Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Co minutu se vše zruší jakoby šlo o refresh PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Honzua
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 17 dub 2008 18:48

Co minutu se vše zruší jakoby šlo o refresh PC

#1 Příspěvek od Honzua »

Zdravím,

co minutu se vše, co mám rozděláno na PC zruší a pozadí se refreshne, ikony se defaultně zobrazí. Obávám se, že jde o vir.

Děkuji moc za pomoc!

Logfile of random's system information tool 1.10 (written by random/random)
Run by LENKA.PETRAKOVA at 2016-03-01 12:20:32
Microsoft Windows 10 Pro
System drive C: has 198 GB (70%) free of 284 GB
Total RAM: 4030 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:20:41, on 1.3.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\STAZISTA\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\STAZISTA\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Program Files\trend micro\LENKA.PETRAKOVA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\LENKA.PETRAKOVA\AppData\LocalLow\BS_Player\prxtbBS_2.dll
F2 - REG:system.ini: UserInit=
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2841269831-3108561547-213907800-1006\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User 'STAZISTA')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = oziveni.cz
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = oziveni.cz
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @oem19.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Identity Protection Technology Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Broadcom Corporation - C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9877 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\Hpservice.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"

C:\WINDOWS\system32\WLANExt.exe 2442451110320
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files\LSI SoftModem\agr64svc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\windows\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe"
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
C:\WINDOWS\system32\svchost.exe -k apphost
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe"
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
sihost.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe" /TUStart /pid:2328
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\STAZISTA\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Users\STAZISTA\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" /tu
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe" /backgroundscan
"C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" --type=renderer --disable-gpu-compositing --disable-pinch --force-device-scale-factor=1.000000 --no-sandbox --disable-direct-write --enable-deferred-image-decoding --lang=en-US --lang=en-US --log-file="C:\Users\STAZISTA\AppData\Local\Avg\log\fmw1\chromium_dbg.log" --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="6040.0.1172627083\2109853649" /prefetch:673131151
taskeng.exe {99E62810-C9A1-4A55-882D-60D25FE9BE6D}
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 600 604 612 8192 608

"C:\Program Files (x86)\AVG\AVG PC TuneUp\TUDefragBackend64.exe" \\.\pipe\TuneUpDefrag5804
"C:\Users\STAZISTA\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\LENKA.PETRAKOVA\AppData\Roaming\Mozilla\Firefox\Profiles\profil.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://search.conduit.com/?CUI=UN694730 ... hSource=13"
prefs.js - "keyword.URL" - "http://trovi.com/ResultsExt.aspx?ctid=C ... 553&UM=&q="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=602XML Filler Plugin
"Path"=C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.80.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.80.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
cs@dictionaries.addons.mozilla.org

C:\Users\LENKA.PETRAKOVA\AppData\Roaming\Mozilla\Firefox\Profiles\profil.default\extensions\
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}

C:\Users\LENKA.PETRAKOVA\AppData\Roaming\Mozilla\Firefox\Profiles\profil.default\searchplugins\
bs-player-customized-web-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2016-03-01 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-24 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2016-03-01 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-24 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2011-01-27 13880]
"Broadcom Wireless Manager UI"=C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [2011-12-12 5398528]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-01-27 835072]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-07-03 3944136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"=C:\Windows\SysWOW64\OneDriveSetup.exe [2015-10-30 7805120]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-05-19 2736128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WAB Migrate"=C:\Program Files\Windows Mail\wab.exe [2015-10-30 517632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACSW14EN]
C:\Program Files (x86)\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe /pid ACSW14EN []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [2011-01-12 514544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-05-19 2736128]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2011-01-29 299576]
""= []
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13 1085656]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-02-24 7139768]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-02-18 179624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.inf - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.ini - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.txt - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1

======List of files/folders created in the last 1 month======

2016-03-01 12:20:33 ----D---- C:\Program Files\trend micro
2016-03-01 12:20:32 ----D---- C:\rsit
2016-03-01 11:44:09 ----D---- C:\WINDOWS\LastGood.Tmp
2016-03-01 11:42:21 ----SHD---- C:\Config.Msi
2016-03-01 11:01:52 ----A---- C:\WINDOWS\system32\javaws.exe
2016-03-01 11:01:49 ----A---- C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-03-01 11:01:49 ----A---- C:\WINDOWS\system32\javaw.exe
2016-03-01 11:01:48 ----A---- C:\WINDOWS\system32\java.exe
2016-03-01 11:01:44 ----D---- C:\Program Files\Java
2016-02-24 13:58:34 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2016-02-24 13:58:32 ----A---- C:\WINDOWS\SYSWOW64\authuitu.dll
2016-02-24 13:58:32 ----A---- C:\WINDOWS\system32\authuitu.dll
2016-02-24 13:56:43 ----HD---- C:\ProgramData\Common Files
2016-02-24 13:56:43 ----D---- C:\Program Files (x86)\AVG
2016-02-24 13:56:42 ----D---- C:\ProgramData\Avg
2016-02-24 13:50:32 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2016-02-24 13:48:58 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2016-02-24 13:48:32 ----A---- C:\WINDOWS\avastSS.scr
2016-02-24 13:47:27 ----D---- C:\Program Files\AVAST Software
2016-02-24 13:47:01 ----D---- C:\ProgramData\AVAST Software
2016-02-24 13:46:43 ----D---- C:\Program Files\WinRAR
2016-02-22 13:47:36 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2016-02-22 13:21:00 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-02-22 13:20:58 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-02-22 13:20:57 ----A---- C:\WINDOWS\system32\shell32.dll
2016-02-22 13:20:55 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-02-22 13:20:54 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-02-22 13:20:53 ----A---- C:\WINDOWS\system32\twinui.dll
2016-02-22 13:20:52 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-02-22 13:20:51 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-02-22 13:20:51 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-02-22 13:20:49 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-02-22 13:20:49 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-02-22 13:20:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-02-22 13:20:47 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-02-22 13:20:46 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-02-22 13:20:45 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-02-22 13:20:45 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-22 13:20:44 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-02-22 13:20:44 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-02-22 13:20:44 ----A---- C:\WINDOWS\explorer.exe
2016-02-22 13:20:43 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-22 13:20:43 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-22 13:20:42 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-22 13:20:42 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-02-22 13:20:41 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-22 13:20:41 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-02-22 13:20:41 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-22 13:20:41 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-22 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-02-22 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-22 13:20:40 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-02-22 13:20:39 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-02-22 13:20:38 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-02-22 13:20:38 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-22 13:20:38 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-02-22 13:20:38 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-02-22 13:20:37 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-02-22 13:20:37 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-02-22 13:20:36 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-22 13:20:36 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-22 13:20:36 ----A---- C:\WINDOWS\system32\systemreset.exe
2016-02-22 13:20:36 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-22 13:20:35 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-22 13:20:35 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-02-22 13:20:34 ----A---- C:\WINDOWS\SYSWOW64\OpenWith.exe
2016-02-22 13:20:34 ----A---- C:\WINDOWS\system32\OpenWith.exe
2016-02-22 13:20:34 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-02-22 13:20:34 ----A---- C:\WINDOWS\system32\iassam.dll
2016-02-22 13:20:34 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-02-22 13:20:33 ----A---- C:\WINDOWS\SYSWOW64\ztrace_maps.dll
2016-02-22 13:20:33 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-02-22 13:20:33 ----A---- C:\WINDOWS\system32\ztrace_maps.dll
2016-02-22 13:20:33 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-22 13:20:32 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-02-22 13:20:32 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-02-22 13:20:32 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-22 13:20:32 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-02-22 13:20:31 ----A---- C:\WINDOWS\SYSWOW64\iassam.dll
2016-02-22 13:20:31 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-02-22 13:20:30 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-02-22 13:20:29 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-22 13:20:29 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-02-22 13:20:29 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-02-22 13:20:28 ----A---- C:\WINDOWS\system32\reseteng.dll
2016-02-22 13:20:28 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-02-22 13:20:27 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-02-09 14:47:49 ----D---- C:\WINDOWS\system32\SleepStudy
2016-02-05 12:56:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-02-05 12:56:15 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-02-05 12:56:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-05 12:56:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-02-05 12:55:48 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-02-05 12:55:48 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-02-05 12:55:48 ----A---- C:\WINDOWS\system32\d2d1.dll
2016-02-05 12:55:47 ----A---- C:\WINDOWS\system32\mos.dll
2016-02-05 12:55:47 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-02-05 12:55:44 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-02-05 12:55:44 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-05 12:55:42 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-02-05 12:55:42 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-02-05 12:55:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-02-05 12:55:41 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-02-05 12:55:41 ----A---- C:\WINDOWS\system32\cdp.dll
2016-02-05 12:55:40 ----A---- C:\WINDOWS\SYSWOW64\ETWCoreUIComponentsResources.dll
2016-02-05 12:55:40 ----A---- C:\WINDOWS\system32\msxml6.dll
2016-02-05 12:55:40 ----A---- C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-02-05 12:55:40 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-05 12:55:39 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2016-02-05 12:55:36 ----A---- C:\WINDOWS\system32\InputService.dll
2016-02-05 12:55:36 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-02-05 12:55:35 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-02-05 12:55:35 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-02-05 12:55:34 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2016-02-05 12:55:34 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-02-05 12:55:33 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-02-05 12:55:33 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-02-05 12:55:33 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-02-05 12:55:32 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-02-05 12:55:32 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-02-05 12:55:32 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-02-05 12:55:31 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-02-05 12:55:31 ----A---- C:\WINDOWS\system32\msftedit.dll
2016-02-05 12:55:29 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-02-05 12:55:29 ----A---- C:\WINDOWS\system32\WpcMon.exe
2016-02-05 12:55:29 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-02-05 12:55:28 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-02-05 12:55:28 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-02-05 12:55:27 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2016-02-05 12:55:27 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-02-05 12:55:26 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-02-05 12:55:26 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-02-05 12:55:25 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-02-05 12:55:24 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-02-05 12:55:24 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-02-05 12:55:23 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-02-05 12:55:23 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-02-05 12:55:23 ----A---- C:\WINDOWS\system32\quartz.dll
2016-02-05 12:55:23 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-02-05 12:55:23 ----A---- C:\WINDOWS\system32\mf.dll
2016-02-05 12:55:22 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-02-05 12:55:22 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-02-05 12:55:22 ----A---- C:\WINDOWS\system32\usermgr.dll
2016-02-05 12:55:22 ----A---- C:\WINDOWS\system32\authui.dll
2016-02-05 12:55:21 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-02-05 12:55:20 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-02-05 12:55:20 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-02-05 12:55:20 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2016-02-05 12:55:20 ----A---- C:\WINDOWS\system32\winhttp.dll
2016-02-05 12:55:19 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-02-05 12:55:18 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-02-05 12:55:18 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2016-02-05 12:55:18 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-02-05 12:55:17 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-02-05 12:55:17 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-02-05 12:55:17 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2016-02-05 12:55:16 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-02-05 12:55:16 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2016-02-05 12:55:16 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-02-05 12:55:16 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-02-05 12:55:15 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2016-02-05 12:55:15 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-02-05 12:55:15 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-02-05 12:55:15 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-02-05 12:55:14 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-02-05 12:55:14 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2016-02-05 12:55:14 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-02-05 12:55:14 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-02-05 12:55:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2016-02-05 12:55:13 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-02-05 12:55:13 ----A---- C:\WINDOWS\system32\invagent.dll
2016-02-05 12:55:13 ----A---- C:\WINDOWS\system32\dcomp.dll
2016-02-05 12:55:13 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-02-05 12:55:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-02-05 12:55:12 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-02-05 12:55:12 ----A---- C:\WINDOWS\system32\msctf.dll
2016-02-05 12:55:12 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-05 12:55:11 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-02-05 12:55:11 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-02-05 12:55:11 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-02-05 12:55:11 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-02-05 12:55:11 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-05 12:55:11 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\system32\mfds.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\system32\BingOnlineServices.dll
2016-02-05 12:55:10 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-02-05 12:55:09 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-02-05 12:55:09 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2016-02-05 12:55:09 ----A---- C:\WINDOWS\system32\evr.dll
2016-02-05 12:55:08 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-02-05 12:55:08 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-02-05 12:55:08 ----A---- C:\WINDOWS\system32\devinv.dll
2016-02-05 12:55:07 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-02-05 12:55:07 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-02-05 12:55:07 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-02-05 12:55:07 ----A---- C:\WINDOWS\system32\services.exe
2016-02-05 12:55:07 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-02-05 12:55:06 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-02-05 12:55:06 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-02-05 12:55:06 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-02-05 12:55:05 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-02-05 12:55:05 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-02-05 12:55:04 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-02-05 12:55:04 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2016-02-05 12:55:04 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-02-05 12:55:04 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2016-02-05 12:55:04 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2016-02-05 12:55:03 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-02-05 12:55:03 ----A---- C:\WINDOWS\SYSWOW64\BingOnlineServices.dll
2016-02-05 12:55:03 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-02-05 12:55:03 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-02-05 12:55:02 ----A---- C:\WINDOWS\system32\PhoneService.dll
2016-02-05 12:55:02 ----A---- C:\WINDOWS\system32\jscript.dll
2016-02-05 12:55:01 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-02-05 12:55:01 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-02-05 12:55:00 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2016-02-05 12:55:00 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-02-05 12:55:00 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-02-05 12:55:00 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-02-05 12:54:59 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-02-05 12:54:59 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-02-05 12:54:59 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-05 12:54:59 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2016-02-05 12:54:59 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-02-05 12:54:58 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-02-05 12:54:58 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-02-05 12:54:58 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-02-05 12:54:57 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2016-02-05 12:54:57 ----A---- C:\WINDOWS\system32\MFPlay.dll
2016-02-05 12:54:57 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2016-02-05 12:54:56 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-02-05 12:54:56 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-02-05 12:54:56 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-02-05 12:54:56 ----A---- C:\WINDOWS\system32\user32.dll
2016-02-05 12:54:56 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2016-02-05 12:54:55 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2016-02-05 12:54:55 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-02-05 12:54:55 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-02-05 12:54:55 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-02-05 12:54:55 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-02-05 12:54:55 ----A---- C:\WINDOWS\system32\MTFServer.dll
2016-02-05 12:54:54 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2016-02-05 12:54:54 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2016-02-05 12:54:54 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-02-05 12:54:54 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-02-05 12:54:53 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-02-05 12:54:53 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2016-02-05 12:54:53 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2016-02-05 12:54:53 ----A---- C:\WINDOWS\system32\schannel.dll
2016-02-05 12:54:53 ----A---- C:\WINDOWS\system32\MTF.dll
2016-02-05 12:54:53 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2016-02-05 12:54:52 ----A---- C:\WINDOWS\system32\uReFS.dll
2016-02-05 12:54:52 ----A---- C:\WINDOWS\system32\qedit.dll
2016-02-05 12:54:51 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-02-05 12:54:51 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-02-05 12:54:51 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-02-05 12:54:50 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-02-05 12:54:50 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll
2016-02-05 12:54:50 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-05 12:54:50 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2016-02-05 12:54:50 ----A---- C:\WINDOWS\system32\provengine.dll
2016-02-05 12:54:50 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-02-05 12:54:49 ----A---- C:\WINDOWS\SYSWOW64\MTF.dll
2016-02-05 12:54:49 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2016-02-05 12:54:49 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2016-02-05 12:54:49 ----A---- C:\WINDOWS\system32\mftranscode.dll
2016-02-05 12:54:48 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2016-02-05 12:54:48 ----A---- C:\WINDOWS\system32\SensorService.dll
2016-02-05 12:54:48 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-02-05 12:54:48 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-02-05 12:54:47 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2016-02-05 12:54:47 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-02-05 12:54:47 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-02-05 12:54:47 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-02-05 12:54:47 ----A---- C:\WINDOWS\system32\provhandlers.dll
2016-02-05 12:54:47 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2016-02-05 12:54:46 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2016-02-05 12:54:46 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-02-05 12:54:46 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-02-05 12:54:45 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2016-02-05 12:54:45 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-02-05 12:54:45 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-02-05 12:54:45 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-02-05 12:54:44 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2016-02-05 12:54:44 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-02-05 12:54:44 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-02-05 12:54:44 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-02-05 12:54:43 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-02-05 12:54:43 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-02-05 12:54:43 ----A---- C:\WINDOWS\system32\srcore.dll
2016-02-05 12:54:43 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2016-02-05 12:54:43 ----A---- C:\WINDOWS\system32\cryptngc.dll
2016-02-05 12:54:42 ----A---- C:\WINDOWS\SYSWOW64\SimCfg.dll
2016-02-05 12:54:42 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2016-02-05 12:54:42 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-02-05 12:54:42 ----A---- C:\WINDOWS\system32\mfps.dll
2016-02-05 12:54:41 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2016-02-05 12:54:41 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-02-05 12:54:41 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-02-05 12:54:41 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2016-02-05 12:54:41 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-02-05 12:54:41 ----A---- C:\WINDOWS\system32\dialserver.dll
2016-02-05 12:54:40 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-02-05 12:54:40 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-05 12:54:40 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-02-05 12:54:40 ----A---- C:\WINDOWS\system32\SimCfg.dll
2016-02-05 12:54:40 ----A---- C:\WINDOWS\system32\ProximityCommon.dll
2016-02-05 12:54:39 ----A---- C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-02-05 12:54:39 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2016-02-05 12:54:39 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-02-05 12:54:38 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2016-02-05 12:54:38 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-02-05 12:54:38 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-02-05 12:54:38 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-02-05 12:54:37 ----A---- C:\WINDOWS\SYSWOW64\SimAuth.dll
2016-02-05 12:54:37 ----A---- C:\WINDOWS\system32\SimAuth.dll
2016-02-05 12:54:36 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2016-02-05 12:54:36 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-02-05 12:54:36 ----A---- C:\WINDOWS\system32\rasdlg.dll
2016-02-05 12:54:36 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-02-05 12:54:36 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-05 12:54:35 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-02-05 12:54:34 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-02-05 12:54:34 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-02-05 12:54:34 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-02-05 12:54:34 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-02-05 12:54:33 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-02-05 12:54:33 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-02-05 12:54:33 ----A---- C:\WINDOWS\system32\wscapi.dll
2016-02-05 12:54:33 ----A---- C:\WINDOWS\system32\policymanager.dll
2016-02-05 12:54:32 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-02-05 12:54:32 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-02-05 12:54:31 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2016-02-05 12:54:31 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-02-05 12:54:31 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-05 12:54:31 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-02-05 12:54:30 ----A---- C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-02-05 12:54:30 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-02-05 12:54:30 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-02-05 12:54:30 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-02-05 12:54:30 ----A---- C:\WINDOWS\system32\DDDS.dll
2016-02-05 12:54:30 ----A---- C:\WINDOWS\system32\catsrvut.dll
2016-02-05 12:54:29 ----A---- C:\WINDOWS\system32\omadmclient.exe
2016-02-05 12:54:29 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-02-05 12:54:29 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2016-02-05 12:54:27 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-02-05 12:54:27 ----A---- C:\WINDOWS\system32\usermgrcli.dll
2016-02-05 12:54:27 ----A---- C:\WINDOWS\system32\drivers\capimg.sys
2016-02-05 12:54:27 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-02-05 12:54:26 ----A---- C:\WINDOWS\SYSWOW64\mssign32.dll
2016-02-05 12:54:26 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2016-02-05 12:54:26 ----A---- C:\WINDOWS\system32\wlidcli.dll
2016-02-05 12:54:26 ----A---- C:\WINDOWS\system32\SRH.dll
2016-02-05 12:54:25 ----A---- C:\WINDOWS\SYSWOW64\usermgrcli.dll
2016-02-05 12:54:25 ----A---- C:\WINDOWS\system32\winload.exe
2016-02-05 12:54:24 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-02-05 12:54:23 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2016-02-05 12:54:23 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2016-02-05 12:54:22 ----A---- C:\WINDOWS\SYSWOW64\wwapi.dll
2016-02-05 12:54:22 ----A---- C:\WINDOWS\system32\wwapi.dll
2016-02-05 12:54:22 ----A---- C:\WINDOWS\system32\wimgapi.dll
2016-02-05 12:54:22 ----A---- C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-02-05 12:54:22 ----A---- C:\WINDOWS\system32\rastls.dll
2016-02-05 12:54:22 ----A---- C:\WINDOWS\system32\mssign32.dll
2016-02-05 12:54:21 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll
2016-02-05 12:54:21 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-02-05 12:54:21 ----A---- C:\WINDOWS\system32\SensorsNativeApi.dll
2016-02-05 12:54:21 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-02-05 12:54:21 ----A---- C:\WINDOWS\system32\mfpmp.exe
2016-02-05 12:54:21 ----A---- C:\WINDOWS\system32\EncDump.dll
2016-02-05 12:54:20 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2016-02-05 12:54:20 ----A---- C:\WINDOWS\system32\wimserv.exe
2016-02-05 12:54:19 ----A---- C:\WINDOWS\system32\wifitask.exe
2016-02-05 12:54:19 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2016-02-05 12:54:17 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-02-05 12:54:17 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2016-02-05 12:54:16 ----A---- C:\WINDOWS\SYSWOW64\XblAuthManagerProxy.dll
2016-02-05 12:54:16 ----A---- C:\WINDOWS\system32\provtool.exe
2016-02-05 12:54:16 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2016-02-05 12:54:16 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2016-02-05 12:54:15 ----A---- C:\WINDOWS\system32\provdatastore.dll
2016-02-05 12:54:15 ----A---- C:\WINDOWS\system32\FilterDS.dll
2016-02-05 12:54:15 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2016-02-05 12:54:14 ----A---- C:\WINDOWS\SYSWOW64\pcaui.exe
2016-02-05 12:54:14 ----A---- C:\WINDOWS\system32\pcaui.exe
2016-02-05 12:54:13 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2016-02-05 12:54:13 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-02-05 12:54:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-02-05 12:54:12 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-02-05 12:54:12 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-02-05 12:54:12 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-02-05 12:54:12 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2016-02-05 12:54:04 ----A---- C:\WINDOWS\system32\shutdownux.dll
2016-02-05 12:54:04 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-02-05 12:54:03 ----A---- C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-02-05 12:54:03 ----A---- C:\WINDOWS\system32\rasautou.exe
2016-02-05 12:54:03 ----A---- C:\WINDOWS\system32\policymanagerprecheck.dll
2016-02-05 12:54:03 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-02-05 12:54:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-02-05 12:54:02 ----A---- C:\WINDOWS\SYSWOW64\rasautou.exe
2016-02-05 12:54:02 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2016-02-05 12:54:02 ----A---- C:\WINDOWS\system32\moshost.dll
2016-02-05 12:54:01 ----A---- C:\WINDOWS\system32\DscCore.dll
2016-02-05 12:54:00 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2016-02-05 12:54:00 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2016-02-05 12:53:59 ----A---- C:\WINDOWS\system32\sscoreext.dll
2016-02-05 12:53:59 ----A---- C:\WINDOWS\system32\rasadhlp.dll
2016-02-05 12:53:59 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-02-05 12:53:59 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-02-05 12:53:58 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2016-02-05 12:53:58 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-02-05 12:53:58 ----A---- C:\WINDOWS\system32\winbio.dll
2016-02-05 12:53:58 ----A---- C:\WINDOWS\system32\iesetup.dll
2016-02-05 12:53:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-02-05 12:53:56 ----A---- C:\WINDOWS\system32\iernonce.dll
2016-02-05 12:53:55 ----A---- C:\WINDOWS\SYSWOW64\winhttpcom.dll
2016-02-05 12:53:55 ----A---- C:\WINDOWS\system32\wwanmm.dll
2016-02-05 12:53:55 ----A---- C:\WINDOWS\system32\wshrm.dll
2016-02-05 12:53:54 ----A---- C:\WINDOWS\system32\win32k.sys
2016-02-05 12:53:54 ----A---- C:\WINDOWS\system32\aepic.dll
2016-02-05 12:53:53 ----A---- C:\WINDOWS\system32\wwanconn.dll
2016-02-05 12:53:53 ----A---- C:\WINDOWS\system32\rasauto.dll
2016-02-05 12:53:53 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2016-02-05 12:53:52 ----A---- C:\WINDOWS\SYSWOW64\winbio.dll
2016-02-05 12:53:52 ----A---- C:\WINDOWS\system32\winhttpcom.dll
2016-02-05 12:53:52 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2016-02-05 12:53:51 ----A---- C:\WINDOWS\system32\rastlsext.dll
2016-02-05 12:53:51 ----A---- C:\WINDOWS\system32\pnidui.dll
2016-02-05 12:53:50 ----A---- C:\WINDOWS\SYSWOW64\rasadhlp.dll
2016-02-05 12:53:49 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2016-02-05 12:53:49 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-02-05 12:53:46 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-02-05 12:53:45 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-02-05 12:53:44 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-02-05 12:53:44 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-02-05 12:53:43 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-02-05 12:53:43 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-02-05 12:53:43 ----A---- C:\WINDOWS\system32\wwancfg.dll
2016-02-05 12:53:43 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-02-05 12:53:43 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-02-05 12:53:42 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-02-05 12:53:42 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2016-02-05 12:53:41 ----A---- C:\WINDOWS\SYSWOW64\offlinelsa.dll
2016-02-05 12:53:41 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2016-02-05 12:53:41 ----A---- C:\WINDOWS\system32\offlinelsa.dll
2016-02-05 12:53:41 ----A---- C:\WINDOWS\system32\dciman32.dll
2016-02-05 12:53:40 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-02-05 12:53:40 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2016-02-05 12:53:40 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-02-05 12:53:40 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-02-05 12:53:39 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-02-05 12:53:39 ----A---- C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-02-05 12:53:39 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2016-02-05 12:53:38 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2016-02-05 12:53:38 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\SYSWOW64\MosHostClient.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\system32\wups2.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\system32\provops.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\system32\MapsCSP.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2016-02-05 12:53:37 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2016-02-05 12:53:36 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-02-05 12:53:36 ----A---- C:\WINDOWS\system32\wificonnapi.dll
2016-02-05 12:53:36 ----A---- C:\WINDOWS\system32\MosHostClient.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\system32\wsplib.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\system32\rilproxy.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\system32\mapsupdatetask.dll
2016-02-05 12:53:35 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-02-05 12:53:34 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-02-05 12:53:34 ----A---- C:\WINDOWS\system32\nativemap.dll
2016-02-05 12:53:34 ----A---- C:\WINDOWS\system32\mapstoasttask.dll
2016-02-05 12:53:34 ----A---- C:\WINDOWS\system32\ihvrilproxy.dll
2016-02-05 12:53:33 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2016-02-05 12:53:32 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.proxy.dll
2016-02-05 12:53:32 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2016-02-05 12:53:32 ----A---- C:\WINDOWS\system32\StorageUsage.dll
2016-02-05 12:53:32 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\system32\lpk.dll
2016-02-05 12:53:31 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-02-05 12:53:30 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-02-05 12:53:30 ----A---- C:\WINDOWS\SYSWOW64\BackgroundTransferHost.exe
2016-02-05 12:53:30 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-02-05 12:53:30 ----A---- C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-02-05 12:53:28 ----A---- C:\WINDOWS\SYSWOW64\NmaDirect.dll
2016-02-05 12:53:28 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-02-05 12:53:27 ----A---- C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-02-05 12:53:27 ----A---- C:\WINDOWS\system32\NmaDirect.dll
2016-02-05 12:53:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2016-02-05 12:53:26 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCoreRes.dll
2016-02-05 12:53:26 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-02-05 12:53:25 ----A---- C:\WINDOWS\SYSWOW64\MosResource.dll
2016-02-05 12:53:25 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MapControls.dll
2016-02-05 12:53:25 ----A---- C:\WINDOWS\system32\MosResource.dll
2016-02-05 12:53:25 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-02-05 12:53:25 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-02-05 12:53:24 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosTrace.dll
2016-02-05 12:53:24 ----A---- C:\WINDOWS\SYSWOW64\Microsoft-Windows-MosHost.dll
2016-02-05 12:53:24 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-02-05 12:53:24 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-02-05 12:53:24 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-02-05 12:53:24 ----A---- C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-02-05 12:53:23 ----A---- C:\WINDOWS\SYSWOW64\MapControlStringsRes.dll
2016-02-05 12:53:23 ----A---- C:\WINDOWS\system32\MapControlStringsRes.dll
2016-02-05 11:36:06 ----D---- C:\Intel
2016-02-05 11:33:10 ----D---- C:\HP_RECOVERY_mountHPSF
2016-02-05 11:30:42 ----D---- C:\ProgramData\Microsoft OneDrive
2016-02-05 11:28:17 ----SHD---- C:\$RECYCLE.BIN
2016-02-05 11:18:28 ----D---- C:\ProgramData\USOShared
2016-02-05 11:18:01 ----SHD---- C:\ProgramData\Šablony
2016-02-05 11:18:01 ----SHD---- C:\ProgramData\Plocha
2016-02-05 11:18:01 ----SHD---- C:\ProgramData\Oblíbené položky
2016-02-05 11:18:01 ----SHD---- C:\ProgramData\Nabídka Start
2016-02-05 11:18:01 ----SHD---- C:\ProgramData\Dokumenty
2016-02-05 11:18:01 ----SHD---- C:\ProgramData\Data aplikací
2016-02-05 11:16:22 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2016-02-05 11:11:15 ----ASH---- C:\hiberfil.sys
2016-02-05 11:01:39 ----D---- C:\Program Files\Common Files\SpeechEngines
2016-02-05 10:58:58 ----SD---- C:\Users\LENKA.PETRAKOVA\AppData\Roaming\Microsoft
2016-02-05 10:58:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-05 10:58:03 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2016-02-05 10:49:21 ----D---- C:\Program Files\Synaptics
2016-02-05 10:49:07 ----AD---- C:\Program Files\LSI SoftModem
2016-02-05 10:48:58 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2016-02-05 10:47:21 ----AS---- C:\WINDOWS\bootstat.dat
2016-02-05 10:46:47 ----D---- C:\WINDOWS\Prefetch
2016-02-05 10:46:02 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-05 10:45:51 ----ASH---- C:\swapfile.sys
2016-02-05 10:45:16 ----DC---- C:\WINDOWS\Panther
2016-02-05 10:44:49 ----SHD---- C:\Recovery
2016-02-05 10:42:17 ----D---- C:\Windows.old
2016-02-05 10:41:51 ----D---- C:\WINDOWS\system32\Microsoft
2016-02-05 10:39:59 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2016-02-05 10:39:59 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2016-02-05 10:39:59 ----D---- C:\WINDOWS\system32\msmq
2016-02-05 10:39:59 ----D---- C:\WINDOWS\system32\BestPractices
2016-02-05 10:39:58 ----D---- C:\Program Files\Reference Assemblies
2016-02-05 10:39:58 ----D---- C:\Program Files\MSBuild
2016-02-05 10:39:58 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-02-05 10:39:58 ----D---- C:\Program Files (x86)\MSBuild
2016-02-05 10:39:58 ----D---- C:\inetpub
2016-02-05 10:39:18 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-02-05 10:39:18 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-02-05 10:39:18 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-05 10:39:15 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-05 10:39:15 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-05 10:39:14 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-05 10:09:40 ----HD---- C:\$WINDOWS.~BT
2016-02-05 10:01:54 ----A---- C:\WINDOWS\XCACLS.VBS
2016-02-05 10:01:54 ----A---- C:\WINDOWS\system32\SLEEP.EXE
2016-02-05 10:01:54 ----A---- C:\WINDOWS\NOTEPAD2.EXE
2016-02-05 09:19:18 ----D---- C:\Program Files (x86)\Belarc

======List of files/folders modified in the last 1 month======

2016-03-01 12:20:33 ----RD---- C:\Program Files
2016-03-01 12:17:04 ----D---- C:\WINDOWS\Temp
2016-03-01 12:13:24 ----HD---- C:\ProgramData
2016-03-01 12:13:19 ----D---- C:\Windows
2016-03-01 12:12:53 ----D---- C:\WINDOWS\system32\sru
2016-03-01 12:12:20 ----SHD---- C:\WINDOWS\Installer
2016-03-01 12:12:13 ----AD---- C:\WINDOWS\System32
2016-03-01 12:12:12 ----D---- C:\WINDOWS\system32\drivers
2016-03-01 12:12:08 ----D---- C:\Program Files\Common Files
2016-03-01 12:12:00 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-01 12:11:59 ----D---- C:\WINDOWS\INF
2016-03-01 12:08:32 ----D---- C:\WINDOWS\system32\config
2016-03-01 11:01:14 ----SHD---- C:\System Volume Information
2016-03-01 10:39:43 ----D---- C:\WINDOWS\AppReadiness
2016-03-01 10:39:41 ----HD---- C:\Program Files\WindowsApps
2016-02-24 14:19:35 ----SH---- C:\Program Files (x86)\desktop.ini
2016-02-24 14:19:35 ----RD---- C:\Users
2016-02-24 14:19:35 ----RD---- C:\Program Files (x86)
2016-02-24 14:12:48 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-02-24 13:58:32 ----AD---- C:\WINDOWS\SysWOW64
2016-02-24 13:57:28 ----D---- C:\WINDOWS\Tasks
2016-02-24 13:57:28 ----D---- C:\WINDOWS\system32\Tasks
2016-02-24 13:48:45 ----D---- C:\WINDOWS\WinSxS
2016-02-24 13:40:38 ----D---- C:\Program Files (x86)\Google
2016-02-24 13:37:52 ----AD---- C:\ProgramData\ACD Systems
2016-02-23 14:44:07 ----D---- C:\WINDOWS\rescache
2016-02-23 12:42:06 ----D---- C:\WINDOWS\Microsoft.NET
2016-02-23 12:37:13 ----RD---- C:\WINDOWS\assembly
2016-02-23 11:55:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-22 18:45:28 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2016-02-22 18:45:27 ----D---- C:\WINDOWS\system32\cs-CZ
2016-02-22 18:45:26 ----D---- C:\Program Files\Windows Journal
2016-02-22 14:28:26 ----D---- C:\ProgramData\Microsoft Help
2016-02-22 14:27:27 ----D---- C:\WINDOWS\system32\MRT
2016-02-22 14:22:32 ----D---- C:\WINDOWS\debug
2016-02-22 14:22:31 ----A---- C:\WINDOWS\system32\MRT.exe
2016-02-22 14:22:21 ----D---- C:\WINDOWS\CbsTemp
2016-02-22 13:18:07 ----D---- C:\WINDOWS\system32\catroot2
2016-02-09 14:30:31 ----D---- C:\WINDOWS\system32\WDI
2016-02-08 16:06:05 ----D---- C:\WINDOWS\Logs
2016-02-08 15:04:09 ----D---- C:\WINDOWS\appcompat
2016-02-05 15:16:26 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-02-05 15:16:26 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-02-05 15:16:21 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-02-05 15:16:21 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-02-05 15:16:15 ----SD---- C:\WINDOWS\system32\F12
2016-02-05 15:16:15 ----D---- C:\WINDOWS\system32\oobe
2016-02-05 15:16:15 ----D---- C:\WINDOWS\system32\migration
2016-02-05 15:16:15 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-02-05 15:16:15 ----D---- C:\WINDOWS\system32\Dism
2016-02-05 15:16:15 ----D---- C:\WINDOWS\system32\Boot
2016-02-05 15:16:15 ----D---- C:\WINDOWS\system32\appraiser
2016-02-05 15:16:10 ----RD---- C:\WINDOWS\PurchaseDialog
2016-02-05 15:16:10 ----D---- C:\WINDOWS\Provisioning
2016-02-05 15:16:09 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-02-05 15:16:09 ----D---- C:\WINDOWS\bcastdvr
2016-02-05 15:16:08 ----D---- C:\WINDOWS\AppPatch
2016-02-05 15:16:08 ----D---- C:\Program Files\Internet Explorer
2016-02-05 15:16:08 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-05 12:16:49 ----RD---- C:\WINDOWS\DevicesFlow
2016-02-05 11:36:10 ----D---- C:\Program Files (x86)\Common Files
2016-02-05 11:27:02 ----RD---- C:\WINDOWS\PrintDialog
2016-02-05 11:27:01 ----RD---- C:\WINDOWS\MiracastView
2016-02-05 11:25:53 ----SD---- C:\ProgramData\Microsoft
2016-02-05 11:19:52 ----D---- C:\WINDOWS\system32\restore
2016-02-05 11:18:28 ----D---- C:\ProgramData\USOPrivate
2016-02-05 11:18:23 ----D---- C:\WINDOWS\SoftwareDistribution
2016-02-05 11:18:01 ----D---- C:\Program Files\Windows NT
2016-02-05 11:17:54 ----D---- C:\WINDOWS\system32\WinBioDatabase
2016-02-05 11:17:24 ----D---- C:\WINDOWS\Registration
2016-02-05 11:16:13 ----D---- C:\WINDOWS\system32\drivers\etc
2016-02-05 11:16:07 ----D---- C:\WINDOWS\system32\LogFiles
2016-02-05 11:16:06 ----RSD---- C:\WINDOWS\Media
2016-02-05 11:16:04 ----D---- C:\WINDOWS\system32\wbem
2016-02-05 11:14:09 ----D---- C:\WINDOWS\system32\spool
2016-02-05 11:10:43 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\zh-TW
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\zh-HK
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\zh-CN
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\tr-TR
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\th-TH
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\sv-SE
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\sl-SI
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\sk-SK
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\ru-RU
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\ro-RO
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\pt-PT
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\pt-BR
2016-02-05 11:10:41 ----D---- C:\WINDOWS\system32\pl-PL
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\OEM
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\nl-NL
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\nb-NO
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\lv-LV
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\lt-LT
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\ko-KR
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\ja-JP
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\it-IT
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\hu-HU
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\hr-HR
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\he-IL
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\fr-FR
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\fi-FI
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\et-EE
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\es-ES
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\en-US
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\el-GR
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\de-DE
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\da-DK
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\bg-BG
2016-02-05 11:10:40 ----D---- C:\WINDOWS\system32\ar-SA
2016-02-05 11:10:40 ----D---- C:\WINDOWS\ShellNew
2016-02-05 11:10:38 ----RSD---- C:\WINDOWS\Fonts
2016-02-05 11:04:19 ----D---- C:\WINDOWS\twain_32
2016-02-05 11:04:19 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2016-02-05 11:04:19 ----D---- C:\WINDOWS\SYSWOW64\zh-HK
2016-02-05 11:04:19 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2016-02-05 11:04:19 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\SDA
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2016-02-05 11:04:18 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2016-02-05 11:04:17 ----D---- C:\WINDOWS\SYSWOW64\IME
2016-02-05 11:04:17 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2016-02-05 11:04:17 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2016-02-05 11:04:17 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2016-02-05 11:04:16 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2016-02-05 11:04:15 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2016-02-05 11:04:15 ----D---- C:\WINDOWS\SYSWOW64\drivers
2016-02-05 11:04:15 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2016-02-05 11:04:15 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2016-02-05 11:04:12 ----D---- C:\WINDOWS\system32\SRSLabs
2016-02-05 11:04:12 ----D---- C:\WINDOWS\system32\SPReview
2016-02-05 11:04:08 ----D---- C:\WINDOWS\system32\NDF
2016-02-05 11:04:07 ----D---- C:\WINDOWS\system32\IME
2016-02-05 11:04:07 ----D---- C:\WINDOWS\system32\EventProviders
2016-02-05 11:04:05 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2016-02-05 11:02:20 ----D---- C:\WINDOWS\system32\CatRoot
2016-02-05 11:02:20 ----D---- C:\WINDOWS\system32\appmgmt
2016-02-05 11:02:16 ----D---- C:\WINDOWS\schemas
2016-02-05 11:02:13 ----D---- C:\WINDOWS\LiveKernelReports
2016-02-05 11:02:01 ----D---- C:\WINDOWS\Help
2016-02-05 11:01:59 ----D---- C:\WINDOWS\ehome
2016-02-05 11:01:48 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2016-02-05 11:01:48 ----D---- C:\Program Files (x86)\Windows Mail
2016-02-05 11:01:47 ----D---- C:\Program Files (x86)\Microsoft.NET
2016-02-05 11:01:47 ----D---- C:\Program Files (x86)\Intel
2016-02-05 11:01:46 ----AD---- C:\Program Files (x86)\Hewlett-Packard
2016-02-05 11:01:42 ----SHD---- C:\Program Files\Windows Sidebar
2016-02-05 11:01:42 ----D---- C:\Program Files\Windows Mail
2016-02-05 11:01:40 ----D---- C:\Program Files\WIDCOMM
2016-02-05 11:01:39 ----D---- C:\Program Files\DVD Maker
2016-02-05 11:01:39 ----D---- C:\Program Files\Common Files\System
2016-02-05 11:01:39 ----AD---- C:\Program Files\Common Files\microsoft shared
2016-02-05 11:00:38 ----D---- C:\WINDOWS\system32\Recovery
2016-02-05 10:57:33 ----D---- C:\WINDOWS\system32\Sysprep
2016-02-05 10:56:34 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-02-05 10:46:12 ----D---- C:\WINDOWS\ServiceProfiles
2016-02-05 10:39:59 ----D---- C:\WINDOWS\SYSWOW64\MUI
2016-02-05 10:39:59 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2016-02-05 10:39:59 ----D---- C:\WINDOWS\system32\MUI
2016-02-05 10:39:59 ----D---- C:\WINDOWS\system32\inetsrv
2016-02-05 10:39:53 ----A---- C:\WINDOWS\SYSWOW64\mqsnap.dll
2016-02-05 10:39:53 ----A---- C:\WINDOWS\SYSWOW64\mqcertui.dll
2016-02-05 10:39:52 ----A---- C:\WINDOWS\system32\wamregps.dll
2016-02-05 10:39:52 ----A---- C:\WINDOWS\system32\iisRtl.dll
2016-02-05 10:39:52 ----A---- C:\WINDOWS\system32\iisrstap.dll
2016-02-05 10:39:52 ----A---- C:\WINDOWS\system32\iisreset.exe
2016-02-05 10:39:52 ----A---- C:\WINDOWS\system32\ahadmin.dll
2016-02-05 10:39:52 ----A---- C:\WINDOWS\system32\admwprox.dll
2016-02-05 10:39:50 ----A---- C:\WINDOWS\SYSWOW64\wamregps.dll
2016-02-05 10:39:50 ----A---- C:\WINDOWS\SYSWOW64\iisRtl.dll
2016-02-05 10:39:50 ----A---- C:\WINDOWS\SYSWOW64\iisrstap.dll
2016-02-05 10:39:50 ----A---- C:\WINDOWS\SYSWOW64\iisreset.exe
2016-02-05 10:39:50 ----A---- C:\WINDOWS\SYSWOW64\ahadmin.dll
2016-02-05 10:39:50 ----A---- C:\WINDOWS\SYSWOW64\admwprox.dll
2016-02-05 10:39:50 ----A---- C:\WINDOWS\system32\mqrt.dll
2016-02-05 10:39:49 ----A---- C:\WINDOWS\SYSWOW64\mqoa.dll
2016-02-05 10:39:48 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2016-02-05 10:39:47 ----A---- C:\WINDOWS\system32\mqutil.dll
2016-02-05 10:39:45 ----A---- C:\WINDOWS\system32\mqsnap.dll
2016-02-05 10:39:45 ----A---- C:\WINDOWS\system32\mqcertui.dll
2016-02-05 10:39:43 ----A---- C:\WINDOWS\system32\mqoa.dll
2016-02-05 10:39:42 ----A---- C:\WINDOWS\SYSWOW64\mqrt.dll
2016-02-05 10:39:42 ----A---- C:\WINDOWS\system32\mqqm.dll
2016-02-05 10:39:40 ----A---- C:\WINDOWS\SYSWOW64\mqutil.dll
2016-02-05 10:39:39 ----A---- C:\WINDOWS\system32\mqsvc.exe
2016-02-05 10:39:39 ----A---- C:\WINDOWS\system32\mqbkup.exe
2016-02-05 10:15:26 ----SHD---- C:\boot
2016-02-05 10:02:02 ----D---- C:\Program Files\TotalCmd
2016-02-05 10:02:02 ----A---- C:\WINDOWS\WINCMD.INI
2016-02-05 10:00:59 ----AD---- C:\Program Files\CCleaner
2016-02-05 09:50:16 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-02-05 09:49:28 ----AD---- C:\Program Files\Hewlett-Packard
2016-02-05 09:49:23 ----D---- C:\ProgramData\DigitalPersona
2016-02-05 09:45:42 ----D---- C:\ProgramData\Hewlett-Packard
2016-02-05 09:43:57 ----D---- C:\ProgramData\firebird
2016-02-05 09:30:59 ----D---- C:\ProgramData\HPQLOG
2016-02-03 20:01:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-02-24 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-02-24 287016]
R0 hpdskflt;@oem19.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 PxHlpa64;PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-02-24 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-02-24 1065720]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-02-24 463744]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-02-24 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-02-24 107792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-02-24 165344]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 Accelerometer;@oem19.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 AgereSoftModem;@oem10.inf,%ServiceName%;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\agrsm64.sys [2010-01-26 1212416]
R3 BCM43XX;@oem32.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl664.sys [2011-12-12 3065408]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-10-30 112640]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-10-30 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2015-10-30 84992]
R3 e1cexpress;@oem14.inf,%e1cExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\WINDOWS\system32\DRIVERS\e1c62x64.sys [2010-12-21 316080]
R3 HpqKbFiltr;@oem16.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\WINDOWS\System32\drivers\HpqKbFiltr.sys [2010-12-03 25912]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcDAud;@oem20.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 JMCR;JMCR; C:\WINDOWS\system32\DRIVERS\jmcr.sys [2011-01-30 174168]
R3 johci;@oem25.inf,%service_desc%;JMicron 1394 Filter Driver; C:\WINDOWS\System32\drivers\johci.sys [2011-02-08 26712]
R3 MEIx64;@oem28.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-20 56344]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2016-02-05 175616]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-10-30 175104]
R3 SNP2UVC;@oem39.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2015-07-16 2621128]
R3 SynTP;@oem37.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-07-03 614088]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S3 avchv;@oem44.inf,%ServiceDesc%;avchv Function Driver; C:\WINDOWS\system32\DRIVERS\avchv.sys []
S3 BCM42RLY;BCM42RLY; C:\WINDOWS\system32\drivers\BCM42RLY.sys [2011-12-12 22592]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-01-05 953856]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-11-22 117248]
S3 dg_ssudbus;@oem40.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\WINDOWS\System32\drivers\e1i63x64.sys [2015-10-30 472576]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 ssudmdm;@oem43.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-12-04 28672]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-24 237096]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-02-18 1045928]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 hpsrv;@oem19.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2011-05-13 30520]
R2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service; C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2010-11-29 210896]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2016-02-05 26624]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2015-10-30 43944]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 OneSyncSvc_30205;Hostitel synchronizace_30205; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2011-01-18 113264]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2015-10-30 43944]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2015-07-03 246472]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-24 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-10-30 51376]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_30205;Služba zasílání zpráv_30205; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-22 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_30205;Data kontaktů_30205; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 stllssvr;stllssvr; C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2010-11-09 74392]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S4 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
S4 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-12-10 126520]
S4 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2011-01-27 131128]
S4 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [2011-01-29 281656]
S4 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-03-29 799800]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-03 326168]
S4 RoxMediaDB12OEM;RoxMediaDB12OEM; C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2011-01-15 1116656]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S4 STacSV;Audio Service; C:\Program Files\IDT\WDM\STacSV64.exe [2011-01-27 296448]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Co minutu se vše zruší jakoby šlo o refresh PC

#2 Příspěvek od Rudy »

Zdravím!
Toto PC je vaše osobní, nebo firemní?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Honzua
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 17 dub 2008 18:48

Re: Co minutu se vše zruší jakoby šlo o refresh PC

#3 Příspěvek od Honzua »

Firemní. Patří neziskové organizaci v které pracuji.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Co minutu se vše zruší jakoby šlo o refresh PC

#4 Příspěvek od Rudy »

Pak lituji. Fórum viry.cz neposkytuje služby firemním uživatelům, ale jen home userlm. Viz pravidla: http://forum.viry.cz/viewtopic.php?f=12&t=5601 (bod 6.).
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět