Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o preventivku

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
gully
Návštěvník
Návštěvník
Příspěvky: 89
Registrován: 21 pro 2014 07:39

Prosím o preventivku

#1 Příspěvek od gully »

Logfile of random's system information tool 1.10 (written by random/random)
Run by ppoli at 2015-12-27 17:10:26
Microsoft Windows 10 Pro
System drive C: has 913 GB (97%) free of 943 GB
Total RAM: 8103 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:10:32, on 27.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\ppoli.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [OneDrive] "C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\RunOnce: [VersionChecker] "C:\Users\ppoli\AppData\Local\Temp\VersionChecker.exe" startup
O4 - HKCU\..\RunOnce: [VersionUpdater] "C:\Users\ppoli\AppData\Local\Temp\VersionUpdater.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @oem4.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe
O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10267 bytes

======Listing Processes======







winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
dashost.exe {d4f166eb-da0d-4e47-9ebe8f4703ac19e5}
C:\Windows\system32\igfxCUIService.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\Windows\System32\spoolsv.exe
C:\Windows\SysWow64\IntelCpHeciSvc.exe
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\BtwRSupportService.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
sihost.exe
\??\C:\Windows\system32\conhost.exe 0x4
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\Windows\system32\SettingSyncHost.exe -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe"
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
"C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Dell\DellDataVault\DellDataVault.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.25.5.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe" -ServerName:App.AppXqagq4n4gvy0tjw576pgh6xr601s1h1mv.mca
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Windows\System32\NetworkUXBroker.exe" -ServerName:Windows.Networking.UX
"C:\Program Files\NetBeans 8.1\bin\netbeans64.exe"
"C:\Program Files\Totalcmd\TOTALCMD64.EXE"
taskhostw.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\Windows\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:80 CREDAT:140545 EDGEHOST /prefetch:6
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:80 CREDAT:140547 EDGEHOST /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="9176.0.2087844861\696031352" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,51 --gpu-vendor-id=0x8086 --gpu-device-id=0x1616 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.15.4256 --ignored=" --type=renderer " /prefetch:822062411
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="9176.42.1525078000\266455128" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="9176.44.1258172290\1123965547" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="9176.51.2047851360\236873072" /prefetch:673131151
"C:\Program Files\paint.net\PaintDotNet.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe44_ Global\UsGthrCtrlFltPipeMssGthrPipe44 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\wbem\WmiApSrv.exe

"C:\Windows\system32\SearchFilterHost.exe" 0 624 628 636 8192 632
"C:\Users\ppoli\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\ppoli\AppData\Roaming\Mozilla\Firefox\Profiles\hufhwzyy.default

prefs.js - "browser.startup.homepage" - "https://google.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.80.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.80.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll


C:\Users\ppoli\AppData\Roaming\Mozilla\Firefox\Profiles\hufhwzyy.default\extensions\
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-27 219304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-12-27 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-27 2339032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-12-27 211880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-09 2771576]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-12-09 1846016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-27 551112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"VersionChecker"=C:\Users\ppoli\AppData\Local\Temp\VersionChecker.exe [2015-12-21 15360]
"VersionUpdater"=C:\Users\ppoli\AppData\Local\Temp\VersionUpdater.exe [2015-12-21 16384]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-27 17:10:27 ----D---- C:\Program Files\trend micro
2015-12-27 17:10:26 ----D---- C:\rsit
2015-12-27 16:52:58 ----D---- C:\Program Files (x86)\Google
2015-12-27 15:43:42 ----D---- C:\Program Files\paint.net
2015-12-27 15:42:14 ----D---- C:\Users\ppoli\AppData\Roaming\WinRAR
2015-12-27 15:39:22 ----D---- C:\ProgramData\FastStone
2015-12-27 15:38:27 ----D---- C:\Program Files (x86)\FastStone Capture
2015-12-27 15:37:27 ----D---- C:\Users\ppoli\AppData\Roaming\FastStone
2015-12-27 15:37:17 ----D---- C:\Program Files (x86)\FastStone Image Viewer
2015-12-27 15:07:06 ----D---- C:\Users\ppoli\AppData\Roaming\FileZilla
2015-12-27 15:07:01 ----D---- C:\Program Files\FileZilla FTP Client
2015-12-27 14:38:39 ----D---- C:\Program Files (x86)\Western Digital
2015-12-27 14:35:38 ----D---- C:\Users\ppoli\AppData\Roaming\Macromedia
2015-12-27 14:35:13 ----D---- C:\Users\ppoli\AppData\Roaming\com.wd.WDMyCloud
2015-12-27 14:35:02 ----D---- C:\Program Files\Bonjour Print Services
2015-12-27 14:34:59 ----D---- C:\ProgramData\Apple
2015-12-27 14:34:59 ----D---- C:\Program Files\Bonjour
2015-12-27 14:34:59 ----D---- C:\Program Files (x86)\Bonjour
2015-12-27 14:34:46 ----D---- C:\ProgramData\Western Digital
2015-12-27 14:21:42 ----HD---- C:\OneDriveTemp
2015-12-27 13:47:44 ----D---- C:\Program Files\glassfish-4.1.1
2015-12-27 13:45:15 ----D---- C:\Program Files\NetBeans 8.1
2015-12-27 13:39:47 ----D---- C:\Users\ppoli\AppData\Roaming\NetBeans
2015-12-27 13:35:12 ----A---- C:\Windows\system32\javaws.exe
2015-12-27 13:35:11 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-12-27 13:35:11 ----A---- C:\Windows\system32\javaw.exe
2015-12-27 13:35:11 ----A---- C:\Windows\system32\java.exe
2015-12-27 13:34:21 ----D---- C:\Program Files\Java
2015-12-27 13:23:33 ----D---- C:\Program Files\WinRAR
2015-12-27 13:16:40 ----D---- C:\Program Files (x86)\Microsoft Office
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\XPSViewer
2015-12-27 13:13:56 ----D---- C:\Program Files\Reference Assemblies
2015-12-27 13:13:56 ----D---- C:\Program Files\MSBuild
2015-12-27 13:13:56 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-12-27 13:13:56 ----D---- C:\Program Files (x86)\MSBuild
2015-12-27 13:12:31 ----D---- C:\Program Files\Microsoft Office 15
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-27 13:12:02 ----A---- C:\Windows\system32\TsWpfWrp.exe
2015-12-27 13:12:02 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2015-12-27 13:12:02 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-27 13:11:59 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-12-27 13:09:57 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-12-27 13:09:57 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvopencl.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvoglv64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvinitx.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvIFR64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvFBC64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvdispgenco6436143.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvdispco6436143.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcuvid.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcuda.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcompiler.dll
2015-12-27 13:09:33 ----D---- C:\ProgramData\PlotSoft
2015-12-27 13:09:33 ----D---- C:\Program Files (x86)\PlotSoft
2015-12-27 13:02:42 ----D---- C:\Program Files (x86)\Adobe
2015-12-27 13:02:31 ----D---- C:\ProgramData\Adobe
2015-12-27 12:54:05 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-12-27 12:54:05 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-12-27 12:54:03 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-12-27 12:54:03 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\nvspcap64.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2015-12-27 12:53:49 ----D---- C:\ProgramData\Package Cache
2015-12-27 12:53:34 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-12-27 12:53:34 ----A---- C:\Windows\system32\nvaudcap64v.dll
2015-12-27 12:53:34 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-12-27 12:46:18 ----D---- C:\Program Files (x86)\TeamViewer
2015-12-27 12:07:29 ----HDC---- C:\ProgramData\{AA6BF06E-316C-487A-9BC2-5F06A43C56B1}
2015-12-27 12:05:27 ----D---- C:\ProgramData\SupportAssistAgent
2015-12-27 12:05:27 ----D---- C:\Program Files (x86)\Dell
2015-12-27 11:49:32 ----D---- C:\Users\ppoli\AppData\Roaming\Dell
2015-12-27 11:49:19 ----D---- C:\ProgramData\PC-Doctor for Windows
2015-12-27 11:49:17 ----D---- C:\ProgramData\PCDr
2015-12-27 11:49:17 ----D---- C:\Program Files\Dell Support Center
2015-12-27 11:48:46 ----D---- C:\Program Files\Dell
2015-12-27 11:47:17 ----D---- C:\Users\ppoli\AppData\Roaming\PCDr
2015-12-27 11:47:15 ----D---- C:\temp
2015-12-27 11:44:06 ----D---- C:\Windows\system32\MRT
2015-12-27 11:44:03 ----A---- C:\Windows\system32\MRT.exe
2015-12-27 11:43:59 ----D---- C:\Users\ppoli\AppData\Roaming\GHISLER
2015-12-27 11:43:59 ----D---- C:\Program Files\Totalcmd
2015-12-27 11:43:40 ----A---- C:\Windows\system32\mshtml.dll
2015-12-27 11:43:39 ----A---- C:\Windows\system32\edgehtml.dll
2015-12-27 11:43:37 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-12-27 11:43:35 ----A---- C:\Windows\system32\ieframe.dll
2015-12-27 11:43:34 ----A---- C:\Windows\SYSWOW64\twinui.dll
2015-12-27 11:43:34 ----A---- C:\Windows\system32\twinui.dll
2015-12-27 11:43:33 ----A---- C:\Windows\system32\shell32.dll
2015-12-27 11:43:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-12-27 11:43:30 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-12-27 11:43:29 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-12-27 11:43:29 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2015-12-27 11:43:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-12-27 11:43:27 ----A---- C:\Windows\system32\twinui.appcore.dll
2015-12-27 11:43:27 ----A---- C:\Windows\system32\cdp.dll
2015-12-27 11:43:26 ----A---- C:\Windows\SYSWOW64\ETWCoreUIComponentsResources.dll
2015-12-27 11:43:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-12-27 11:43:26 ----A---- C:\Windows\system32\ETWCoreUIComponentsResources.dll
2015-12-27 11:43:26 ----A---- C:\Windows\system32\CoreUIComponents.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\cdp.dll
2015-12-27 11:43:25 ----A---- C:\Windows\system32\msftedit.dll
2015-12-27 11:43:25 ----A---- C:\Windows\system32\InputService.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\InputService.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2015-12-27 11:43:24 ----A---- C:\Windows\system32\drivers\ntfs.sys
2015-12-27 11:43:24 ----A---- C:\Windows\system32\d3d11.dll
2015-12-27 11:43:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\modernexecserver.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\mfnetsrc.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\mfcore.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\XblAuthManager.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\wuaueng.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\wininet.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\mf.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\comsvcs.dll
2015-12-27 11:43:21 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-12-27 11:43:21 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\wwansvc.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\Unistore.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\authui.dll
2015-12-27 11:43:20 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2015-12-27 11:43:20 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\usermgr.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\LicenseManager.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\win32kfull.sys
2015-12-27 11:43:19 ----A---- C:\Windows\system32\PlayToManager.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\GdiPlus.dll
2015-12-27 11:43:18 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2015-12-27 11:43:18 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\vbscript.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\UIAutomationCore.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\iertutil.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\dcomp.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2015-12-27 11:43:17 ----A---- C:\Windows\system32\wpncore.dll
2015-12-27 11:43:17 ----A---- C:\Windows\system32\win32kbase.sys
2015-12-27 11:43:17 ----A---- C:\Windows\system32\services.exe
2015-12-27 11:43:17 ----A---- C:\Windows\system32\BingOnlineServices.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\WpcWebFilter.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\kerberos.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\BingOnlineServices.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\Windows.Media.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\PhoneProviders.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\ntdll.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\msfeeds.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\MbaeApi.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\MapControlCore.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\jscript.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\enterprisecsps.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\NetSetupEngine.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\generaltel.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\AudioEng.dll
2015-12-27 11:43:13 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2015-12-27 11:43:13 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2015-12-27 11:43:13 ----A---- C:\Windows\system32\lsasrv.dll
2015-12-27 11:43:12 ----A---- C:\Windows\SYSWOW64\user32.dll
2015-12-27 11:43:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-12-27 11:43:12 ----A---- C:\Windows\system32\user32.dll
2015-12-27 11:43:12 ----A---- C:\Windows\system32\PlayToDevice.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-12-27 11:43:11 ----A---- C:\Windows\system32\TextInputFramework.dll
2015-12-27 11:43:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-12-27 11:43:10 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\urlmon.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\mfplat.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\LogonController.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\deviceaccess.dll
2015-12-27 11:43:09 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2015-12-27 11:43:09 ----A---- C:\Windows\SYSWOW64\dcomp.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\SensorService.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfsrcsnk.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfds.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\drivers\afd.sys
2015-12-27 11:43:09 ----A---- C:\Windows\system32\DeviceCensus.exe
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\WpcWebFilter.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfds.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\LogonController.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2015-12-27 11:43:08 ----A---- C:\Windows\system32\wcmsvc.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2015-12-27 11:43:08 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-12-27 11:43:08 ----A---- C:\Windows\system32\cryptngc.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\audiosrv.dll
2015-12-27 11:43:07 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\XboxNetApiSvc.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\Windows.UI.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\tetheringservice.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\provengine.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\mfreadwrite.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\MFPlay.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\fontdrvhost.exe
2015-12-27 11:43:07 ----A---- C:\Windows\system32\drivers\rmcast.sys
2015-12-27 11:43:07 ----A---- C:\Windows\system32\dmenrollengine.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\policymanager.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\cryptngc.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\provhandlers.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\mfps.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\MBMediaManager.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\ie4uinit.exe
2015-12-27 11:43:06 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\SRH.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\XblAuthManagerProxy.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\wcmcsp.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\StoreAgent.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\policymanager.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\MSFlacDecoder.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\MapConfiguration.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\InstallAgent.exe
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\sdstor.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\cng.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\capimg.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\dialserver.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\catsrvut.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\acmigration.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\WWanAPI.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\NetSetupApi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\mssign32.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\WWanAPI.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\wimgapi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\SRH.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\qdvd.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\NetSetupApi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\mssign32.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\MDEServer.exe
2015-12-27 11:43:04 ----A---- C:\Windows\system32\iedkcs32.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\wwapi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\wwapi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\WWAHost.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\wuauclt.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\SensorsUtilsV2.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\SensorsNativeApi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\mfpmp.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\EncDump.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\AudioSes.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\audiodg.exe
2015-12-27 11:43:02 ----A---- C:\Windows\SYSWOW64\XblAuthManagerProxy.dll
2015-12-27 11:43:02 ----A---- C:\Windows\SYSWOW64\MSFlacDecoder.dll
2015-12-27 11:43:02 ----A---- C:\Windows\system32\wimserv.exe
2015-12-27 11:43:02 ----A---- C:\Windows\system32\wifitask.exe
2015-12-27 11:43:02 ----A---- C:\Windows\system32\drivers\wimmount.sys
2015-12-27 11:43:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-12-27 11:43:01 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\provtool.exe
2015-12-27 11:43:01 ----A---- C:\Windows\system32\provdatastore.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\NetSetupSvc.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\KnobsCore.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\flvprophandler.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\CellularAPI.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\StorSvc.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\shutdownux.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\ProvPluginEng.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\provisioningcsp.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\policymanagerprecheck.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\moshostcore.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\moshost.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\MapsStore.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\fveapibase.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\fveapi.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\bcastdvr.exe
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2015-12-27 11:42:58 ----A---- C:\Windows\system32\wwanmm.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\mos.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\iesetup.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\iernonce.dll
2015-12-27 11:42:57 ----A---- C:\Windows\SYSWOW64\mos.dll
2015-12-27 11:42:57 ----A---- C:\Windows\system32\wshrm.dll
2015-12-27 11:42:57 ----A---- C:\Windows\system32\win32k.sys
2015-12-27 11:42:56 ----D---- C:\Users\ppoli\AppData\Roaming\Winamp
2015-12-27 11:42:56 ----D---- C:\Program Files (x86)\Winamp
2015-12-27 11:42:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-12-27 11:42:56 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\wwanconn.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\pnidui.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\mdmmigrator.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\jsproxy.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\dmcertinst.exe
2015-12-27 11:42:56 ----A---- C:\Windows\system32\BingMaps.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\AppCapture.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\SRHInproc.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\NMAA.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\MapControlCore.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\JpMapControl.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\wwanprotdim.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\Wwanpref.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\wwancfg.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\UserMgrProxy.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\SRHInproc.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\offlinelsa.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\NMAA.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\JpMapControl.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\fontsub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\XblAuthTokenBrokerExt.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\WordBreakers.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\wininetlui.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\offlinelsa.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MosStorage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MosHostClient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MapsBtSvc.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\InputLocaleManager.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\EditBufferTestHook.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\bcastdvr.proxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\AppCapture.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\XblAuthTokenBrokerExt.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wups2.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wsplib.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\WordBreakers.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wininetlui.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wificonnapi.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tzautoupdate.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tetheringconfigsp.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tetheringclient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\StorageUsage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\SensorsNativeApi.V2.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\rilproxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\readingviewresources.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\provops.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\NFCProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\nativemap.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MosStorage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MosHostClient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\mapsupdatetask.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\mapstoasttask.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsCSP.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsBtSvcProxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsBtSvc.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\KnobsCsp.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\InputLocaleManager.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\ihvrilproxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\enrollmentapi.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\EditBufferTestHook.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\dciman32.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\bcastdvr.proxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\BarcodeProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\BackgroundTransferHost.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\lpk.dll
2015-12-27 11:42:53 ----A---- C:\Windows\system32\LaunchWinApp.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\IcsEntitlementHost.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\BackgroundTransferHost.exe
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\UIAutomationCoreRes.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\NmaDirect.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\MosResource.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MosTrace.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MosHost.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MapControls.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\UIAutomationCoreRes.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\NmaDirect.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\MosResource.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MosHost.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MapControls.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\atmlib.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\atmfd.dll
2015-12-27 11:42:51 ----A---- C:\Windows\SYSWOW64\MapControlStringsRes.dll
2015-12-27 11:42:51 ----A---- C:\Windows\system32\MapControlStringsRes.dll
2015-12-27 10:50:13 ----D---- C:\Users\ppoli\AppData\Roaming\ESET
2015-12-27 10:30:05 ----D---- C:\Users\ppoli\AppData\Roaming\Mozilla
2015-12-27 10:30:00 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-27 10:29:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-27 10:20:50 ----D---- C:\ProgramData\NVIDIA
2015-12-27 10:20:44 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvvsvc.exe
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvsvcr.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvsvc64.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvshext.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvmctray.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvcpl.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nv3dappshextr.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nv3dappshext.dll
2015-12-27 10:20:06 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-27 10:20:00 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-27 10:14:18 ----D---- C:\ProgramData\ESET
2015-12-27 10:14:13 ----D---- C:\Program Files\ESET
2015-12-27 10:07:31 ----D---- C:\Program Files (x86)\Intel
2015-12-27 10:07:27 ----A---- C:\Windows\system32\OpenCL.DLL
2015-12-27 10:07:14 ----D---- C:\Intel
2015-12-27 10:07:14 ----A---- C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-27 10:07:14 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-27 10:06:27 ----D---- C:\Program Files\Intel
2015-12-27 10:01:13 ----D---- C:\ProgramData\Microsoft OneDrive
2015-12-27 10:00:56 ----D---- C:\Windows\system32\SRSLabs
2015-12-27 10:00:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-12-27 10:00:52 ----D---- C:\Program Files\Realtek
2015-12-27 09:59:52 ----A---- C:\Windows\SYSWOW64\NlsLexicons0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\SYSWOW64\NlsData0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\prm0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\NlsData0009.dll
2015-12-27 09:57:59 ----D---- C:\Users\ppoli\AppData\Roaming\Adobe
2015-12-27 09:57:06 ----SD---- C:\Users\ppoli\AppData\Roaming\Microsoft
2015-12-27 09:52:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-12-27 09:50:31 ----D---- C:\Windows\CSC
2015-12-27 09:50:25 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2015-12-27 09:50:01 ----HD---- C:\Program Files\Uninstall Information
2015-12-27 09:50:00 ----D---- C:\Windows\SoftwareDistribution
2015-12-27 09:50:00 ----D---- C:\ProgramData\USOShared
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Šablony
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Plocha
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Nabídka Start
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Dokumenty
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Data aplikací
2015-12-27 09:47:51 ----SHD---- C:\Documents and Settings
2015-12-27 09:47:26 ----ASH---- C:\hiberfil.sys
2015-12-27 09:46:44 ----SHD---- C:\Recovery
2015-12-27 09:45:12 ----D---- C:\Windows\Prefetch
2015-12-27 09:45:12 ----AS---- C:\Windows\bootstat.dat
2015-12-27 09:44:34 ----SD---- C:\Windows\system32\Microsoft
2015-12-27 09:44:26 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-12-27 09:44:24 ----ASH---- C:\swapfile.sys
2015-12-27 09:44:24 ----ASH---- C:\pagefile.sys
2015-12-27 09:44:20 ----SHD---- C:\System Volume Information
2015-12-27 09:43:57 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 1 month======

2015-12-27 17:10:27 ----RD---- C:\Program Files
2015-12-27 17:09:58 ----D---- C:\Windows\Temp
2015-12-27 16:58:18 ----SHD---- C:\Windows\Installer
2015-12-27 16:53:52 ----RD---- C:\Program Files (x86)
2015-12-27 16:53:00 ----D---- C:\Windows\Tasks
2015-12-27 16:53:00 ----D---- C:\Windows\system32\Tasks
2015-12-27 16:21:00 ----D---- C:\Windows\system32\sru
2015-12-27 15:44:29 ----D---- C:\Windows\Microsoft.NET
2015-12-27 15:44:20 ----RD---- C:\Windows\assembly
2015-12-27 15:43:43 ----D---- C:\Windows\SysWOW64
2015-12-27 15:39:22 ----HD---- C:\ProgramData
2015-12-27 14:34:59 ----D---- C:\Windows\System32
2015-12-27 14:26:01 ----D---- C:\Windows\INF
2015-12-27 14:19:59 ----D---- C:\Windows\system32\WDI
2015-12-27 14:18:14 ----D---- C:\Windows\system32\drivers
2015-12-27 13:52:29 ----HD---- C:\Program Files\WindowsApps
2015-12-27 13:23:23 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-27 13:23:10 ----D---- C:\Program Files (x86)\Common Files
2015-12-27 13:23:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-27 13:22:54 ----D---- C:\Windows\system32\DriverStore
2015-12-27 13:16:29 ----SD---- C:\ProgramData\Microsoft
2015-12-27 13:14:44 ----D---- C:\Windows\CbsTemp
2015-12-27 13:14:43 ----D---- C:\Windows
2015-12-27 13:14:42 ----D---- C:\Windows\WinSxS
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\MUI
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-12-27 13:14:05 ----D---- C:\Windows\system32\MUI
2015-12-27 13:14:05 ----D---- C:\Windows\system32\cs-CZ
2015-12-27 13:13:57 ----RSD---- C:\Windows\Fonts
2015-12-27 12:54:07 ----D---- C:\Windows\system32\config
2015-12-27 12:22:09 ----D---- C:\Windows\SYSWOW64\migration
2015-12-27 12:22:09 ----D---- C:\Windows\SYSWOW64\Dism
2015-12-27 12:22:07 ----D---- C:\Windows\system32\SystemResetPlatform
2015-12-27 12:22:03 ----D---- C:\Windows\system32\oobe
2015-12-27 12:22:03 ----D---- C:\Windows\system32\migration
2015-12-27 12:22:03 ----D---- C:\Windows\system32\drivers\UMDF
2015-12-27 12:22:03 ----D---- C:\Windows\system32\Dism
2015-12-27 12:22:03 ----D---- C:\Windows\system32\appraiser
2015-12-27 12:22:01 ----RD---- C:\Windows\PurchaseDialog
2015-12-27 12:22:01 ----D---- C:\Windows\Provisioning
2015-12-27 12:21:59 ----RD---- C:\Windows\ImmersiveControlPanel
2015-12-27 12:21:59 ----D---- C:\Windows\bcastdvr
2015-12-27 12:21:59 ----D---- C:\Windows\AppPatch
2015-12-27 12:21:59 ----D---- C:\Program Files\Internet Explorer
2015-12-27 12:21:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-27 11:49:15 ----D---- C:\Windows\AppReadiness
2015-12-27 11:44:06 ----D---- C:\Windows\debug
2015-12-27 11:43:12 ----D---- C:\Windows\Logs
2015-12-27 11:41:32 ----D---- C:\Windows\system32\catroot2
2015-12-27 10:41:59 ----D---- C:\Windows\system32\LogFiles
2015-12-27 10:20:31 ----D---- C:\Windows\Help
2015-12-27 10:16:15 ----RD---- C:\Users
2015-12-27 10:15:54 ----RD---- C:\Windows\DevicesFlow
2015-12-27 10:14:51 ----HD---- C:\Windows\ELAMBKUP
2015-12-27 10:07:27 ----D---- C:\Windows\system32\CatRoot
2015-12-27 10:05:38 ----D---- C:\Windows\system32\CodeIntegrity
2015-12-27 10:00:02 ----D---- C:\Windows\OCR
2015-12-27 09:59:30 ----SHD---- C:\$Recycle.Bin
2015-12-27 09:58:49 ----RD---- C:\Windows\PrintDialog
2015-12-27 09:58:48 ----RD---- C:\Windows\MiracastView
2015-12-27 09:57:13 ----D---- C:\Windows\system32\WinBioDatabase
2015-12-27 09:53:43 ----D---- C:\Windows\system32\restore
2015-12-27 09:52:16 ----D---- C:\Windows\system32\wbem
2015-12-27 09:51:06 ----D---- C:\Windows\rescache
2015-12-27 09:50:35 ----D---- C:\Windows\system32\spool
2015-12-27 09:50:34 ----D---- C:\Windows\system32\FxsTmp
2015-12-27 09:50:00 ----D---- C:\ProgramData\USOPrivate
2015-12-27 09:47:51 ----D---- C:\Program Files\Windows NT
2015-12-27 09:46:44 ----D---- C:\Windows\system32\Recovery
2015-12-27 09:46:41 ----D---- C:\Windows\system32\Sysprep
2015-12-27 09:44:36 ----D---- C:\Windows\ServiceProfiles
2015-12-16 17:59:13 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-12-16 17:59:13 ----A---- C:\Windows\system32\nvapi64.dll
2015-12-01 01:33:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2015-11-20 199680]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2015-11-20 69840]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-11-20 263528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2015-11-20 206312]
R1 EpfwLWF;@oem18.inf,%EpfwLWF_Desc%;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2015-11-20 52872]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 bcbtums;@oem4.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2015-10-29 208184]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2015-10-30 7585280]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2015-10-30 112640]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2015-10-30 245248]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-10-30 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\system32\DRIVERS\BTHUSB.sys [2015-10-30 84992]
R3 DDDriver;DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [2015-09-11 32464]
R3 DellProf;DellProf; C:\Windows\system32\drivers\DellProf.sys [2015-09-11 24240]
R3 DellRbtn;@oem2.inf,%DellRbtn%;Airplane Mode Switch; C:\Windows\System32\drivers\DellRbtn.sys [2015-05-08 19440]
R3 iaLPSS_UART2;@oem3.inf,%iaLPSS_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\Windows\System32\drivers\iaLPSS_UART2.sys [2015-06-15 155400]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-07-18 6389688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-08-04 4518136]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-07-16 472872]
R3 MEIx64;@oem7.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-07-10 193336]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-12-18 12426896]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-09 19576]
R3 nvvad_WaveExtensible;@oem28.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-10-30 175104]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 eelam;eelam; C:\Windows\system32\DRIVERS\eelam.sys [2015-11-20 14976]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\system32\DRIVERS\BTHport.sys [2015-10-30 953344]
S3 btwampfl;@oem4.inf,%btwampfl.ServiceName%;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2015-10-29 223040]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-11-22 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RTSUER;@oem5.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\Windows\system32\Drivers\RtsUer.sys [2015-08-05 412400]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-10-30 28512]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 BcmBtRSupport;@oem4.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\Windows\system32\BtwRSupportService.exe [2015-10-29 2286864]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-11-24 2802360]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DellDataVault;Dell Data Vault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2015-09-11 2574168]
R2 DellDataVaultWiz;Dell Data Vault Wizard; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [2015-09-11 201560]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2015-11-20 2522616]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-09 1156216]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-07-18 351120]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-09 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-09 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-12-16 1256240]
R2 OneSyncSvc_4a786;Hostitel synchronizace_4a786; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-08-04 312056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-12-16 417584]
R2 SupportAssistAgent;Dell SupportAssist Agent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [2015-09-30 21160]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-12-14 6889232]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-07-18 283024]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-09 8185464]
R3 PimIndexMaintenanceSvc_4a786;Data kontaktů_4a786; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 UnistoreSvc_4a786;Úložiště uživatelských dat_4a786; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-27 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38e36;Hostitel synchronizace_38e36; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-27 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4a786;Služba zasílání zpráv_4a786; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-22 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-11-24 150600]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2015-10-30 290304]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o preventivku

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
gully
Návštěvník
Návštěvník
Příspěvky: 89
Registrován: 21 pro 2014 07:39

Re: Prosím o preventivku

#3 Příspěvek od gully »

# AdwCleaner v5.026 - Logfile created 28/12/2015 at 20:23:11
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : ppoli - GULLYHO-INSPIRO
# Running from : C:\Users\ppoli\Desktop\adwcleaner_5.026.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

[-] [C:\Users\ppoli\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.babylon.com
[-] [C:\Users\ppoli\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : babylon.com

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [906 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o preventivku

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
gully
Návštěvník
Návštěvník
Příspěvky: 89
Registrován: 21 pro 2014 07:39

Re: Prosím o preventivku

#5 Příspěvek od gully »

Logfile of random's system information tool 1.10 (written by random/random)
Run by ppoli at 2015-12-28 20:50:27
Microsoft Windows 10 Pro
System drive C: has 913 GB (97%) free of 943 GB
Total RAM: 8103 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:50:28, on 28.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files\trend micro\ppoli.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [OneDrive] "C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @oem4.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe
O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9798 bytes

======Listing Processes======








C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted

"dwm.exe"
C:\Windows\system32\svchost.exe -k LocalService
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
dashost.exe {a80e51b9-d841-46cc-b1172ba5c69ad04a}
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\igfxCUIService.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\BtwRSupportService.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\SysWow64\IntelCpHeciSvc.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
sihost.exe
\??\C:\Windows\system32\conhost.exe 0x4
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
C:\Windows\System32\RuntimeBroker.exe -Embedding
igfxEM.exe
igfxHK.exe
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
igfxTray.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
rundll32 "C:\Program Files\ESET\ESET Smart Security\x86\eplgHooks.dll",Proc32_HooksLoop
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVault.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\WmiApSrv.exe

"C:\Users\ppoli\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\ppoli\AppData\Roaming\Mozilla\Firefox\Profiles\hufhwzyy.default

prefs.js - "browser.startup.homepage" - "https://google.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.80.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.80.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll


C:\Users\ppoli\AppData\Roaming\Mozilla\Firefox\Profiles\hufhwzyy.default\extensions\
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-27 219304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-12-27 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-27 2339032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-12-27 211880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-09 2771576]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-12-09 1846016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-27 551112]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableLUA"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-28 20:19:39 ----D---- C:\AdwCleaner
2015-12-28 20:15:33 ----D---- C:\Program Files\CCleaner
2015-12-28 17:03:46 ----D---- C:\Windows\system32\SleepStudy
2015-12-28 11:09:42 ----HD---- C:\OneDriveTemp
2015-12-28 00:54:19 ----D---- C:\Program Files (x86)\GRETECH
2015-12-28 00:40:35 ----D---- C:\Users\ppoli\AppData\Roaming\WinLiveUpdate
2015-12-28 00:40:23 ----D---- C:\Users\ppoli\AppData\Roaming\MCommon1
2015-12-27 17:10:27 ----D---- C:\Program Files\trend micro
2015-12-27 17:10:26 ----D---- C:\rsit
2015-12-27 16:52:58 ----D---- C:\Program Files (x86)\Google
2015-12-27 15:43:42 ----D---- C:\Program Files\paint.net
2015-12-27 15:42:14 ----D---- C:\Users\ppoli\AppData\Roaming\WinRAR
2015-12-27 15:39:22 ----D---- C:\ProgramData\FastStone
2015-12-27 15:38:27 ----D---- C:\Program Files (x86)\FastStone Capture
2015-12-27 15:37:27 ----D---- C:\Users\ppoli\AppData\Roaming\FastStone
2015-12-27 15:37:17 ----D---- C:\Program Files (x86)\FastStone Image Viewer
2015-12-27 15:07:06 ----D---- C:\Users\ppoli\AppData\Roaming\FileZilla
2015-12-27 15:07:01 ----D---- C:\Program Files\FileZilla FTP Client
2015-12-27 14:38:39 ----D---- C:\Program Files (x86)\Western Digital
2015-12-27 14:35:38 ----D---- C:\Users\ppoli\AppData\Roaming\Macromedia
2015-12-27 14:35:13 ----D---- C:\Users\ppoli\AppData\Roaming\com.wd.WDMyCloud
2015-12-27 14:35:02 ----D---- C:\Program Files\Bonjour Print Services
2015-12-27 14:34:59 ----D---- C:\ProgramData\Apple
2015-12-27 14:34:59 ----D---- C:\Program Files\Bonjour
2015-12-27 14:34:59 ----D---- C:\Program Files (x86)\Bonjour
2015-12-27 14:34:46 ----D---- C:\ProgramData\Western Digital
2015-12-27 13:47:44 ----D---- C:\Program Files\glassfish-4.1.1
2015-12-27 13:45:15 ----D---- C:\Program Files\NetBeans 8.1
2015-12-27 13:39:47 ----D---- C:\Users\ppoli\AppData\Roaming\NetBeans
2015-12-27 13:35:12 ----A---- C:\Windows\system32\javaws.exe
2015-12-27 13:35:11 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-12-27 13:35:11 ----A---- C:\Windows\system32\javaw.exe
2015-12-27 13:35:11 ----A---- C:\Windows\system32\java.exe
2015-12-27 13:34:21 ----D---- C:\Program Files\Java
2015-12-27 13:23:33 ----D---- C:\Program Files\WinRAR
2015-12-27 13:16:40 ----D---- C:\Program Files (x86)\Microsoft Office
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\XPSViewer
2015-12-27 13:13:56 ----D---- C:\Program Files\Reference Assemblies
2015-12-27 13:13:56 ----D---- C:\Program Files\MSBuild
2015-12-27 13:13:56 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-12-27 13:13:56 ----D---- C:\Program Files (x86)\MSBuild
2015-12-27 13:12:31 ----D---- C:\Program Files\Microsoft Office 15
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-27 13:12:02 ----A---- C:\Windows\system32\TsWpfWrp.exe
2015-12-27 13:12:02 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2015-12-27 13:12:02 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-27 13:11:59 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-12-27 13:09:57 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-12-27 13:09:57 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvopencl.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvoglv64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvinitx.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvIFR64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvFBC64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvdispgenco6436143.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvdispco6436143.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcuvid.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcuda.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcompiler.dll
2015-12-27 13:09:33 ----D---- C:\ProgramData\PlotSoft
2015-12-27 13:09:33 ----D---- C:\Program Files (x86)\PlotSoft
2015-12-27 13:02:42 ----D---- C:\Program Files (x86)\Adobe
2015-12-27 13:02:31 ----D---- C:\ProgramData\Adobe
2015-12-27 12:54:05 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-12-27 12:54:05 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-12-27 12:54:03 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-12-27 12:54:03 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\nvspcap64.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2015-12-27 12:53:49 ----D---- C:\ProgramData\Package Cache
2015-12-27 12:53:34 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-12-27 12:53:34 ----A---- C:\Windows\system32\nvaudcap64v.dll
2015-12-27 12:53:34 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-12-27 12:46:18 ----D---- C:\Program Files (x86)\TeamViewer
2015-12-27 12:07:29 ----HDC---- C:\ProgramData\{AA6BF06E-316C-487A-9BC2-5F06A43C56B1}
2015-12-27 12:05:27 ----D---- C:\ProgramData\SupportAssistAgent
2015-12-27 12:05:27 ----D---- C:\Program Files (x86)\Dell
2015-12-27 11:49:32 ----D---- C:\Users\ppoli\AppData\Roaming\Dell
2015-12-27 11:49:19 ----D---- C:\ProgramData\PC-Doctor for Windows
2015-12-27 11:49:17 ----D---- C:\ProgramData\PCDr
2015-12-27 11:49:17 ----D---- C:\Program Files\Dell Support Center
2015-12-27 11:48:46 ----D---- C:\Program Files\Dell
2015-12-27 11:47:17 ----D---- C:\Users\ppoli\AppData\Roaming\PCDr
2015-12-27 11:47:15 ----D---- C:\temp
2015-12-27 11:44:06 ----D---- C:\Windows\system32\MRT
2015-12-27 11:44:03 ----A---- C:\Windows\system32\MRT.exe
2015-12-27 11:43:59 ----D---- C:\Users\ppoli\AppData\Roaming\GHISLER
2015-12-27 11:43:59 ----D---- C:\Program Files\Totalcmd
2015-12-27 11:43:40 ----A---- C:\Windows\system32\mshtml.dll
2015-12-27 11:43:39 ----A---- C:\Windows\system32\edgehtml.dll
2015-12-27 11:43:37 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-12-27 11:43:35 ----A---- C:\Windows\system32\ieframe.dll
2015-12-27 11:43:34 ----A---- C:\Windows\SYSWOW64\twinui.dll
2015-12-27 11:43:34 ----A---- C:\Windows\system32\twinui.dll
2015-12-27 11:43:33 ----A---- C:\Windows\system32\shell32.dll
2015-12-27 11:43:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-12-27 11:43:30 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-12-27 11:43:29 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-12-27 11:43:29 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2015-12-27 11:43:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-12-27 11:43:27 ----A---- C:\Windows\system32\twinui.appcore.dll
2015-12-27 11:43:27 ----A---- C:\Windows\system32\cdp.dll
2015-12-27 11:43:26 ----A---- C:\Windows\SYSWOW64\ETWCoreUIComponentsResources.dll
2015-12-27 11:43:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-12-27 11:43:26 ----A---- C:\Windows\system32\ETWCoreUIComponentsResources.dll
2015-12-27 11:43:26 ----A---- C:\Windows\system32\CoreUIComponents.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\cdp.dll
2015-12-27 11:43:25 ----A---- C:\Windows\system32\msftedit.dll
2015-12-27 11:43:25 ----A---- C:\Windows\system32\InputService.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\InputService.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2015-12-27 11:43:24 ----A---- C:\Windows\system32\drivers\ntfs.sys
2015-12-27 11:43:24 ----A---- C:\Windows\system32\d3d11.dll
2015-12-27 11:43:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\modernexecserver.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\mfnetsrc.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\mfcore.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\XblAuthManager.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\wuaueng.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\wininet.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\mf.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\comsvcs.dll
2015-12-27 11:43:21 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-12-27 11:43:21 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\wwansvc.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\Unistore.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\authui.dll
2015-12-27 11:43:20 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2015-12-27 11:43:20 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\usermgr.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\LicenseManager.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\win32kfull.sys
2015-12-27 11:43:19 ----A---- C:\Windows\system32\PlayToManager.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\GdiPlus.dll
2015-12-27 11:43:18 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2015-12-27 11:43:18 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\vbscript.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\UIAutomationCore.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\iertutil.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\dcomp.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2015-12-27 11:43:17 ----A---- C:\Windows\system32\wpncore.dll
2015-12-27 11:43:17 ----A---- C:\Windows\system32\win32kbase.sys
2015-12-27 11:43:17 ----A---- C:\Windows\system32\services.exe
2015-12-27 11:43:17 ----A---- C:\Windows\system32\BingOnlineServices.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\WpcWebFilter.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\kerberos.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\BingOnlineServices.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\Windows.Media.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\PhoneProviders.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\ntdll.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\msfeeds.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\MbaeApi.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\MapControlCore.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\jscript.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\enterprisecsps.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\NetSetupEngine.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\generaltel.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\AudioEng.dll
2015-12-27 11:43:13 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2015-12-27 11:43:13 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2015-12-27 11:43:13 ----A---- C:\Windows\system32\lsasrv.dll
2015-12-27 11:43:12 ----A---- C:\Windows\SYSWOW64\user32.dll
2015-12-27 11:43:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-12-27 11:43:12 ----A---- C:\Windows\system32\user32.dll
2015-12-27 11:43:12 ----A---- C:\Windows\system32\PlayToDevice.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-12-27 11:43:11 ----A---- C:\Windows\system32\TextInputFramework.dll
2015-12-27 11:43:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-12-27 11:43:10 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\urlmon.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\mfplat.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\LogonController.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\deviceaccess.dll
2015-12-27 11:43:09 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2015-12-27 11:43:09 ----A---- C:\Windows\SYSWOW64\dcomp.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\SensorService.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfsrcsnk.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfds.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\drivers\afd.sys
2015-12-27 11:43:09 ----A---- C:\Windows\system32\DeviceCensus.exe
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\WpcWebFilter.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfds.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\LogonController.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2015-12-27 11:43:08 ----A---- C:\Windows\system32\wcmsvc.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2015-12-27 11:43:08 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-12-27 11:43:08 ----A---- C:\Windows\system32\cryptngc.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\audiosrv.dll
2015-12-27 11:43:07 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\XboxNetApiSvc.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\Windows.UI.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\tetheringservice.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\provengine.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\mfreadwrite.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\MFPlay.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\fontdrvhost.exe
2015-12-27 11:43:07 ----A---- C:\Windows\system32\drivers\rmcast.sys
2015-12-27 11:43:07 ----A---- C:\Windows\system32\dmenrollengine.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\policymanager.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\cryptngc.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\provhandlers.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\mfps.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\MBMediaManager.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\ie4uinit.exe
2015-12-27 11:43:06 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\SRH.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\XblAuthManagerProxy.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\wcmcsp.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\StoreAgent.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\policymanager.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\MSFlacDecoder.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\MapConfiguration.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\InstallAgent.exe
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\sdstor.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\cng.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\capimg.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\dialserver.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\catsrvut.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\acmigration.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\WWanAPI.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\NetSetupApi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\mssign32.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\WWanAPI.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\wimgapi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\SRH.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\qdvd.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\NetSetupApi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\mssign32.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\MDEServer.exe
2015-12-27 11:43:04 ----A---- C:\Windows\system32\iedkcs32.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\wwapi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\wwapi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\WWAHost.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\wuauclt.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\SensorsUtilsV2.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\SensorsNativeApi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\mfpmp.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\EncDump.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\AudioSes.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\audiodg.exe
2015-12-27 11:43:02 ----A---- C:\Windows\SYSWOW64\XblAuthManagerProxy.dll
2015-12-27 11:43:02 ----A---- C:\Windows\SYSWOW64\MSFlacDecoder.dll
2015-12-27 11:43:02 ----A---- C:\Windows\system32\wimserv.exe
2015-12-27 11:43:02 ----A---- C:\Windows\system32\wifitask.exe
2015-12-27 11:43:02 ----A---- C:\Windows\system32\drivers\wimmount.sys
2015-12-27 11:43:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-12-27 11:43:01 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\provtool.exe
2015-12-27 11:43:01 ----A---- C:\Windows\system32\provdatastore.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\NetSetupSvc.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\KnobsCore.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\flvprophandler.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\CellularAPI.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\StorSvc.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\shutdownux.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\ProvPluginEng.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\provisioningcsp.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\policymanagerprecheck.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\moshostcore.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\moshost.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\MapsStore.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\fveapibase.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\fveapi.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\bcastdvr.exe
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2015-12-27 11:42:58 ----A---- C:\Windows\system32\wwanmm.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\mos.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\iesetup.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\iernonce.dll
2015-12-27 11:42:57 ----A---- C:\Windows\SYSWOW64\mos.dll
2015-12-27 11:42:57 ----A---- C:\Windows\system32\wshrm.dll
2015-12-27 11:42:57 ----A---- C:\Windows\system32\win32k.sys
2015-12-27 11:42:56 ----D---- C:\Users\ppoli\AppData\Roaming\Winamp
2015-12-27 11:42:56 ----D---- C:\Program Files (x86)\Winamp
2015-12-27 11:42:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-12-27 11:42:56 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\wwanconn.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\pnidui.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\mdmmigrator.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\jsproxy.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\dmcertinst.exe
2015-12-27 11:42:56 ----A---- C:\Windows\system32\BingMaps.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\AppCapture.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\SRHInproc.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\NMAA.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\MapControlCore.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\JpMapControl.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\wwanprotdim.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\Wwanpref.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\wwancfg.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\UserMgrProxy.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\SRHInproc.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\offlinelsa.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\NMAA.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\JpMapControl.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\fontsub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\XblAuthTokenBrokerExt.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\WordBreakers.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\wininetlui.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\offlinelsa.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MosStorage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MosHostClient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MapsBtSvc.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\InputLocaleManager.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\EditBufferTestHook.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\bcastdvr.proxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\AppCapture.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\XblAuthTokenBrokerExt.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wups2.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wsplib.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\WordBreakers.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wininetlui.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wificonnapi.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tzautoupdate.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tetheringconfigsp.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tetheringclient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\StorageUsage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\SensorsNativeApi.V2.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\rilproxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\readingviewresources.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\provops.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\NFCProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\nativemap.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MosStorage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MosHostClient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\mapsupdatetask.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\mapstoasttask.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsCSP.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsBtSvcProxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsBtSvc.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\KnobsCsp.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\InputLocaleManager.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\ihvrilproxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\enrollmentapi.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\EditBufferTestHook.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\dciman32.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\bcastdvr.proxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\BarcodeProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\BackgroundTransferHost.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\lpk.dll
2015-12-27 11:42:53 ----A---- C:\Windows\system32\LaunchWinApp.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\IcsEntitlementHost.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\BackgroundTransferHost.exe
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\UIAutomationCoreRes.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\NmaDirect.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\MosResource.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MosTrace.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MosHost.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MapControls.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\UIAutomationCoreRes.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\NmaDirect.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\MosResource.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MosHost.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MapControls.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\atmlib.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\atmfd.dll
2015-12-27 11:42:51 ----A---- C:\Windows\SYSWOW64\MapControlStringsRes.dll
2015-12-27 11:42:51 ----A---- C:\Windows\system32\MapControlStringsRes.dll
2015-12-27 10:50:13 ----D---- C:\Users\ppoli\AppData\Roaming\ESET
2015-12-27 10:30:05 ----D---- C:\Users\ppoli\AppData\Roaming\Mozilla
2015-12-27 10:30:00 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-27 10:29:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-27 10:20:50 ----D---- C:\ProgramData\NVIDIA
2015-12-27 10:20:44 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvvsvc.exe
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvsvcr.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvsvc64.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvshext.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvmctray.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvcpl.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nv3dappshextr.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nv3dappshext.dll
2015-12-27 10:20:06 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-27 10:20:00 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-27 10:14:18 ----D---- C:\ProgramData\ESET
2015-12-27 10:14:13 ----D---- C:\Program Files\ESET
2015-12-27 10:07:31 ----D---- C:\Program Files (x86)\Intel
2015-12-27 10:07:27 ----A---- C:\Windows\system32\OpenCL.DLL
2015-12-27 10:07:14 ----D---- C:\Intel
2015-12-27 10:07:14 ----A---- C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-27 10:06:27 ----D---- C:\Program Files\Intel
2015-12-27 10:01:13 ----D---- C:\ProgramData\Microsoft OneDrive
2015-12-27 10:00:56 ----D---- C:\Windows\system32\SRSLabs
2015-12-27 10:00:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-12-27 10:00:52 ----D---- C:\Program Files\Realtek
2015-12-27 09:59:52 ----A---- C:\Windows\SYSWOW64\NlsLexicons0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\SYSWOW64\NlsData0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\prm0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\NlsData0009.dll
2015-12-27 09:57:59 ----D---- C:\Users\ppoli\AppData\Roaming\Adobe
2015-12-27 09:57:06 ----SD---- C:\Users\ppoli\AppData\Roaming\Microsoft
2015-12-27 09:52:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-12-27 09:50:31 ----D---- C:\Windows\CSC
2015-12-27 09:50:25 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2015-12-27 09:50:01 ----HD---- C:\Program Files\Uninstall Information
2015-12-27 09:50:00 ----D---- C:\Windows\SoftwareDistribution
2015-12-27 09:50:00 ----D---- C:\ProgramData\USOShared
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Šablony
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Plocha
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Nabídka Start
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Dokumenty
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Data aplikací
2015-12-27 09:47:51 ----SHD---- C:\Documents and Settings
2015-12-27 09:47:26 ----ASH---- C:\hiberfil.sys
2015-12-27 09:46:44 ----SHD---- C:\Recovery
2015-12-27 09:45:12 ----D---- C:\Windows\Prefetch
2015-12-27 09:45:12 ----AS---- C:\Windows\bootstat.dat
2015-12-27 09:44:34 ----SD---- C:\Windows\system32\Microsoft
2015-12-27 09:44:26 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-12-27 09:44:24 ----ASH---- C:\swapfile.sys
2015-12-27 09:44:24 ----ASH---- C:\pagefile.sys
2015-12-27 09:44:20 ----SHD---- C:\System Volume Information
2015-12-27 09:43:57 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 1 month======

2015-12-28 20:40:37 ----D---- C:\Windows\Temp
2015-12-28 20:27:08 ----D---- C:\Windows\AppReadiness
2015-12-28 20:26:16 ----D---- C:\Windows\System32
2015-12-28 20:24:29 ----D---- C:\Windows
2015-12-28 20:24:07 ----D---- C:\Windows\system32\sru
2015-12-28 20:23:42 ----HD---- C:\Program Files\WindowsApps
2015-12-28 20:17:02 ----HD---- C:\ProgramData
2015-12-28 20:15:35 ----D---- C:\Windows\system32\Tasks
2015-12-28 20:15:33 ----RD---- C:\Program Files
2015-12-28 17:00:41 ----D---- C:\Windows\system32\config
2015-12-28 17:00:21 ----D---- C:\Windows\Microsoft.NET
2015-12-28 16:42:16 ----D---- C:\Windows\INF
2015-12-28 11:13:45 ----D---- C:\Windows\Logs
2015-12-28 11:11:39 ----D---- C:\Windows\appcompat
2015-12-28 00:54:19 ----RD---- C:\Program Files (x86)
2015-12-27 16:58:18 ----SHD---- C:\Windows\Installer
2015-12-27 16:53:00 ----D---- C:\Windows\Tasks
2015-12-27 15:44:20 ----RD---- C:\Windows\assembly
2015-12-27 15:43:43 ----D---- C:\Windows\SysWOW64
2015-12-27 14:19:59 ----D---- C:\Windows\system32\WDI
2015-12-27 14:18:14 ----D---- C:\Windows\system32\drivers
2015-12-27 13:23:23 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-27 13:23:10 ----D---- C:\Program Files (x86)\Common Files
2015-12-27 13:23:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-27 13:22:54 ----D---- C:\Windows\system32\DriverStore
2015-12-27 13:16:29 ----SD---- C:\ProgramData\Microsoft
2015-12-27 13:14:44 ----D---- C:\Windows\CbsTemp
2015-12-27 13:14:42 ----D---- C:\Windows\WinSxS
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\MUI
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-12-27 13:14:05 ----D---- C:\Windows\system32\MUI
2015-12-27 13:14:05 ----D---- C:\Windows\system32\cs-CZ
2015-12-27 13:13:57 ----RSD---- C:\Windows\Fonts
2015-12-27 12:22:09 ----D---- C:\Windows\SYSWOW64\migration
2015-12-27 12:22:09 ----D---- C:\Windows\SYSWOW64\Dism
2015-12-27 12:22:07 ----D---- C:\Windows\system32\SystemResetPlatform
2015-12-27 12:22:03 ----D---- C:\Windows\system32\oobe
2015-12-27 12:22:03 ----D---- C:\Windows\system32\migration
2015-12-27 12:22:03 ----D---- C:\Windows\system32\drivers\UMDF
2015-12-27 12:22:03 ----D---- C:\Windows\system32\Dism
2015-12-27 12:22:03 ----D---- C:\Windows\system32\appraiser
2015-12-27 12:22:01 ----RD---- C:\Windows\PurchaseDialog
2015-12-27 12:22:01 ----D---- C:\Windows\Provisioning
2015-12-27 12:21:59 ----RD---- C:\Windows\ImmersiveControlPanel
2015-12-27 12:21:59 ----D---- C:\Windows\bcastdvr
2015-12-27 12:21:59 ----D---- C:\Windows\AppPatch
2015-12-27 12:21:59 ----D---- C:\Program Files\Internet Explorer
2015-12-27 12:21:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-27 11:44:06 ----D---- C:\Windows\debug
2015-12-27 11:41:32 ----D---- C:\Windows\system32\catroot2
2015-12-27 10:41:59 ----D---- C:\Windows\system32\LogFiles
2015-12-27 10:20:31 ----D---- C:\Windows\Help
2015-12-27 10:16:15 ----RD---- C:\Users
2015-12-27 10:15:54 ----RD---- C:\Windows\DevicesFlow
2015-12-27 10:14:51 ----HD---- C:\Windows\ELAMBKUP
2015-12-27 10:07:27 ----D---- C:\Windows\system32\CatRoot
2015-12-27 10:05:38 ----D---- C:\Windows\system32\CodeIntegrity
2015-12-27 10:00:02 ----D---- C:\Windows\OCR
2015-12-27 09:59:30 ----SHD---- C:\$Recycle.Bin
2015-12-27 09:58:49 ----RD---- C:\Windows\PrintDialog
2015-12-27 09:58:48 ----RD---- C:\Windows\MiracastView
2015-12-27 09:57:13 ----D---- C:\Windows\system32\WinBioDatabase
2015-12-27 09:53:43 ----D---- C:\Windows\system32\restore
2015-12-27 09:52:16 ----D---- C:\Windows\system32\wbem
2015-12-27 09:51:06 ----D---- C:\Windows\rescache
2015-12-27 09:50:35 ----D---- C:\Windows\system32\spool
2015-12-27 09:50:34 ----D---- C:\Windows\system32\FxsTmp
2015-12-27 09:50:00 ----D---- C:\ProgramData\USOPrivate
2015-12-27 09:47:51 ----D---- C:\Program Files\Windows NT
2015-12-27 09:46:44 ----D---- C:\Windows\system32\Recovery
2015-12-27 09:46:41 ----D---- C:\Windows\system32\Sysprep
2015-12-27 09:44:36 ----D---- C:\Windows\ServiceProfiles
2015-12-16 17:59:13 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-12-16 17:59:13 ----A---- C:\Windows\system32\nvapi64.dll
2015-12-01 01:33:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2015-11-20 199680]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2015-11-20 69840]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-11-20 263528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2015-11-20 206312]
R1 EpfwLWF;@oem18.inf,%EpfwLWF_Desc%;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2015-11-20 52872]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 bcbtums;@oem4.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2015-10-29 208184]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2015-10-30 7585280]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2015-10-30 112640]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2015-10-30 245248]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-10-30 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\system32\DRIVERS\BTHUSB.sys [2015-10-30 84992]
R3 DDDriver;DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [2015-09-11 32464]
R3 DellProf;DellProf; C:\Windows\system32\drivers\DellProf.sys [2015-09-11 24240]
R3 DellRbtn;@oem2.inf,%DellRbtn%;Airplane Mode Switch; C:\Windows\System32\drivers\DellRbtn.sys [2015-05-08 19440]
R3 iaLPSS_UART2;@oem3.inf,%iaLPSS_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\Windows\System32\drivers\iaLPSS_UART2.sys [2015-06-15 155400]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-07-18 6389688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-08-04 4518136]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-07-16 472872]
R3 MEIx64;@oem7.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-07-10 193336]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-12-18 12426896]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-09 19576]
R3 nvvad_WaveExtensible;@oem28.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-10-30 175104]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 eelam;eelam; C:\Windows\system32\DRIVERS\eelam.sys [2015-11-20 14976]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\system32\DRIVERS\BTHport.sys [2015-10-30 953344]
S3 btwampfl;@oem4.inf,%btwampfl.ServiceName%;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2015-10-29 223040]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-11-22 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RTSUER;@oem5.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\Windows\system32\Drivers\RtsUer.sys [2015-08-05 412400]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-10-30 28512]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 BcmBtRSupport;@oem4.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\Windows\system32\BtwRSupportService.exe [2015-10-29 2286864]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-11-24 2802360]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DellDataVault;Dell Data Vault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2015-09-11 2574168]
R2 DellDataVaultWiz;Dell Data Vault Wizard; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [2015-09-11 201560]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2015-11-20 2522616]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-09 1156216]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-07-18 351120]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-09 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-09 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-12-16 1256240]
R2 OneSyncSvc_40143;Hostitel synchronizace_40143; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-08-04 312056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-12-16 417584]
R2 SupportAssistAgent;Dell SupportAssist Agent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [2015-09-30 21160]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-12-14 6889232]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-07-18 283024]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-09 8185464]
R3 PimIndexMaintenanceSvc_40143;Data kontaktů_40143; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 UnistoreSvc_40143;Úložiště uživatelských dat_40143; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-27 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38e36;Hostitel synchronizace_38e36; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-27 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_40143;Služba zasílání zpráv_40143; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-22 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-11-24 150600]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2015-10-30 290304]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o preventivku

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat

:services
Bonjour Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
gully
Návštěvník
Návštěvník
Příspěvky: 89
Registrován: 21 pro 2014 07:39

Re: Prosím o preventivku

#7 Příspěvek od gully »

Logfile of random's system information tool 1.10 (written by random/random)
Run by ppoli at 2015-12-28 22:00:56
Microsoft Windows 10 Pro
System drive C: has 914 GB (97%) free of 943 GB
Total RAM: 8103 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:00:59, on 28.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\ppoli.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [OneDrive] "C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @oem4.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe
O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9905 bytes

======Listing Processes======








C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
dashost.exe {2d45dedd-a846-4f18-bce4742232b9dfd1}
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\igfxCUIService.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
taskeng.exe {2A196184-1708-43C7-B2B6-3B43189411C7}
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\Windows\system32\BtwRSupportService.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\SysWow64\IntelCpHeciSvc.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
sihost.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\12282015_215308.log
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 628 632 640 8192 636
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
"C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://go.eset.eu/weblogin?lng=1029"
"C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe"

"C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Dell\DellDataVault\DellDataVault.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\ppoli\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\ppoli\AppData\Roaming\Mozilla\Firefox\Profiles\hufhwzyy.default

prefs.js - "browser.startup.homepage" - "https://google.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.80.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.80.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll


C:\Users\ppoli\AppData\Roaming\Mozilla\Firefox\Profiles\hufhwzyy.default\extensions\
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-27 219304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-12-27 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-27 2339032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-12-27 211880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-09 2771576]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-12-09 1846016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\ppoli\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-12-27 551112]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableLUA"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-28 21:53:08 ----D---- C:\_OTM
2015-12-28 20:19:39 ----D---- C:\AdwCleaner
2015-12-28 20:15:33 ----D---- C:\Program Files\CCleaner
2015-12-28 17:03:46 ----D---- C:\Windows\system32\SleepStudy
2015-12-28 11:09:42 ----HD---- C:\OneDriveTemp
2015-12-28 00:54:19 ----D---- C:\Program Files (x86)\GRETECH
2015-12-28 00:40:35 ----D---- C:\Users\ppoli\AppData\Roaming\WinLiveUpdate
2015-12-28 00:40:23 ----D---- C:\Users\ppoli\AppData\Roaming\MCommon1
2015-12-27 17:10:27 ----D---- C:\Program Files\trend micro
2015-12-27 17:10:26 ----D---- C:\rsit
2015-12-27 16:52:58 ----D---- C:\Program Files (x86)\Google
2015-12-27 15:43:42 ----D---- C:\Program Files\paint.net
2015-12-27 15:42:14 ----D---- C:\Users\ppoli\AppData\Roaming\WinRAR
2015-12-27 15:39:22 ----D---- C:\ProgramData\FastStone
2015-12-27 15:38:27 ----D---- C:\Program Files (x86)\FastStone Capture
2015-12-27 15:37:27 ----D---- C:\Users\ppoli\AppData\Roaming\FastStone
2015-12-27 15:37:17 ----D---- C:\Program Files (x86)\FastStone Image Viewer
2015-12-27 15:07:06 ----D---- C:\Users\ppoli\AppData\Roaming\FileZilla
2015-12-27 15:07:01 ----D---- C:\Program Files\FileZilla FTP Client
2015-12-27 14:38:39 ----D---- C:\Program Files (x86)\Western Digital
2015-12-27 14:35:38 ----D---- C:\Users\ppoli\AppData\Roaming\Macromedia
2015-12-27 14:35:13 ----D---- C:\Users\ppoli\AppData\Roaming\com.wd.WDMyCloud
2015-12-27 14:35:02 ----D---- C:\Program Files\Bonjour Print Services
2015-12-27 14:34:59 ----D---- C:\ProgramData\Apple
2015-12-27 14:34:59 ----D---- C:\Program Files\Bonjour
2015-12-27 14:34:59 ----D---- C:\Program Files (x86)\Bonjour
2015-12-27 14:34:46 ----D---- C:\ProgramData\Western Digital
2015-12-27 13:47:44 ----D---- C:\Program Files\glassfish-4.1.1
2015-12-27 13:45:15 ----D---- C:\Program Files\NetBeans 8.1
2015-12-27 13:39:47 ----D---- C:\Users\ppoli\AppData\Roaming\NetBeans
2015-12-27 13:35:12 ----A---- C:\Windows\system32\javaws.exe
2015-12-27 13:35:11 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-12-27 13:35:11 ----A---- C:\Windows\system32\javaw.exe
2015-12-27 13:35:11 ----A---- C:\Windows\system32\java.exe
2015-12-27 13:34:21 ----D---- C:\Program Files\Java
2015-12-27 13:23:33 ----D---- C:\Program Files\WinRAR
2015-12-27 13:16:40 ----D---- C:\Program Files (x86)\Microsoft Office
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\XPSViewer
2015-12-27 13:13:56 ----D---- C:\Program Files\Reference Assemblies
2015-12-27 13:13:56 ----D---- C:\Program Files\MSBuild
2015-12-27 13:13:56 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-12-27 13:13:56 ----D---- C:\Program Files (x86)\MSBuild
2015-12-27 13:12:31 ----D---- C:\Program Files\Microsoft Office 15
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2015-12-27 13:12:15 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-27 13:12:02 ----A---- C:\Windows\system32\TsWpfWrp.exe
2015-12-27 13:12:02 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2015-12-27 13:12:02 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-27 13:11:59 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-12-27 13:09:57 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-12-27 13:09:57 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvopencl.dll
2015-12-27 13:09:57 ----A---- C:\Windows\system32\nvoglv64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-12-27 13:09:56 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvinitx.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvIFR64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\NvFBC64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvdispgenco6436143.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvdispco6436143.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcuvid.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcuda.dll
2015-12-27 13:09:56 ----A---- C:\Windows\system32\nvcompiler.dll
2015-12-27 13:09:33 ----D---- C:\ProgramData\PlotSoft
2015-12-27 13:09:33 ----D---- C:\Program Files (x86)\PlotSoft
2015-12-27 13:02:42 ----D---- C:\Program Files (x86)\Adobe
2015-12-27 13:02:31 ----D---- C:\ProgramData\Adobe
2015-12-27 12:54:05 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-12-27 12:54:05 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-12-27 12:54:04 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-12-27 12:54:03 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-12-27 12:54:03 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\nvspcap64.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-12-27 12:54:03 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2015-12-27 12:53:49 ----D---- C:\ProgramData\Package Cache
2015-12-27 12:53:34 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-12-27 12:53:34 ----A---- C:\Windows\system32\nvaudcap64v.dll
2015-12-27 12:53:34 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-12-27 12:46:18 ----D---- C:\Program Files (x86)\TeamViewer
2015-12-27 12:07:29 ----HDC---- C:\ProgramData\{AA6BF06E-316C-487A-9BC2-5F06A43C56B1}
2015-12-27 12:05:27 ----D---- C:\ProgramData\SupportAssistAgent
2015-12-27 12:05:27 ----D---- C:\Program Files (x86)\Dell
2015-12-27 11:49:32 ----D---- C:\Users\ppoli\AppData\Roaming\Dell
2015-12-27 11:49:19 ----D---- C:\ProgramData\PC-Doctor for Windows
2015-12-27 11:49:17 ----D---- C:\ProgramData\PCDr
2015-12-27 11:49:17 ----D---- C:\Program Files\Dell Support Center
2015-12-27 11:48:46 ----D---- C:\Program Files\Dell
2015-12-27 11:47:17 ----D---- C:\Users\ppoli\AppData\Roaming\PCDr
2015-12-27 11:47:15 ----D---- C:\temp
2015-12-27 11:44:06 ----D---- C:\Windows\system32\MRT
2015-12-27 11:44:03 ----A---- C:\Windows\system32\MRT.exe
2015-12-27 11:43:59 ----D---- C:\Users\ppoli\AppData\Roaming\GHISLER
2015-12-27 11:43:59 ----D---- C:\Program Files\Totalcmd
2015-12-27 11:43:40 ----A---- C:\Windows\system32\mshtml.dll
2015-12-27 11:43:39 ----A---- C:\Windows\system32\edgehtml.dll
2015-12-27 11:43:37 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2015-12-27 11:43:35 ----A---- C:\Windows\system32\ieframe.dll
2015-12-27 11:43:34 ----A---- C:\Windows\SYSWOW64\twinui.dll
2015-12-27 11:43:34 ----A---- C:\Windows\system32\twinui.dll
2015-12-27 11:43:33 ----A---- C:\Windows\system32\shell32.dll
2015-12-27 11:43:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-12-27 11:43:30 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-12-27 11:43:29 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-12-27 11:43:29 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2015-12-27 11:43:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-12-27 11:43:27 ----A---- C:\Windows\system32\twinui.appcore.dll
2015-12-27 11:43:27 ----A---- C:\Windows\system32\cdp.dll
2015-12-27 11:43:26 ----A---- C:\Windows\SYSWOW64\ETWCoreUIComponentsResources.dll
2015-12-27 11:43:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-12-27 11:43:26 ----A---- C:\Windows\system32\ETWCoreUIComponentsResources.dll
2015-12-27 11:43:26 ----A---- C:\Windows\system32\CoreUIComponents.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2015-12-27 11:43:25 ----A---- C:\Windows\SYSWOW64\cdp.dll
2015-12-27 11:43:25 ----A---- C:\Windows\system32\msftedit.dll
2015-12-27 11:43:25 ----A---- C:\Windows\system32\InputService.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\InputService.dll
2015-12-27 11:43:24 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2015-12-27 11:43:24 ----A---- C:\Windows\system32\drivers\ntfs.sys
2015-12-27 11:43:24 ----A---- C:\Windows\system32\d3d11.dll
2015-12-27 11:43:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\modernexecserver.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\mfnetsrc.dll
2015-12-27 11:43:23 ----A---- C:\Windows\system32\mfcore.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\XblAuthManager.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\wuaueng.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\wininet.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\NetworkMobileSettings.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\mf.dll
2015-12-27 11:43:22 ----A---- C:\Windows\system32\comsvcs.dll
2015-12-27 11:43:21 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-12-27 11:43:21 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\wwansvc.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\Unistore.dll
2015-12-27 11:43:21 ----A---- C:\Windows\system32\authui.dll
2015-12-27 11:43:20 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2015-12-27 11:43:20 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\usermgr.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-12-27 11:43:20 ----A---- C:\Windows\system32\LicenseManager.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2015-12-27 11:43:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\win32kfull.sys
2015-12-27 11:43:19 ----A---- C:\Windows\system32\PlayToManager.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2015-12-27 11:43:19 ----A---- C:\Windows\system32\GdiPlus.dll
2015-12-27 11:43:18 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2015-12-27 11:43:18 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\vbscript.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\UIAutomationCore.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\iertutil.dll
2015-12-27 11:43:18 ----A---- C:\Windows\system32\dcomp.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-12-27 11:43:17 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2015-12-27 11:43:17 ----A---- C:\Windows\system32\wpncore.dll
2015-12-27 11:43:17 ----A---- C:\Windows\system32\win32kbase.sys
2015-12-27 11:43:17 ----A---- C:\Windows\system32\services.exe
2015-12-27 11:43:17 ----A---- C:\Windows\system32\BingOnlineServices.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-12-27 11:43:16 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\WpcWebFilter.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\kerberos.dll
2015-12-27 11:43:16 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\UIAutomationCore.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2015-12-27 11:43:15 ----A---- C:\Windows\SYSWOW64\BingOnlineServices.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\Windows.Media.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\PhoneProviders.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\ntdll.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\msfeeds.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\MbaeApi.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\MapControlCore.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\jscript.dll
2015-12-27 11:43:15 ----A---- C:\Windows\system32\enterprisecsps.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\MbaeApi.dll
2015-12-27 11:43:14 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\NetSetupEngine.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\generaltel.dll
2015-12-27 11:43:14 ----A---- C:\Windows\system32\AudioEng.dll
2015-12-27 11:43:13 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2015-12-27 11:43:13 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2015-12-27 11:43:13 ----A---- C:\Windows\system32\lsasrv.dll
2015-12-27 11:43:12 ----A---- C:\Windows\SYSWOW64\user32.dll
2015-12-27 11:43:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-12-27 11:43:12 ----A---- C:\Windows\system32\user32.dll
2015-12-27 11:43:12 ----A---- C:\Windows\system32\PlayToDevice.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-12-27 11:43:11 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-12-27 11:43:11 ----A---- C:\Windows\system32\TextInputFramework.dll
2015-12-27 11:43:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2015-12-27 11:43:10 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\urlmon.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\mfplat.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\LogonController.dll
2015-12-27 11:43:10 ----A---- C:\Windows\system32\deviceaccess.dll
2015-12-27 11:43:09 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2015-12-27 11:43:09 ----A---- C:\Windows\SYSWOW64\dcomp.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\SensorService.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfsrcsnk.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\mfds.dll
2015-12-27 11:43:09 ----A---- C:\Windows\system32\drivers\afd.sys
2015-12-27 11:43:09 ----A---- C:\Windows\system32\DeviceCensus.exe
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\WpcWebFilter.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\mfds.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\LogonController.dll
2015-12-27 11:43:08 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2015-12-27 11:43:08 ----A---- C:\Windows\system32\wcmsvc.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2015-12-27 11:43:08 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-12-27 11:43:08 ----A---- C:\Windows\system32\cryptngc.dll
2015-12-27 11:43:08 ----A---- C:\Windows\system32\audiosrv.dll
2015-12-27 11:43:07 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\XboxNetApiSvc.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\Windows.UI.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\tetheringservice.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\provengine.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\mfreadwrite.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\MFPlay.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2015-12-27 11:43:07 ----A---- C:\Windows\system32\fontdrvhost.exe
2015-12-27 11:43:07 ----A---- C:\Windows\system32\drivers\rmcast.sys
2015-12-27 11:43:07 ----A---- C:\Windows\system32\dmenrollengine.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\policymanager.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\MFCaptureEngine.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-12-27 11:43:06 ----A---- C:\Windows\SYSWOW64\cryptngc.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\provhandlers.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\mfps.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\MBMediaManager.dll
2015-12-27 11:43:06 ----A---- C:\Windows\system32\ie4uinit.exe
2015-12-27 11:43:06 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\SRH.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-12-27 11:43:05 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\XblAuthManagerProxy.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\wcmcsp.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\StoreAgent.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\policymanager.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\MSFlacDecoder.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\MapConfiguration.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\InstallAgent.exe
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\sdstor.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\cng.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\drivers\capimg.sys
2015-12-27 11:43:05 ----A---- C:\Windows\system32\dialserver.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\catsrvut.dll
2015-12-27 11:43:05 ----A---- C:\Windows\system32\acmigration.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\WWanAPI.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\NetSetupApi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\mssign32.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\catsrvut.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-12-27 11:43:04 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\WWanAPI.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\wimgapi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\SRH.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\qdvd.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\NetSetupApi.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\mssign32.dll
2015-12-27 11:43:04 ----A---- C:\Windows\system32\MDEServer.exe
2015-12-27 11:43:04 ----A---- C:\Windows\system32\iedkcs32.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\wwapi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2015-12-27 11:43:03 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\wwapi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\WWAHost.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\wuauclt.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\SensorsUtilsV2.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\SensorsNativeApi.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\mfpmp.exe
2015-12-27 11:43:03 ----A---- C:\Windows\system32\EncDump.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\AudioSes.dll
2015-12-27 11:43:03 ----A---- C:\Windows\system32\audiodg.exe
2015-12-27 11:43:02 ----A---- C:\Windows\SYSWOW64\XblAuthManagerProxy.dll
2015-12-27 11:43:02 ----A---- C:\Windows\SYSWOW64\MSFlacDecoder.dll
2015-12-27 11:43:02 ----A---- C:\Windows\system32\wimserv.exe
2015-12-27 11:43:02 ----A---- C:\Windows\system32\wifitask.exe
2015-12-27 11:43:02 ----A---- C:\Windows\system32\drivers\wimmount.sys
2015-12-27 11:43:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-12-27 11:43:01 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\provtool.exe
2015-12-27 11:43:01 ----A---- C:\Windows\system32\provdatastore.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\NetSetupSvc.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\KnobsCore.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\flvprophandler.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\CellularAPI.dll
2015-12-27 11:43:01 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\StorSvc.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\shutdownux.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\ProvPluginEng.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\provisioningcsp.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\policymanagerprecheck.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\moshostcore.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\moshost.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\MapsStore.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\fveapibase.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\fveapi.dll
2015-12-27 11:42:59 ----A---- C:\Windows\system32\bcastdvr.exe
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2015-12-27 11:42:58 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2015-12-27 11:42:58 ----A---- C:\Windows\system32\wwanmm.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\mos.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\iesetup.dll
2015-12-27 11:42:58 ----A---- C:\Windows\system32\iernonce.dll
2015-12-27 11:42:57 ----A---- C:\Windows\SYSWOW64\mos.dll
2015-12-27 11:42:57 ----A---- C:\Windows\system32\wshrm.dll
2015-12-27 11:42:57 ----A---- C:\Windows\system32\win32k.sys
2015-12-27 11:42:56 ----D---- C:\Users\ppoli\AppData\Roaming\Winamp
2015-12-27 11:42:56 ----D---- C:\Program Files (x86)\Winamp
2015-12-27 11:42:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-12-27 11:42:56 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\wwanconn.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\pnidui.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\mdmmigrator.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\jsproxy.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\dmcertinst.exe
2015-12-27 11:42:56 ----A---- C:\Windows\system32\BingMaps.dll
2015-12-27 11:42:56 ----A---- C:\Windows\system32\AppCapture.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\SRHInproc.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\NMAA.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\MapControlCore.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\JpMapControl.dll
2015-12-27 11:42:55 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\wwanprotdim.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\Wwanpref.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\wwancfg.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\UserMgrProxy.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\SRHInproc.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\offlinelsa.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\NMAA.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\JpMapControl.dll
2015-12-27 11:42:55 ----A---- C:\Windows\system32\fontsub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\XblAuthTokenBrokerExt.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\WordBreakers.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\wininetlui.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\offlinelsa.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MosStorage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MosHostClient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\MapsBtSvc.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\InputLocaleManager.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\EditBufferTestHook.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\bcastdvr.proxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\SYSWOW64\AppCapture.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\XblAuthTokenBrokerExt.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wups2.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wsplib.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\WordBreakers.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wininetlui.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\wificonnapi.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tzautoupdate.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tetheringconfigsp.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\tetheringclient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\StorageUsage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\SensorsNativeApi.V2.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\rilproxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\readingviewresources.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\provops.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\NFCProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\nativemap.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MosStorage.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MosHostClient.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\mapsupdatetask.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\mapstoasttask.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsCSP.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsBtSvcProxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\MapsBtSvc.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\KnobsCsp.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\InputLocaleManager.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\ihvrilproxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\enrollmentapi.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\EditBufferTestHook.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\dciman32.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\bcastdvr.proxy.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\BarcodeProvisioningPlugin.dll
2015-12-27 11:42:54 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2015-12-27 11:42:53 ----A---- C:\Windows\SYSWOW64\BackgroundTransferHost.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\lpk.dll
2015-12-27 11:42:53 ----A---- C:\Windows\system32\LaunchWinApp.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\IcsEntitlementHost.exe
2015-12-27 11:42:53 ----A---- C:\Windows\system32\BackgroundTransferHost.exe
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Resources.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\UIAutomationCoreRes.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\NmaDirect.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\MosResource.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MosTrace.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MosHost.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\Microsoft-Windows-MapControls.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-12-27 11:42:52 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\UIAutomationCoreRes.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\NmaDirect.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\MosResource.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MosTrace.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MosHost.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\Microsoft-Windows-MapControls.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\atmlib.dll
2015-12-27 11:42:52 ----A---- C:\Windows\system32\atmfd.dll
2015-12-27 11:42:51 ----A---- C:\Windows\SYSWOW64\MapControlStringsRes.dll
2015-12-27 11:42:51 ----A---- C:\Windows\system32\MapControlStringsRes.dll
2015-12-27 10:50:13 ----D---- C:\Users\ppoli\AppData\Roaming\ESET
2015-12-27 10:30:05 ----D---- C:\Users\ppoli\AppData\Roaming\Mozilla
2015-12-27 10:30:00 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-27 10:29:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-27 10:20:50 ----D---- C:\ProgramData\NVIDIA
2015-12-27 10:20:44 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvvsvc.exe
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvsvcr.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvsvc64.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvshext.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvmctray.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nvcpl.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nv3dappshextr.dll
2015-12-27 10:20:32 ----A---- C:\Windows\system32\nv3dappshext.dll
2015-12-27 10:20:06 ----D---- C:\ProgramData\NVIDIA Corporation
2015-12-27 10:20:00 ----D---- C:\Program Files\NVIDIA Corporation
2015-12-27 10:14:18 ----D---- C:\ProgramData\ESET
2015-12-27 10:14:13 ----D---- C:\Program Files\ESET
2015-12-27 10:07:31 ----D---- C:\Program Files (x86)\Intel
2015-12-27 10:07:27 ----A---- C:\Windows\system32\OpenCL.DLL
2015-12-27 10:07:14 ----D---- C:\Intel
2015-12-27 10:07:14 ----A---- C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-27 10:06:27 ----D---- C:\Program Files\Intel
2015-12-27 10:01:13 ----D---- C:\ProgramData\Microsoft OneDrive
2015-12-27 10:00:56 ----D---- C:\Windows\system32\SRSLabs
2015-12-27 10:00:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-12-27 10:00:52 ----D---- C:\Program Files\Realtek
2015-12-27 09:59:52 ----A---- C:\Windows\SYSWOW64\NlsLexicons0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\SYSWOW64\NlsData0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\prm0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2015-12-27 09:59:52 ----A---- C:\Windows\system32\NlsData0009.dll
2015-12-27 09:57:59 ----D---- C:\Users\ppoli\AppData\Roaming\Adobe
2015-12-27 09:57:06 ----SD---- C:\Users\ppoli\AppData\Roaming\Microsoft
2015-12-27 09:52:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-12-27 09:50:31 ----D---- C:\Windows\CSC
2015-12-27 09:50:25 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2015-12-27 09:50:01 ----HD---- C:\Program Files\Uninstall Information
2015-12-27 09:50:00 ----D---- C:\Windows\SoftwareDistribution
2015-12-27 09:50:00 ----D---- C:\ProgramData\USOShared
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Šablony
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Plocha
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Nabídka Start
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Dokumenty
2015-12-27 09:47:51 ----SHD---- C:\ProgramData\Data aplikací
2015-12-27 09:47:51 ----SHD---- C:\Documents and Settings
2015-12-27 09:47:26 ----ASH---- C:\hiberfil.sys
2015-12-27 09:46:44 ----SHD---- C:\Recovery
2015-12-27 09:45:12 ----D---- C:\Windows\Prefetch
2015-12-27 09:45:12 ----AS---- C:\Windows\bootstat.dat
2015-12-27 09:44:34 ----SD---- C:\Windows\system32\Microsoft
2015-12-27 09:44:26 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-12-27 09:44:24 ----ASH---- C:\swapfile.sys
2015-12-27 09:44:24 ----ASH---- C:\pagefile.sys
2015-12-27 09:44:20 ----SHD---- C:\System Volume Information
2015-12-27 09:43:57 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 1 month======

2015-12-28 21:59:12 ----D---- C:\Windows\System32
2015-12-28 21:58:58 ----D---- C:\Windows\Temp
2015-12-28 21:57:18 ----D---- C:\Windows\system32\sru
2015-12-28 21:53:08 ----D---- C:\Windows\Tasks
2015-12-28 20:53:53 ----D---- C:\Windows\system32\Tasks
2015-12-28 20:27:50 ----D---- C:\Windows\AppReadiness
2015-12-28 20:24:29 ----D---- C:\Windows
2015-12-28 20:23:42 ----HD---- C:\Program Files\WindowsApps
2015-12-28 20:17:02 ----HD---- C:\ProgramData
2015-12-28 20:15:33 ----RD---- C:\Program Files
2015-12-28 17:00:41 ----D---- C:\Windows\system32\config
2015-12-28 17:00:21 ----D---- C:\Windows\Microsoft.NET
2015-12-28 16:42:16 ----D---- C:\Windows\INF
2015-12-28 11:13:45 ----D---- C:\Windows\Logs
2015-12-28 11:11:39 ----D---- C:\Windows\appcompat
2015-12-28 00:54:19 ----RD---- C:\Program Files (x86)
2015-12-27 16:58:18 ----SHD---- C:\Windows\Installer
2015-12-27 15:44:20 ----RD---- C:\Windows\assembly
2015-12-27 15:43:43 ----D---- C:\Windows\SysWOW64
2015-12-27 14:19:59 ----D---- C:\Windows\system32\WDI
2015-12-27 14:18:14 ----D---- C:\Windows\system32\drivers
2015-12-27 13:23:23 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-12-27 13:23:10 ----D---- C:\Program Files (x86)\Common Files
2015-12-27 13:23:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-12-27 13:22:54 ----D---- C:\Windows\system32\DriverStore
2015-12-27 13:16:29 ----SD---- C:\ProgramData\Microsoft
2015-12-27 13:14:44 ----D---- C:\Windows\CbsTemp
2015-12-27 13:14:42 ----D---- C:\Windows\WinSxS
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\MUI
2015-12-27 13:14:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-12-27 13:14:05 ----D---- C:\Windows\system32\MUI
2015-12-27 13:14:05 ----D---- C:\Windows\system32\cs-CZ
2015-12-27 13:13:57 ----RSD---- C:\Windows\Fonts
2015-12-27 12:22:09 ----D---- C:\Windows\SYSWOW64\migration
2015-12-27 12:22:09 ----D---- C:\Windows\SYSWOW64\Dism
2015-12-27 12:22:07 ----D---- C:\Windows\system32\SystemResetPlatform
2015-12-27 12:22:03 ----D---- C:\Windows\system32\oobe
2015-12-27 12:22:03 ----D---- C:\Windows\system32\migration
2015-12-27 12:22:03 ----D---- C:\Windows\system32\drivers\UMDF
2015-12-27 12:22:03 ----D---- C:\Windows\system32\Dism
2015-12-27 12:22:03 ----D---- C:\Windows\system32\appraiser
2015-12-27 12:22:01 ----RD---- C:\Windows\PurchaseDialog
2015-12-27 12:22:01 ----D---- C:\Windows\Provisioning
2015-12-27 12:21:59 ----RD---- C:\Windows\ImmersiveControlPanel
2015-12-27 12:21:59 ----D---- C:\Windows\bcastdvr
2015-12-27 12:21:59 ----D---- C:\Windows\AppPatch
2015-12-27 12:21:59 ----D---- C:\Program Files\Internet Explorer
2015-12-27 12:21:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-27 11:44:06 ----D---- C:\Windows\debug
2015-12-27 11:41:32 ----D---- C:\Windows\system32\catroot2
2015-12-27 10:41:59 ----D---- C:\Windows\system32\LogFiles
2015-12-27 10:20:31 ----D---- C:\Windows\Help
2015-12-27 10:16:15 ----RD---- C:\Users
2015-12-27 10:15:54 ----RD---- C:\Windows\DevicesFlow
2015-12-27 10:14:51 ----HD---- C:\Windows\ELAMBKUP
2015-12-27 10:07:27 ----D---- C:\Windows\system32\CatRoot
2015-12-27 10:05:38 ----D---- C:\Windows\system32\CodeIntegrity
2015-12-27 10:00:02 ----D---- C:\Windows\OCR
2015-12-27 09:59:30 ----SHD---- C:\$Recycle.Bin
2015-12-27 09:58:49 ----RD---- C:\Windows\PrintDialog
2015-12-27 09:58:48 ----RD---- C:\Windows\MiracastView
2015-12-27 09:57:13 ----D---- C:\Windows\system32\WinBioDatabase
2015-12-27 09:53:43 ----D---- C:\Windows\system32\restore
2015-12-27 09:52:16 ----D---- C:\Windows\system32\wbem
2015-12-27 09:51:06 ----D---- C:\Windows\rescache
2015-12-27 09:50:35 ----D---- C:\Windows\system32\spool
2015-12-27 09:50:34 ----D---- C:\Windows\system32\FxsTmp
2015-12-27 09:50:00 ----D---- C:\ProgramData\USOPrivate
2015-12-27 09:47:51 ----D---- C:\Program Files\Windows NT
2015-12-27 09:46:44 ----D---- C:\Windows\system32\Recovery
2015-12-27 09:46:41 ----D---- C:\Windows\system32\Sysprep
2015-12-27 09:44:36 ----D---- C:\Windows\ServiceProfiles
2015-12-16 17:59:13 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-12-16 17:59:13 ----A---- C:\Windows\system32\nvapi64.dll
2015-12-01 01:33:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2015-11-20 199680]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2015-11-20 69840]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-11-20 263528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2015-11-20 206312]
R1 EpfwLWF;@oem18.inf,%EpfwLWF_Desc%;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2015-11-20 52872]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 bcbtums;@oem4.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2015-10-29 208184]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2015-10-30 7585280]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2015-10-30 112640]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2015-10-30 245248]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2015-10-30 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\system32\DRIVERS\BTHUSB.sys [2015-10-30 84992]
R3 DDDriver;DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [2015-09-11 32464]
R3 DellProf;DellProf; C:\Windows\system32\drivers\DellProf.sys [2015-09-11 24240]
R3 DellRbtn;@oem2.inf,%DellRbtn%;Airplane Mode Switch; C:\Windows\System32\drivers\DellRbtn.sys [2015-05-08 19440]
R3 iaLPSS_UART2;@oem3.inf,%iaLPSS_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\Windows\System32\drivers\iaLPSS_UART2.sys [2015-06-15 155400]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-07-18 6389688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-08-04 4518136]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-07-16 472872]
R3 MEIx64;@oem7.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2015-07-10 193336]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-12-18 12426896]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-09 19576]
R3 nvvad_WaveExtensible;@oem28.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-08-11 50472]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-10-30 175104]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2015-10-30 589824]
S0 eelam;eelam; C:\Windows\system32\DRIVERS\eelam.sys [2015-11-20 14976]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2015-10-30 34144]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\system32\DRIVERS\BTHport.sys [2015-10-30 953344]
S3 btwampfl;@oem4.inf,%btwampfl.ServiceName%;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2015-10-29 223040]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2015-11-22 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 RTSUER;@oem5.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\Windows\system32\Drivers\RtsUer.sys [2015-08-05 412400]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\Windows\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\Windows\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\Windows\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\Windows\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\Windows\System32\drivers\urschipidea.sys [2015-10-30 28512]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 BcmBtRSupport;@oem4.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\Windows\system32\BtwRSupportService.exe [2015-10-29 2286864]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-11-24 2802360]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DellDataVault;Dell Data Vault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2015-09-11 2574168]
R2 DellDataVaultWiz;Dell Data Vault Wizard; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [2015-09-11 201560]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2015-11-20 2522616]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-09 1156216]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-07-18 351120]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-09 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-09 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-12-16 1256240]
R2 OneSyncSvc_3f8d0;Hostitel synchronizace_3f8d0; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-08-04 312056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-12-16 417584]
R2 SupportAssistAgent;Dell SupportAssist Agent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [2015-09-30 21160]
R2 TeamViewer;TeamViewer 11; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-12-14 6889232]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-07-18 283024]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-09 8185464]
R3 PimIndexMaintenanceSvc_3f8d0;Data kontaktů_3f8d0; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 UnistoreSvc_3f8d0;Úložiště uživatelských dat_3f8d0; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-27 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38e36;Hostitel synchronizace_38e36; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-28 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-27 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3f8d0;Služba zasílání zpráv_3f8d0; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-22 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-11-24 150600]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2015-10-30 290304]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o preventivku

#8 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\ppoli.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
gully
Návštěvník
Návštěvník
Příspěvky: 89
Registrován: 21 pro 2014 07:39

Re: Prosím o preventivku

#9 Příspěvek od gully »

Vše provedeno.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o preventivku

#10 Příspěvek od Rudy »

Tím by měl být log OK, pokud nemáte jiný problém.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
gully
Návštěvník
Návštěvník
Příspěvky: 89
Registrován: 21 pro 2014 07:39

Re: Prosím o preventivku

#11 Příspěvek od gully »

Jiný problém nemám. Takže moc děkuji, přeji hezký zbytek svátků a do nového roku hlavně zdraví.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o preventivku

#12 Příspěvek od Rudy »

Také tak a šťastný a veselý! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Preventivní kontroly logů“