----D---- C:\windows\system32\migration
2015-12-12 10:15:16 ----D---- C:\Program Files\Internet Explorer
2015-12-12 10:15:15 ----D---- C:\windows\system32\cs-CZ
2015-12-10 22:06:36 ----SHD---- C:\windows\Installer
2015-12-10 22:06:34 ----D---- C:\ProgramData\Microsoft Help
2015-12-10 22:03:21 ----D---- C:\windows\system32\MRT
2015-12-10 21:59:31 ----A---- C:\windows\system32\MRT.exe
2015-12-10 21:58:33 ----SHD---- C:\System Volume Information
2015-12-10 20:27:00 ----D---- C:\windows\Panther
2015-12-10 20:26:56 ----D---- C:\windows\Logs
2015-12-10 20:09:00 ----D---- C:\windows\Microsoft.NET
2015-12-10 20:08:35 ----RSD---- C:\windows\assembly
2015-12-10 18:58:32 ----D---- C:\windows\ehome
2015-12-10 18:58:30 ----RSD---- C:\windows\Fonts
2015-12-10 18:58:27 ----D---- C:\windows\system32\drivers
2015-12-09 04:39:28 ----N---- C:\windows\system32\MpSigStub.exe
2015-12-08 20:19:32 ----A---- C:\windows\system32\FlashPlayerApp.exe
2015-12-07 07:53:29 ----D---- C:\Program Files\Common Files\System
2015-12-07 07:53:28 ----D---- C:\windows\system32\inetsrv
2015-12-07 07:53:28 ----D---- C:\windows\AppPatch
2015-12-07 07:53:20 ----D---- C:\windows\system32\drivers\cs-CZ
2015-12-07 07:53:16 ----D---- C:\windows\system32\en-US
2015-12-07 07:53:16 ----D---- C:\windows\system32\CodeIntegrity
2015-12-07 07:53:10 ----D---- C:\windows\PolicyDefinitions
2015-12-07 07:53:00 ----D---- C:\Program Files\Windows Media Player
2015-12-07 07:52:53 ----D---- C:\Program Files\Windows Defender
2015-12-07 07:52:52 ----D---- C:\windows\system32\wbem
2015-12-07 07:52:47 ----D---- C:\windows\system32\DriverStore
2015-12-07 07:52:25 ----D---- C:\windows\system32\drivers\UMDF
2015-12-06 21:11:46 ----D---- C:\windows\system32\catroot
2015-12-06 20:31:25 ----A---- C:\windows\win.ini
2015-12-06 10:37:18 ----D---- C:\windows\system32\zh-TW
2015-12-06 10:37:18 ----D---- C:\windows\system32\zh-HK
2015-12-06 10:37:18 ----D---- C:\windows\system32\zh-CN
2015-12-06 10:37:18 ----D---- C:\windows\system32\tr-TR
2015-12-06 10:37:18 ----D---- C:\windows\system32\sv-SE
2015-12-06 10:37:18 ----D---- C:\windows\system32\ru-RU
2015-12-06 10:37:18 ----D---- C:\windows\system32\pt-PT
2015-12-06 10:37:18 ----D---- C:\windows\system32\pt-BR
2015-12-06 10:37:18 ----D---- C:\windows\system32\pl-PL
2015-12-06 10:37:18 ----D---- C:\windows\system32\nl-NL
2015-12-06 10:37:18 ----D---- C:\windows\system32\nb-NO
2015-12-06 10:37:18 ----D---- C:\windows\system32\ko-KR
2015-12-06 10:37:18 ----D---- C:\windows\system32\ja-JP
2015-12-06 10:37:18 ----D---- C:\windows\system32\it-IT
2015-12-06 10:37:18 ----D---- C:\windows\system32\hu-HU
2015-12-06 10:37:18 ----D---- C:\windows\system32\fr-FR
2015-12-06 10:37:18 ----D---- C:\windows\system32\fi-FI
2015-12-06 10:37:18 ----D---- C:\windows\system32\es-ES
2015-12-06 10:37:18 ----D---- C:\windows\system32\el-GR
2015-12-06 10:37:18 ----D---- C:\windows\system32\de-DE
2015-12-06 10:37:18 ----D---- C:\windows\system32\da-DK
2015-12-05 18:37:27 ----D---- C:\Users\MSI\AppData\Roaming\vlc
2015-12-04 22:27:20 ----D---- C:\windows\Tasks
2015-12-04 17:37:35 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-04 17:34:43 ----D---- C:\Program Files\Windows Live
2015-11-23 20:14:44 ----D---- C:\windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2015-03-04 245096]
R0 nvamacpi;NVIDIA Away Mode System; C:\windows\system32\DRIVERS\NVAMACPI.sys [2009-07-17 24608]
R0 nvstor32;nvstor32; C:\windows\system32\DRIVERS\nvstor32.sys [2009-08-05 213024]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 MpKsl8f0076df;MpKsl8f0076df; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{722D68C2-E152-4509-9E4C-C18C042B78EB}\MpKsl8f0076df.sys [2015-12-12 39168]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 95408]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-25 17920]
R3 enecir;ENE CIR Receiver; C:\windows\system32\DRIVERS\enecir.sys [2009-06-29 59904]
R3 nvsmu;nvsmu; C:\windows\system32\DRIVERS\nvsmu.sys [2009-06-29 17920]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\windows\system32\DRIVERS\rtl8192se.sys [2009-08-19 859648]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S0 BTHidEnum;Bluetooth HID Enumerator; C:\windows\System32\Drivers\vbtenum.sys []
S0 BTHidMgr;Bluetooth HID Manager Service; C:\windows\System32\Drivers\BTHidMgr.sys []
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BlueletAudio;Bluetooth Audio Service; C:\windows\system32\DRIVERS\blueletaudio.sys []
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\windows\system32\DRIVERS\BlueletSCOAudio.sys []
S3 BT;Bluetooth PAN Network Adapter; C:\windows\system32\DRIVERS\btnetdrv.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\windows\System32\Drivers\btcusb.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2013-06-04 84248]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver; C:\windows\system32\DRIVERS\e1y6032.sys [2009-07-13 214016]
S3 enecirhid;ENE CIR HID Receiver; C:\windows\system32\DRIVERS\enecirhid.sys [2009-05-20 11776]
S3 enecirhidma;ENE CIR HIDmini Filter; C:\windows\system32\DRIVERS\enecirhidma.sys [2008-04-25 5632]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys []
S3 netr28;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28.sys [2009-07-13 530944]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-06-24 167424]
S3 RtsUIR;Realtek IR Driver; C:\windows\system32\DRIVERS\Rts516xIR.sys []
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerflt.sys []
S3 USBCCID;Realtek Smartcard Reader Driver; C:\windows\system32\DRIVERS\RtsUCcid.sys []
S3 usbrndis6;Adaptér USB RNDIS6; C:\windows\system32\drivers\usb80236.sys [2013-02-12 15872]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 VComm;Virtual Serial port driver; C:\windows\system32\DRIVERS\VComm.sys []
S3 VcommMgr;Bluetooth VComm Manager Service; C:\windows\System32\Drivers\VcommMgr.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;SAMSUNG Android USB Driver; C:\windows\system32\drivers\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 22216]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2009-07-18 211488]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R2 WMI_Hook_Service;WMI_Hook_Service; C:\Program Files\msi\WMIHookBtnFn\WMI_Hook_Service.exe [2009-09-25 101376]
R3 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 284504]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\windows\system32\svchost.exe [2009-07-14 20992]
S2 BBSvc;BingBar Service; C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-08 269504]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-04 647680]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-22 194032]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: něco zaplňuje místo na HDD

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

vsn
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 12 úno 2012 14:47

Re: něco zaplňuje místo na HDD

#3 Příspěvek od vsn »

děkuji za odpověď,

povedlo se mi příjít na to, že úbytek místa není způsobený nějakým virem ale špatně nastaveným windows zálohováním + asi windows update které se snažilo dotahovat aktualizace které uživatel v zájmu zvýšení místa odinstaloval :) disk D jsem smazal téměř celý, nicméně i tak na něm zůstává cca 5GB osazeno - ale nic na něm není - formátovat nejde že je něčím používaný ... ani v nouzáku. po vypnutí zálohování a vyčištění OS jsem nainstaloval W10 a uvolnilo se cca 20GB takže nyní už obsazení disku "C" odpovídá cca. velikosti ...
Jediné je, že tedy nedokážu příjít na to, proč nejde disk "D" zformátovat a co těch 5GB jde (skryté sobory mám zobrazeny)

log z ADW

# AdwCleaner v5.024 - Logfile created 12/12/2015 at 19:02:44
# Updated 07/12/2015 by Xplode
# Database : 2015-12-12.1 [Server]
# Operating system : Windows 10 Home (x86)
# Username : MSI - MSI-MSI
# Running from : C:\Users\MSI\Desktop\adwcleaner_5.024.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\Zrychleni Pocitace
[-] Folder Deleted : C:\Users\MSI\AppData\Local\Installer\Installsense_11057
[-] Folder Deleted : C:\Users\MSI\AppData\Local\Installer\Installsense_1601
[-] Folder Deleted : C:\Users\MSI\AppData\Local\Installer\Installsense_32750
[-] Folder Deleted : C:\Users\MSI\AppData\Local\Installer\Installsense_4644
[-] Folder Deleted : C:\Users\MSI\AppData\Local\Installer\Install_14735
[-] Folder Deleted : C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : YTAUpdate

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [iWebar-bg.exe]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [Senses-bg.exe]
[-] Key Deleted : HKLM\SOFTWARE\335b85ac-a9fb-4a54-ba18-3b3f51f5bd73
[-] Key Deleted : HKLM\SOFTWARE\3e6311dd-76e8-41b9-a4e1-25b4b3c84abb
[-] Key Deleted : HKLM\SOFTWARE\6a96b493-d01a-402c-8ccb-933d60ce050e
[-] Key Deleted : HKLM\SOFTWARE\cbb0eadf-4fb8-4f27-a0eb-37b1edb0d27c
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B3D6B511-4D77-44DB-A459-938D9E6995F7}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Key Deleted : HKU\.DEFAULT\Software\Goobzo
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\iWebar

***** [ Web browsers ] *****

[-] [C:\Users\MSI\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pelmeidfhdlhlbjimpabfcbnnojbboma

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [4830 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: něco zaplňuje místo na HDD

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

vsn
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 12 úno 2012 14:47

Re: něco zaplňuje místo na HDD

#5 Příspěvek od vsn »

Logfile of random's system information tool 1.10 (written by random/random)
Run by MSI at 2015-12-12 20:03:29
Microsoft Windows 10 Home
System drive C: has 26 GB (38%) free of 70 GB
Total RAM: 2815 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:03:37, on 12.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Users\MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x86__8wekyb3d8bbwe\WinStore.Mobile.exe
C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\AccountsControlHost.exe
C:\Windows\SystemApps\WindowsFeedback_cw5n1h2txyewy\FeedbackApp.Windows.exe
C:\WINDOWS\system32\atbroker.exe
C:\Users\MSI\Downloads\RSIT.exe
C:\WINDOWS\System32\ATBroker.exe
C:\WINDOWS\System32\osk.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\trend micro\MSI.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEVENT~1.EXE
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [EPSON SX210 Series] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE /FU "C:\windows\TEMP\E_S7628.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{67f3babb-7203-4df8-8471-c2889cd868e2}: NameServer = 10.10.17.91
O17 - HKLM\System\CCS\Services\Tcpip\..\{d7b4178a-e751-45d4-82f8-c4877d101fec}: NameServer = 10.10.10.10,10.10.11.11
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: WMI_Hook_Service - MICRO-STAR INT'L,.LTD. - C:\Program Files\msi\WMIHookBtnFn\WMI_Hook_Service.exe

--
End of file - 9905 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job - C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job - C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job - C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job - C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2011-05-13 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2015-10-13 4388016]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"EEventManager"=C:\PROGRA~1\EPSONS~1\EVENTM~1\EEVENT~1.EXE [2008-12-04 665424]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX210 Series"=C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE [2008-11-06 199680]
"Google Update"=C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
"cz.seznam.software.autoupdate"=C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-08-27 22041192]
"Dropbox Update"=C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]

C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-12 18:18:28 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-12-12 18:18:28 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-12 18:18:28 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-12-12 18:06:04 ----D---- C:\ProgramData\Microsoft OneDrive
2015-12-12 18:02:43 ----D---- C:\ProgramData\USOShared
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Šablony
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Plocha
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Oblíbené položky
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Nabídka Start
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Dokumenty
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Data aplikací
2015-12-12 18:00:35 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-12-12 17:56:10 ----ASH---- C:\hiberfil.sys
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-12-12 17:43:40 ----SD---- C:\Users\MSI\AppData\Roaming\Microsoft
2015-12-12 17:42:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-12 17:40:20 ----D---- C:\ProgramData\NVIDIA
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvsvc.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-12-12 17:40:12 ----HD---- C:\Program Files\Uninstall Information
2015-12-12 17:39:59 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-12 17:39:51 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-12 17:39:28 ----A---- C:\WINDOWS\system32\nvuninst.exe
2015-12-12 17:39:18 ----AS---- C:\WINDOWS\bootstat.dat
2015-12-12 17:38:44 ----D---- C:\WINDOWS\Prefetch
2015-12-12 17:38:04 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-12 17:37:55 ----ASH---- C:\swapfile.sys
2015-12-12 17:36:57 ----SHD---- C:\Recovery
2015-12-12 17:34:19 ----D---- C:\Windows.old
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mfps.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\iesetup.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\iernonce.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\twinui.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\shell32.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\lpk.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwapi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wsplib.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wshrm.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wininetlui.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\services.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\rilproxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provtool.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provops.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provengine.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NMAA.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\nativemap.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mssign32.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MosStorage.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MosResource.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\moshostcore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\moshost.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mos.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mf.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\jsproxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\InputService.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\d3d11.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\cryptngc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\cdp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-12-12 17:31:25 ----D---- C:\WINDOWS\system32\Microsoft
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\XPSViewer
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\msmq
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\BestPractices
2015-12-12 17:27:36 ----D---- C:\Program Files\Reference Assemblies
2015-12-12 17:27:36 ----D---- C:\Program Files\MSBuild
2015-12-12 17:27:36 ----D---- C:\inetpub
2015-12-12 17:26:59 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-12 17:26:59 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-12 17:26:59 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-12 14:56:55 ----A---- C:\WINDOWS\ntbtlog.txt
2015-12-12 14:16:28 ----D---- C:\rsit
2015-12-12 14:16:28 ----D---- C:\Program Files\trend micro
2015-12-06 17:28:54 ----D---- C:\Users\MSI\AppData\Roaming\Seznam Browser
2015-12-05 18:36:06 ----D---- C:\Users\MSI\AppData\Roaming\dvdcss
2015-11-19 23:06:10 ----A---- C:\WINDOWS\system32\nvoglv32.dll
2015-11-19 23:06:10 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-11-19 23:06:08 ----A---- C:\WINDOWS\system32\NvIFR.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\NvFBC.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvdispgenco3234192.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvdispco3234192.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvwgf2um.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvd3dum.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-11-19 23:00:28 ----A---- C:\WINDOWS\system32\nvapi.dll

======List of files/folders modified in the last 1 month======

2015-12-12 20:03:10 ----D---- C:\WINDOWS\Temp
2015-12-12 19:55:20 ----D---- C:\Users\MSI\AppData\Roaming\Seznam.cz
2015-12-12 19:53:16 ----D---- C:\WINDOWS\System32
2015-12-12 19:53:16 ----D---- C:\WINDOWS\INF
2015-12-12 19:51:02 ----D---- C:\Users\MSI\AppData\Roaming\Skype
2015-12-12 19:50:51 ----D---- C:\Users\MSI\AppData\Roaming\Dropbox
2015-12-12 19:48:23 ----D---- C:\WINDOWS\system32\sru
2015-12-12 19:26:04 ----HD---- C:\Program Files\WindowsApps
2015-12-12 19:26:04 ----D---- C:\WINDOWS\AppReadiness
2015-12-12 19:02:46 ----D---- C:\WINDOWS\system32\Tasks
2015-12-12 19:02:45 ----RD---- C:\Program Files
2015-12-12 19:02:45 ----D---- C:\AdwCleaner
2015-12-12 18:58:58 ----SHD---- C:\System Volume Information
2015-12-12 18:56:56 ----D---- C:\WINDOWS\system32\restore
2015-12-12 18:55:08 ----D---- C:\WINDOWS\Logs
2015-12-12 18:53:21 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-12 18:46:40 ----RD---- C:\WINDOWS\assembly
2015-12-12 18:44:45 ----D---- C:\WINDOWS\WinSxS
2015-12-12 18:44:43 ----SHD---- C:\WINDOWS\Installer
2015-12-12 18:44:43 ----D---- C:\WINDOWS\CbsTemp
2015-12-12 18:34:19 ----RD---- C:\WINDOWS\DevicesFlow
2015-12-12 18:19:53 ----D---- C:\WINDOWS\system32\WDI
2015-12-12 18:18:47 ----D---- C:\WINDOWS\OCR
2015-12-12 18:17:48 ----D---- C:\WINDOWS\system32\config
2015-12-12 18:13:25 ----D---- C:\Windows
2015-12-12 18:11:13 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-12 18:06:04 ----HD---- C:\ProgramData
2015-12-12 18:04:21 ----SD---- C:\ProgramData\Microsoft
2015-12-12 18:04:19 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-12 18:04:18 ----RD---- C:\WINDOWS\PrintDialog
2015-12-12 18:04:17 ----RD---- C:\WINDOWS\MiracastView
2015-12-12 18:03:42 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-12-12 18:03:24 ----RD---- C:\Users
2015-12-12 18:03:19 ----D---- C:\WINDOWS\rescache
2015-12-12 18:02:48 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-12 18:02:43 ----D---- C:\ProgramData\USOPrivate
2015-12-12 18:02:18 ----D---- C:\Program Files\Windows NT
2015-12-12 18:02:09 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-12 18:01:58 ----D---- C:\WINDOWS\debug
2015-12-12 18:01:38 ----D---- C:\WINDOWS\Registration
2015-12-12 18:00:54 ----D---- C:\WINDOWS\system32\wbem
2015-12-12 18:00:44 ----D---- C:\WINDOWS\Tasks
2015-12-12 18:00:28 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-12 18:00:23 ----D---- C:\WINDOWS\system32\LogFiles
2015-12-12 18:00:20 ----RSD---- C:\WINDOWS\Media
2015-12-12 17:59:05 ----D---- C:\WINDOWS\system32\spool
2015-12-12 17:58:07 ----D---- C:\WINDOWS\system32\catroot2
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\zh-CHT
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\zh-CHS
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\tr
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\sv
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\sk
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ru
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ro
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\pt-BR
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\pt
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\pl
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\no
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\nl
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ko
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ja
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\it
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\hu
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\fr
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\fi
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\es
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\en-US
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\en
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\el
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\drivers
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\de
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\da
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\cs
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\bg
2015-12-12 17:55:33 ----D---- C:\WINDOWS\ShellNew
2015-12-12 17:55:30 ----SD---- C:\WINDOWS\Downloaded Program Files
2015-12-12 17:55:30 ----D---- C:\WINDOWS\cs
2015-12-12 17:51:03 ----D---- C:\WINDOWS\twain_32
2015-12-12 17:51:03 ----D---- C:\WINDOWS\system32\SRSLabs
2015-12-12 17:51:03 ----D---- C:\WINDOWS\system32\SPReview
2015-12-12 17:51:00 ----D---- C:\WINDOWS\system32\sda
2015-12-12 17:51:00 ----D---- C:\WINDOWS\system32\oobe
2015-12-12 17:50:59 ----D---- C:\WINDOWS\system32\NDF
2015-12-12 17:50:59 ----D---- C:\WINDOWS\system32\migration
2015-12-12 17:50:59 ----D---- C:\WINDOWS\system32\IME
2015-12-12 17:50:58 ----D---- C:\WINDOWS\system32\EventProviders
2015-12-12 17:50:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-12 17:50:30 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-12 17:50:26 ----D---- C:\WINDOWS\schemas
2015-12-12 17:50:16 ----RSD---- C:\WINDOWS\Fonts
2015-12-12 17:50:15 ----D---- C:\WINDOWS\ehome
2015-12-12 17:50:03 ----SHD---- C:\Program Files\Windows Sidebar
2015-12-12 17:50:03 ----D---- C:\Program Files\Windows Mail
2015-12-12 17:50:02 ----D---- C:\Program Files\Microsoft.NET
2015-12-12 17:50:02 ----D---- C:\Program Files\Microsoft Games
2015-12-12 17:50:01 ----D---- C:\Program Files\DVD Maker
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files\System
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files
2015-12-12 17:48:44 ----D---- C:\WINDOWS\system32\Recovery
2015-12-12 17:48:42 ----HD---- C:\WINDOWS\system32\GroupPolicy
2015-12-12 17:48:42 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-12-12 17:42:15 ----D---- C:\WINDOWS\system32\Sysprep
2015-12-12 17:40:13 ----D---- C:\WINDOWS\Help
2015-12-12 17:38:16 ----D---- C:\WINDOWS\ServiceProfiles
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\Dism
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\appraiser
2015-12-12 17:34:07 ----D---- C:\WINDOWS\Provisioning
2015-12-12 17:34:07 ----D---- C:\WINDOWS\apppatch
2015-12-12 17:34:07 ----D---- C:\Program Files\Internet Explorer
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\MUI
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\inetsrv
2015-12-12 17:27:37 ----D---- C:\WINDOWS\PolicyDefinitions
2015-12-12 17:27:31 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-12-12 17:27:31 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-12-12 17:27:30 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-12-12 17:27:29 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-12-12 17:27:26 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-12-12 17:27:26 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-12-12 17:27:23 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-12-12 17:27:22 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-12-12 17:27:22 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-12-12 16:50:38 ----SHD---- C:\Boot
2015-12-12 11:27:32 ----D---- C:\Program Files\MyAshampoo
2015-12-12 10:27:49 ----D---- C:\Downloads
2015-12-10 22:06:34 ----D---- C:\ProgramData\Microsoft Help
2015-12-10 22:03:21 ----D---- C:\WINDOWS\system32\MRT
2015-12-10 21:59:31 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 04:39:28 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-06 20:31:25 ----A---- C:\WINDOWS\win.ini
2015-12-05 18:37:27 ----D---- C:\Users\MSI\AppData\Roaming\vlc
2015-12-04 17:34:43 ----D---- C:\Program Files\Windows Live
2015-12-01 01:33:29 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvamacpi;@oem26.inf,%NVAMACPI.SvcDesc%;NVIDIA Away Mode System; C:\WINDOWS\system32\DRIVERS\NVAMACPI.sys [2009-07-17 24608]
R0 nvstor32;nvstor32; C:\WINDOWS\System32\drivers\nvstor32.sys [2009-08-05 213024]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 76288]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 7680]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 36864]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 62464]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\WINDOWS\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-25 17920]
R3 enecir;@oem5.inf,%enecir.SVCDESC%;ENE CIR Receiver; C:\WINDOWS\system32\DRIVERS\enecir.sys [2009-06-29 59904]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-12-12 130560]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-11-19 10715832]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2009-06-29 17920]
R3 rt640x86;@rt640x86.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x86.sys [2015-10-30 494080]
R3 rtl8192se;@net8192se32.inf,%RTL8192se.Service.DispName%;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\WINDOWS\System32\drivers\rtl8192se.sys [2015-10-30 1113600]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2015-10-30 184832]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 83288]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 27992]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 8192]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 26624]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-12 96768]
S3 enecirhid;ENE CIR HID Receiver; C:\WINDOWS\system32\DRIVERS\enecirhid.sys [2009-05-20 11776]
S3 enecirhidma;ENE CIR HIDmini Filter; C:\WINDOWS\system32\DRIVERS\enecirhidma.sys [2008-04-25 5632]
S3 fssfltr;fssfltr; C:\WINDOWS\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-10-30 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 38240]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 66048]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-10-30 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 23040]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 45056]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 33792]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 32768]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 200032]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 74080]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 104800]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-10-30 42840]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-10-30 21856]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-10-30 21856]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-10-30 48640]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 BBSvc;BingBar Service; C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-12-12 25088]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-10-13 670512]
R2 OneSyncSvc_2d1c2;Hostitel synchronizace_2d1c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
R3 PimIndexMaintenanceSvc_2d1c2;Data kontaktů_2d1c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 UnistoreSvc_2d1c2;Úložiště uživatelských dat_2d1c2; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R3 UserDataSvc_2d1c2;Přístup k uživatelským datům_2d1c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-08 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 26112]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-04 647680]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-22 194032]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_2d1c2;Služba zasílání zpráv_2d1c2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 900096]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 256512]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-10-30 45752]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: něco zaplňuje místo na HDD

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\Google\Google Toolbar
C:\Program Files\Windows Live\Companion\companioncore.dll
C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

:services
BBSvc
c2cautoupdatesvc
c2cpnrsvc
BBUpdate

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

vsn
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 12 úno 2012 14:47

Re: něco zaplňuje místo na HDD

#7 Příspěvek od vsn »

log OTM:
All processes killed
========== FILES ==========
C:\Program Files\Google\Google Toolbar\Component folder moved successfully.
C:\Program Files\Google\Google Toolbar folder moved successfully.
DllUnregisterServer procedure not found in C:\Program Files\Windows Live\Companion\companioncore.dll
C:\Program Files\Windows Live\Companion\companioncore.dll moved successfully.
C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ deleted successfully.
========== SERVICES/DRIVERS ==========
Service BBSvc stopped successfully!
Service BBSvc deleted successfully!
Service c2cautoupdatesvc stopped successfully!
Service c2cautoupdatesvc deleted successfully!
Service c2cpnrsvc stopped successfully!
Service c2cpnrsvc deleted successfully!
Service BBUpdate stopped successfully!
Service BBUpdate deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57472 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default.migrated

User: DefaultAppPool
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: MSI
->Temp folder emptied: 1980943 bytes
->Temporary Internet Files folder emptied: 261205132 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 2888794 bytes

User: Public

User: TEMP

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 25098473 bytes
RecycleBin emptied: 4124 bytes

Total Files Cleaned = 278,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Default.migrated

User: DefaultAppPool
->Flash cache emptied: 0 bytes

User: MSI
->Flash cache emptied: 0 bytes

User: Public

User: TEMP

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12122015_202002

Files moved on Reboot...
C:\Users\MSI\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
File move failed. C:\WINDOWS\temp\NVIDIA Corporation\NV_Cache\aaa04bb35e1a5418ce60fe164a50e009_fce8394c8fd8a803_6229ccd76215aea1_0_0.bin scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NVIDIA Corporation\NV_Cache\aaa04bb35e1a5418ce60fe164a50e009_fce8394c8fd8a803_6229ccd76215aea1_0_0.toc scheduled to be moved on reboot.

Registry entries deleted on Reboot...

----------------------------------------------------------------


LOG: RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by MSI at 2015-12-12 20:23:49
Microsoft Windows 10 Home
System drive C: has 26 GB (38%) free of 70 GB
Total RAM: 2815 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:23:58, on 12.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\Windows\System32\RuntimeBroker.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe
C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Users\MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
C:\WINDOWS\system32\browser_broker.exe
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\MSI\Downloads\RSIT.exe
C:\Program Files\trend micro\MSI.exe
C:\WINDOWS\system32\svchost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEVENT~1.EXE
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [EPSON SX210 Series] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE /FU "C:\windows\TEMP\E_S7628.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll (file missing)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{67f3babb-7203-4df8-8471-c2889cd868e2}: NameServer = 10.10.17.91
O17 - HKLM\System\CCS\Services\Tcpip\..\{d7b4178a-e751-45d4-82f8-c4877d101fec}: NameServer = 10.10.10.10,10.10.11.11
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: WMI_Hook_Service - MICRO-STAR INT'L,.LTD. - C:\Program Files\msi\WMIHookBtnFn\WMI_Hook_Service.exe

--
End of file - 8322 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000Core.job - C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3200430366-734352385-2483619457-1000UA.job - C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\windows\system32\NvCpl.dll [2015-10-13 4388016]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"EEventManager"=C:\PROGRA~1\EPSONS~1\EVENTM~1\EEVENT~1.EXE [2008-12-04 665424]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX210 Series"=C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE [2008-11-06 199680]
"Google Update"=C:\Users\MSI\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
"cz.seznam.software.autoupdate"=C:\Users\MSI\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\MSI\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-08-27 22041192]
"Dropbox Update"=C:\Users\MSI\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]

C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\MSI\AppData\Roaming\Dropbox\bin\Dropbox.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-12 20:20:02 ----D---- C:\_OTM
2015-12-12 18:18:28 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-12-12 18:18:28 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-12 18:18:28 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-12-12 18:06:04 ----D---- C:\ProgramData\Microsoft OneDrive
2015-12-12 18:02:43 ----D---- C:\ProgramData\USOShared
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Šablony
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Plocha
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Oblíbené položky
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Nabídka Start
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Dokumenty
2015-12-12 18:02:18 ----SHD---- C:\ProgramData\Data aplikací
2015-12-12 18:00:35 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2015-12-12 17:56:10 ----ASH---- C:\hiberfil.sys
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-12-12 17:43:40 ----SD---- C:\Users\MSI\AppData\Roaming\Microsoft
2015-12-12 17:42:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-12 17:40:20 ----D---- C:\ProgramData\NVIDIA
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvsvc.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-12-12 17:40:15 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-12-12 17:40:12 ----HD---- C:\Program Files\Uninstall Information
2015-12-12 17:39:59 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-12 17:39:51 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-12 17:39:28 ----A---- C:\WINDOWS\system32\nvuninst.exe
2015-12-12 17:39:18 ----AS---- C:\WINDOWS\bootstat.dat
2015-12-12 17:38:44 ----D---- C:\WINDOWS\Prefetch
2015-12-12 17:38:04 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-12 17:37:55 ----ASH---- C:\swapfile.sys
2015-12-12 17:36:57 ----SHD---- C:\Recovery
2015-12-12 17:34:19 ----D---- C:\Windows.old
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\wpncore.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mfps.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\iesetup.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\iernonce.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-12 17:33:43 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\twinui.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\shutdownux.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\shell32.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\lpk.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-12-12 17:33:41 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwapi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wsplib.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wshrm.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wininetlui.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SRH.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\services.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\SensorService.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\rilproxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provtool.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provops.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provengine.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NMAA.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\nativemap.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mssign32.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MosStorage.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MosResource.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\moshostcore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\moshost.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mos.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mf.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\LogonController.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\jsproxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\InputService.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\d3d11.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\cryptngc.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\cdp.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-12-12 17:33:37 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-12-12 17:33:36 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-12-12 17:31:25 ----D---- C:\WINDOWS\system32\Microsoft
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\XPSViewer
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\msmq
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\BestPractices
2015-12-12 17:27:36 ----D---- C:\Program Files\Reference Assemblies
2015-12-12 17:27:36 ----D---- C:\Program Files\MSBuild
2015-12-12 17:27:36 ----D---- C:\inetpub
2015-12-12 17:26:59 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-12 17:26:59 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-12 17:26:59 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-12 14:56:55 ----A---- C:\WINDOWS\ntbtlog.txt
2015-12-12 14:16:28 ----D---- C:\rsit
2015-12-12 14:16:28 ----D---- C:\Program Files\trend micro
2015-12-06 17:28:54 ----D---- C:\Users\MSI\AppData\Roaming\Seznam Browser
2015-12-05 18:36:06 ----D---- C:\Users\MSI\AppData\Roaming\dvdcss
2015-11-19 23:06:10 ----A---- C:\WINDOWS\system32\nvoglv32.dll
2015-11-19 23:06:10 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-11-19 23:06:08 ----A---- C:\WINDOWS\system32\NvIFR.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\NvFBC.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvdispgenco3234192.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvdispco3234192.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-11-19 23:06:06 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvwgf2um.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvd3dum.dll
2015-11-19 23:00:30 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-11-19 23:00:28 ----A---- C:\WINDOWS\system32\nvapi.dll

======List of files/folders modified in the last 1 month======

2015-12-12 20:23:45 ----D---- C:\Users\MSI\AppData\Roaming\Skype
2015-12-12 20:23:19 ----D---- C:\WINDOWS\Temp
2015-12-12 20:23:02 ----D---- C:\Users\MSI\AppData\Roaming\Dropbox
2015-12-12 20:21:05 ----D---- C:\WINDOWS\system32\sru
2015-12-12 20:20:05 ----D---- C:\WINDOWS\Tasks
2015-12-12 20:20:04 ----D---- C:\Program Files\Google
2015-12-12 19:55:20 ----D---- C:\Users\MSI\AppData\Roaming\Seznam.cz
2015-12-12 19:53:16 ----D---- C:\WINDOWS\System32
2015-12-12 19:53:16 ----D---- C:\WINDOWS\INF
2015-12-12 19:26:04 ----HD---- C:\Program Files\WindowsApps
2015-12-12 19:26:04 ----D---- C:\WINDOWS\AppReadiness
2015-12-12 19:02:46 ----D---- C:\WINDOWS\system32\Tasks
2015-12-12 19:02:45 ----RD---- C:\Program Files
2015-12-12 19:02:45 ----D---- C:\AdwCleaner
2015-12-12 18:58:58 ----SHD---- C:\System Volume Information
2015-12-12 18:56:56 ----D---- C:\WINDOWS\system32\restore
2015-12-12 18:55:08 ----D---- C:\WINDOWS\Logs
2015-12-12 18:53:21 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-12 18:46:40 ----RD---- C:\WINDOWS\assembly
2015-12-12 18:44:46 ----D---- C:\WINDOWS\CbsTemp
2015-12-12 18:44:45 ----D---- C:\WINDOWS\WinSxS
2015-12-12 18:44:43 ----SHD---- C:\WINDOWS\Installer
2015-12-12 18:34:19 ----RD---- C:\WINDOWS\DevicesFlow
2015-12-12 18:19:53 ----D---- C:\WINDOWS\system32\WDI
2015-12-12 18:18:47 ----D---- C:\WINDOWS\OCR
2015-12-12 18:17:48 ----D---- C:\WINDOWS\system32\config
2015-12-12 18:13:25 ----D---- C:\Windows
2015-12-12 18:11:13 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-12 18:06:04 ----HD---- C:\ProgramData
2015-12-12 18:04:21 ----SD---- C:\ProgramData\Microsoft
2015-12-12 18:04:19 ----RD---- C:\WINDOWS\PurchaseDialog
2015-12-12 18:04:18 ----RD---- C:\WINDOWS\PrintDialog
2015-12-12 18:04:17 ----RD---- C:\WINDOWS\MiracastView
2015-12-12 18:03:42 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-12-12 18:03:24 ----RD---- C:\Users
2015-12-12 18:03:19 ----D---- C:\WINDOWS\rescache
2015-12-12 18:02:48 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-12 18:02:43 ----D---- C:\ProgramData\USOPrivate
2015-12-12 18:02:18 ----D---- C:\Program Files\Windows NT
2015-12-12 18:02:09 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-12-12 18:01:58 ----D---- C:\WINDOWS\debug
2015-12-12 18:01:38 ----D---- C:\WINDOWS\Registration
2015-12-12 18:00:54 ----D---- C:\WINDOWS\system32\wbem
2015-12-12 18:00:28 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-12 18:00:23 ----D---- C:\WINDOWS\system32\LogFiles
2015-12-12 18:00:20 ----RSD---- C:\WINDOWS\Media
2015-12-12 17:59:05 ----D---- C:\WINDOWS\system32\spool
2015-12-12 17:58:07 ----D---- C:\WINDOWS\system32\catroot2
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\zh-CHT
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\zh-CHS
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\tr
2015-12-12 17:55:35 ----D---- C:\WINDOWS\system32\sv
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\sk
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ru
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ro
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\pt-BR
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\pt
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\pl
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\no
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\nl
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ko
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\ja
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\it
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\hu
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\fr
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\fi
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\es
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\en-US
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\en
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\el
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\drivers
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\de
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\da
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\cs
2015-12-12 17:55:34 ----D---- C:\WINDOWS\system32\bg
2015-12-12 17:55:33 ----D---- C:\WINDOWS\ShellNew
2015-12-12 17:55:30 ----SD---- C:\WINDOWS\Downloaded Program Files
2015-12-12 17:55:30 ----D---- C:\WINDOWS\cs
2015-12-12 17:51:03 ----D---- C:\WINDOWS\twain_32
2015-12-12 17:51:03 ----D---- C:\WINDOWS\system32\SRSLabs
2015-12-12 17:51:03 ----D---- C:\WINDOWS\system32\SPReview
2015-12-12 17:51:00 ----D---- C:\WINDOWS\system32\sda
2015-12-12 17:51:00 ----D---- C:\WINDOWS\system32\oobe
2015-12-12 17:50:59 ----D---- C:\WINDOWS\system32\NDF
2015-12-12 17:50:59 ----D---- C:\WINDOWS\system32\migration
2015-12-12 17:50:59 ----D---- C:\WINDOWS\system32\IME
2015-12-12 17:50:58 ----D---- C:\WINDOWS\system32\EventProviders
2015-12-12 17:50:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2015-12-12 17:50:30 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-12 17:50:26 ----D---- C:\WINDOWS\schemas
2015-12-12 17:50:16 ----RSD---- C:\WINDOWS\Fonts
2015-12-12 17:50:15 ----D---- C:\WINDOWS\ehome
2015-12-12 17:50:03 ----SHD---- C:\Program Files\Windows Sidebar
2015-12-12 17:50:03 ----D---- C:\Program Files\Windows Mail
2015-12-12 17:50:02 ----D---- C:\Program Files\Microsoft.NET
2015-12-12 17:50:02 ----D---- C:\Program Files\Microsoft Games
2015-12-12 17:50:01 ----D---- C:\Program Files\DVD Maker
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files\System
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files\microsoft shared
2015-12-12 17:50:01 ----D---- C:\Program Files\Common Files
2015-12-12 17:48:44 ----D---- C:\WINDOWS\system32\Recovery
2015-12-12 17:48:42 ----HD---- C:\WINDOWS\system32\GroupPolicy
2015-12-12 17:48:42 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-12-12 17:42:15 ----D---- C:\WINDOWS\system32\Sysprep
2015-12-12 17:40:13 ----D---- C:\WINDOWS\Help
2015-12-12 17:38:16 ----D---- C:\WINDOWS\ServiceProfiles
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\Dism
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-12 17:34:08 ----D---- C:\WINDOWS\system32\appraiser
2015-12-12 17:34:07 ----D---- C:\WINDOWS\Provisioning
2015-12-12 17:34:07 ----D---- C:\WINDOWS\apppatch
2015-12-12 17:34:07 ----D---- C:\Program Files\Internet Explorer
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\MUI
2015-12-12 17:27:37 ----D---- C:\WINDOWS\system32\inetsrv
2015-12-12 17:27:37 ----D---- C:\WINDOWS\PolicyDefinitions
2015-12-12 17:27:31 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-12-12 17:27:31 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-12-12 17:27:30 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-12-12 17:27:29 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-12-12 17:27:26 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-12-12 17:27:26 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-12-12 17:27:24 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-12-12 17:27:23 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-12-12 17:27:22 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-12-12 17:27:22 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-12-12 16:50:38 ----SHD---- C:\Boot
2015-12-12 11:27:32 ----D---- C:\Program Files\MyAshampoo
2015-12-12 10:27:49 ----D---- C:\Downloads
2015-12-10 22:06:34 ----D---- C:\ProgramData\Microsoft Help
2015-12-10 22:03:21 ----D---- C:\WINDOWS\system32\MRT
2015-12-10 21:59:31 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 04:39:28 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-06 20:31:25 ----A---- C:\WINDOWS\win.ini
2015-12-05 18:37:27 ----D---- C:\Users\MSI\AppData\Roaming\vlc
2015-12-04 17:34:43 ----D---- C:\Program Files\Windows Live
2015-12-01 01:33:29 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvamacpi;@oem26.inf,%NVAMACPI.SvcDesc%;NVIDIA Away Mode System; C:\WINDOWS\system32\DRIVERS\NVAMACPI.sys [2009-07-17 24608]
R0 nvstor32;nvstor32; C:\WINDOWS\System32\drivers\nvstor32.sys [2009-08-05 213024]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 76288]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 7680]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 36864]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 62464]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\WINDOWS\system32\DRIVERS\ArcSoftKsUFilter.sys [2008-04-25 17920]
R3 enecir;@oem5.inf,%enecir.SVCDESC%;ENE CIR Receiver; C:\WINDOWS\system32\DRIVERS\enecir.sys [2009-06-29 59904]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-12-12 130560]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-11-19 10715832]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2009-06-29 17920]
R3 rt640x86;@rt640x86.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x86.sys [2015-10-30 494080]
R3 rtl8192se;@net8192se32.inf,%RTL8192se.Service.DispName%;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\WINDOWS\System32\drivers\rtl8192se.sys [2015-10-30 1113600]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2015-10-30 184832]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 83288]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 27992]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 8192]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 26624]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-12-12 96768]
S3 enecirhid;ENE CIR HID Receiver; C:\WINDOWS\system32\DRIVERS\enecirhid.sys [2009-05-20 11776]
S3 enecirhidma;ENE CIR HIDmini Filter; C:\WINDOWS\system32\DRIVERS\enecirhidma.sys [2008-04-25 5632]
S3 fssfltr;fssfltr; C:\WINDOWS\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-10-30 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 38240]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 66048]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-10-30 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 23040]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 45056]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 33792]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 32768]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 200032]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 74080]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 104800]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-10-30 42840]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-10-30 21856]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-10-30 21856]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-10-30 48640]
S3 vhf;@%SystemRoot%\system32\drivers\vhf.sys,-100; C:\WINDOWS\System32\drivers\vhf.sys [2015-10-30 24064]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-12-12 25088]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-10-13 670512]
R2 OneSyncSvc_2bb61;Hostitel synchronizace_2bb61; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-08 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 26112]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-04 647680]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-22 194032]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_2bb61;Služba zasílání zpráv_2bb61; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc_2bb61;Data kontaktů_2bb61; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 900096]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 256512]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 UnistoreSvc_2bb61;Úložiště uživatelských dat_2bb61; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 UserDataSvc_2bb61;Přístup k uživatelským datům_2bb61; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-10-30 45752]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: něco zaplňuje místo na HDD

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Vše v pořádku?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

vsn
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 12 úno 2012 14:47

Re: něco zaplňuje místo na HDD

#9 Příspěvek od vsn »

tak OTM se smazalo..

objevil jsem problém, windows lišta na nic nereaguje u systémových ikon na levé tl. myši (win tlačítko (ani přes klávesnici ani dotyk display) , síť, centrum akcí, hlasitost)

pravé tl. myši reaguje

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: něco zaplňuje místo na HDD

#10 Příspěvek od Rudy »

Desítky toto občas dělají. Z jakého důvodu nevíme, smazány byly poze AdWary a zbytečnosti. Zkuste obnovu systému k datu, kdy korketně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

vsn
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 12 úno 2012 14:47

Re: něco zaplňuje místo na HDD

#11 Příspěvek od vsn »

obnova se po upgradu nezapnula tak tu možnost nemám, nicméně jsem našel na internetu nějaké návody (nový uživatel atd.) v nejhorším bych obnovil OS a nainstaloval znova aplikace.

děkuji za pomoc a za rady.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: něco zaplňuje místo na HDD

#12 Příspěvek od Rudy »

Jj. Pokud je záloha, funguje to. Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět