tmczech - kontrola logu, vytizeni CPU

[tmczech]

Dobrý den, prosím o kontrolu logu. Po připojení napáječe k laptopu (HP ProBook 4530s) je vytíženost CPU 100%. Ve správci úloh a zobrazení procesů všech uživatelů není vidět žádný proces, který by CPU vytěžoval. Po odpojení napáječe se CPU dostane na normální hodnoty.
Chci vyloučit všechny varianty včetně napadení havětí, jako další možnost beru špatný napáječ.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2016-06-28 21:07:53
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 71 GB (59%) free of 120 GB
Total RAM: 8126 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:08:00, on 28.6.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18347)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8704 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\ESET\ESET Smart Security\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" /start
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" /hidden
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe" -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSdkHelperx64.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><ProgressBar><Percentage>5</Percentage><LeftIconPath>C:\Users\Admin\AppData\Local\Temp\BrightnessDown.ico</LeftIconPath><RightIconPath>C:\Users\Admin\AppData\Local\Temp\BrightnessUp.ico</RightIconPath></ProgressBar></hpNotification>"

taskeng.exe {824EFD1A-8637-4381-9A54-8B22F3CB777A}
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=51.0.2704.106 --handshake-handle=0xe0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20160627/EnableMediaRouter/Disabled/ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/Unused_2/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PreRead/Default/*QUIC/EnabledNoIdV31/RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_13/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --type=gpu-process --channel="4996.0.1173206932\826661067" --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,10,12,13,25,54 --gpu-vendor-id=0x1002 --gpu-device-id=0x6760 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.910.0.0 --mojo-platform-channel-handle=1080 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20160627/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PreRead/Default/*QUIC/EnabledNoIdV31/RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_13/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=5051F75F43A02FD6DC2FE8D851E97259 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --channel="4996.2.497960772\1065445803" --mojo-platform-channel-handle=1988 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/DocumentWriteScriptBlockGroup_20160627/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PreRead/Default/*QUIC/EnabledNoIdV31/*RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_13/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=0CE4582BEB12279627D2CDF0A03E9F69 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --channel="4996.14.198184475\393253976" --mojo-platform-channel-handle=4136 /prefetch:1
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\NOTEPAD.EXE" C:\rsit\info.txt
"C:\Users\Admin\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d15eb593c34bcc.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d15eb593daf2d5.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-01-06 60576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-06-24 2803496]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-01-06 615584]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-01-06 379040]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-08-31 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-08-31 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-08-31 416024]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-09-08 1424896]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2011-01-26 13880]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-10-13 343168]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2011-01-28 299576]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-26 283160]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-08-31 390144]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-06-28 21:05:29 ----D---- C:\Program Files\trend micro
2016-06-28 21:05:28 ----D---- C:\rsit
2016-06-25 16:25:58 ----A---- C:\Windows\system32\wuauclt.exe
2016-06-25 16:25:58 ----A---- C:\Windows\system32\wuapp.exe
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-06-25 16:25:57 ----A---- C:\Windows\system32\wucltux.dll
2016-06-25 16:25:57 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wuwebv.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wudriver.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wuaueng.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wuapi.dll
2016-06-25 16:25:55 ----A---- C:\Windows\system32\ntdll.dll
2016-06-25 16:25:54 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-06-25 16:25:54 ----A---- C:\Windows\system32\wups2.dll
2016-06-25 16:25:54 ----A---- C:\Windows\system32\wups.dll
2016-06-25 16:25:54 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-06-25 16:25:50 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-06-25 16:25:48 ----A---- C:\Windows\system32\msi.dll
2016-06-25 16:25:47 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-06-25 16:25:47 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-06-25 16:25:47 ----A---- C:\Windows\system32\wdigest.dll
2016-06-25 16:25:47 ----A---- C:\Windows\system32\ncrypt.dll
2016-06-25 16:25:47 ----A---- C:\Windows\system32\msiexec.exe
2016-06-25 16:25:47 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-06-25 16:25:46 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-06-25 16:25:45 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-06-25 16:25:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-06-25 16:25:43 ----A---- C:\Windows\system32\consent.exe
2016-06-25 16:25:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-06-25 16:25:41 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-06-25 16:25:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-06-25 16:25:40 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-06-25 16:25:40 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-06-25 16:25:39 ----A---- C:\Windows\system32\oleaut32.dll
2016-06-25 16:25:38 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-06-25 16:25:38 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\smss.exe
2016-06-25 16:25:38 ----A---- C:\Windows\system32\rpcrt4.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\lsasrv.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\kernel32.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\kerberos.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-06-25 16:25:38 ----A---- C:\Windows\system32\certcli.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\authui.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\advapi32.dll
2016-06-25 16:25:37 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-06-25 16:25:37 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\wow64win.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\srcore.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\schannel.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\msv1_0.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\KernelBase.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\wow64.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\winsrv.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\TSpkg.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\sspicli.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\rpchttp.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\msihnd.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\lsass.exe
2016-06-25 16:25:36 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-06-25 16:25:36 ----A---- C:\Windows\system32\csrsrv.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\cryptbase.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\conhost.exe
2016-06-25 16:25:36 ----A---- C:\Windows\system32\appinfo.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\wow64cpu.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\sspisrv.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\srclient.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\secur32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\rstrui.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\ntvdm64.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\drivers\appid.sys
2016-06-25 16:25:35 ----A---- C:\Windows\system32\credssp.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\auditpol.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\asycfilt.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidsvc.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidapi.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-06-25 16:25:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-06-25 16:25:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-06-25 16:25:32 ----A---- C:\Windows\system32\apisetschema.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-06-25 16:25:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-06-25 16:25:30 ----A---- C:\Windows\SYSWOW64\user.exe
2016-06-25 16:25:30 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-06-25 16:25:30 ----A---- C:\Windows\system32\adtschema.dll
2016-06-25 16:25:28 ----A---- C:\Windows\system32\msaudite.dll
2016-06-25 16:25:27 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-06-25 16:25:27 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-06-25 16:25:27 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-06-25 16:25:27 ----A---- C:\Windows\system32\msobjs.dll
2016-06-25 16:25:27 ----A---- C:\Windows\system32\msimsg.dll
2016-06-19 18:11:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-06-19 18:11:25 ----A---- C:\Windows\system32\tzres.dll
2016-06-19 18:11:21 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\srv.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\cng.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\bcryptprimitives.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\invagent.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\generaltel.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\devinv.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-06-19 18:11:15 ----A---- C:\Windows\system32\centel.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\appraiser.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\aeinv.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\acmigration.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\lpk.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\fontsub.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\dciman32.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\atmlib.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\atmfd.dll
2016-06-19 18:11:05 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2016-06-19 18:11:05 ----A---- C:\Windows\system32\StructuredQuery.dll
2016-06-19 18:11:01 ----A---- C:\Windows\system32\win32k.sys
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\ws2_32.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\winhttp.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\netbtugc.exe
2016-06-19 18:10:59 ----A---- C:\Windows\system32\mswsock.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\drivers\netbt.sys
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\polstore.dll
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\winipsec.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\polstore.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\IPSECSVC.DLL
2016-06-19 18:10:58 ----A---- C:\Windows\system32\gpsvc.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\gpapi.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2016-06-19 18:10:56 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-06-19 18:10:56 ----A---- C:\Windows\system32\gdi32.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-06-19 18:10:55 ----A---- C:\Windows\system32\iernonce.dll
2016-06-19 18:10:55 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-06-19 18:10:55 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-06-19 18:10:54 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-19 18:10:54 ----A---- C:\Windows\system32\inseng.dll
2016-06-19 18:10:54 ----A---- C:\Windows\system32\ie4uinit.exe
2016-06-19 18:10:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-06-19 18:10:53 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-06-19 18:10:53 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\urlmon.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\occache.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-19 18:10:52 ----A---- C:\Windows\system32\msfeeds.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\iedkcs32.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\dxtrans.dll
2016-06-19 18:10:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-06-19 18:10:51 ----A---- C:\Windows\system32\iesetup.dll
2016-06-19 18:10:51 ----A---- C:\Windows\system32\ieapfltr.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-06-19 18:10:50 ----A---- C:\Windows\system32\vbscript.dll
2016-06-19 18:10:50 ----A---- C:\Windows\system32\iertutil.dll
2016-06-19 18:10:49 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\jsproxy.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\ieui.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\ieframe.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\dxtmsft.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\webcheck.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\mshtmled.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\jscript.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\ieUnatt.exe
2016-06-19 18:10:47 ----A---- C:\Windows\system32\wininet.dll
2016-06-19 18:10:47 ----A---- C:\Windows\system32\jscript9diag.dll
2016-06-19 18:10:47 ----A---- C:\Windows\system32\jscript9.dll
2016-06-19 18:10:46 ----A---- C:\Windows\system32\msrating.dll
2016-06-19 18:10:46 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-06-19 18:10:46 ----A---- C:\Windows\system32\mshtml.dll

======List of files/folders modified in the last 1 month======

2016-06-28 21:07:54 ----D---- C:\Windows\Temp
2016-06-28 21:05:29 ----RD---- C:\Program Files
2016-06-28 21:03:24 ----D---- C:\Windows
2016-06-28 20:12:56 ----D---- C:\Windows\System32
2016-06-28 20:12:56 ----D---- C:\Windows\inf
2016-06-28 20:12:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-06-28 20:08:49 ----A---- C:\Windows\SYSWOW64\log.txt
2016-06-28 20:07:00 ----D---- C:\Windows\system32\config
2016-06-28 18:45:18 ----SHD---- C:\System Volume Information
2016-06-27 22:20:47 ----D---- C:\Users\Admin\AppData\Roaming\vlc
2016-06-26 17:10:57 ----D---- C:\Windows\system32\NDF
2016-06-26 17:01:32 ----D---- C:\Users\Admin\AppData\Roaming\hpqLog
2016-06-26 16:54:04 ----D---- C:\Windows\system32\catroot2
2016-06-25 16:41:00 ----D---- C:\Windows\winsxs
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\sl-SI
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\sk-SK
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\ro-RO
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\lv-LV
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\lt-LT
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\hr-HR
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\et-EE
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\en-US
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\bg-BG
2016-06-25 16:39:31 ----D---- C:\Windows\SysWOW64
2016-06-25 16:39:31 ----D---- C:\Windows\system32\sl-SI
2016-06-25 16:39:31 ----D---- C:\Windows\system32\hr-HR
2016-06-25 16:39:31 ----D---- C:\Windows\system32\drivers
2016-06-25 16:39:31 ----D---- C:\Windows\system32\bg-BG
2016-06-25 16:39:30 ----D---- C:\Windows\system32\sk-SK
2016-06-25 16:39:30 ----D---- C:\Windows\system32\ro-RO
2016-06-25 16:39:30 ----D---- C:\Windows\system32\lv-LV
2016-06-25 16:39:30 ----D---- C:\Windows\system32\lt-LT
2016-06-25 16:39:30 ----D---- C:\Windows\system32\et-EE
2016-06-25 16:39:30 ----D---- C:\Windows\system32\en-US
2016-06-25 16:39:30 ----D---- C:\Windows\system32\cs-CZ
2016-06-25 16:39:30 ----D---- C:\Windows\system32\Boot
2016-06-25 16:39:30 ----D---- C:\Windows\AppPatch
2016-06-25 16:15:27 ----D---- C:\Windows\debug
2016-06-20 09:32:02 ----D---- C:\Windows\system32\wbem
2016-06-20 09:32:02 ----D---- C:\Windows\system32\appraiser
2016-06-20 09:32:01 ----D---- C:\Program Files\Internet Explorer
2016-06-20 09:32:01 ----D---- C:\Program Files (x86)\Internet Explorer
2016-06-19 18:46:44 ----D---- C:\Windows\system32\MRT
2016-06-19 18:45:10 ----A---- C:\Windows\system32\MRT.exe
2016-06-13 19:31:06 ----N---- C:\Windows\system32\MpSigStub.exe
2016-06-02 12:25:48 ----SHD---- C:\Windows\Installer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-19 84800]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-13 439320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-19 264552]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-19 198096]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-19 53384]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-10-14 10496000]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-10-14 326656]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-01-06 36000]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-06-20 3678720]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-01-06 298144]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-01-06 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-01-06 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-01-06 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-01-06 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-01-06 279200]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2010-12-02 25912]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-08-31 12306848]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2014-12-10 797400]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2015-07-16 2621128]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-09-08 535040]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-06-24 1446960]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2011-01-06 51872]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2011-01-31 174168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-10-14 204288]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-01-06 138400]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-01-06 53920]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-06-25 2520928]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2011-01-26 131128]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [2011-01-28 281656]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-26 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-17 326168]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2011-01-18 113264]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-09-08 305152]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-01-25 791608]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-31 144200]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-05-20 114688]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-12-31 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[tmczech]

# AdwCleaner v5.200 - Log vytvořen 29/06/2016 v 21:37:56
# Aktualizováno 14/06/2016 by ToolsLib
# Databáze : 2016-06-29.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (X64)
# Uživatelské jméno : Admin - NTB-PC
# Spuštěno z : C:\Users\Admin\Desktop\adwcleaner_5.200.exe
# Nastavení : Čištění
# Podpora : https://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****


***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úlohy ] *****


***** [ Registry ] *****


***** [ Prohlížeče ] *****


*************************

:: "Tracing" klíče smazány
:: Nastavení Winsock vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [780 bytů] - [29/06/2016 21:37:56]
C:\AdwCleaner\AdwCleaner[S1].txt - [824 bytů] - [29/06/2016 21:36:15]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [924 bytů] ##########

[Rudy]

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d15eb593c34bcc.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d15eb593daf2d5.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

[tmczech]

OTM:

All processes killed
========== FILES ==========
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d15eb593c34bcc.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d15eb593daf2d5.job moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Admin
->Temp folder emptied: 4312432 bytes
->Temporary Internet Files folder emptied: 128 bytes
->Google Chrome cache emptied: 12586469 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3164 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 39418 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 58525348 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 72,00 mb


[EMPTYFLASH]

User: Admin

User: All Users

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 06302016_210109

Files moved on Reboot...
C:\Users\Admin\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...

[tmczech]

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2016-06-30 21:04:12
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 71 GB (59%) free of 120 GB
Total RAM: 8126 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:04:16, on 30.6.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18347)
Boot mode: Normal

Running processes:
C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8699 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
"C:\Program Files\ESET\ESET Smart Security\ekrn.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {BDA5613F-6DA6-459B-A57C-4A14B7987DEE}
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe"
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\GWX\GWX.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
taskeng.exe {E32B77B6-54B2-4E22-94A3-EAD6F705237D}
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\06302016_210109.log
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe" 120 C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe /hidden
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
taskeng.exe {BA780FB3-DF07-489C-9EAE-52748D5BB2BE}
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" /start
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=51.0.2704.106 --handshake-handle=0xe0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Disabled/ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/Unused_2/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PreRead/Default/*QUIC/EnabledNoId/RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_13/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --type=gpu-process --channel="4820.0.2115795797\666619855" --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,10,12,13,25,54 --gpu-vendor-id=0x1002 --gpu-device-id=0x6760 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.910.0.0 --mojo-platform-channel-handle=1104 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PreRead/Default/*QUIC/EnabledNoId/RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_13/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=932920406FA69B5E4FBE5EFA793032CB --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --channel="4820.2.1450285809\20573969" --mojo-platform-channel-handle=1992 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,IncidentReportingModuleLoadAnalysis<SafeBrowsingIncidentReportingServiceFeatures,IncidentReportingSuspiciousModuleReporting<SafeBrowsingIncidentReportingServiceFeatures,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow,WebFontsIntervention<WebFontsIntervention,*WebRTC-EnableWebRtcEcdsa<WebRTC-EnableWebRtcEcdsa,brotli-encoding<BrotliEncoding --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,RenderingPipelineThrottling<RenderingPipelineThrottling --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_10-gen2/*BrotliEncoding/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Disabled/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/*OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/*PreRead/Default/*QUIC/EnabledNoId/*RenderingPipelineThrottling/Disabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Control25PermanentA/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/*SafeBrowsingIncidentReportingServiceFeatures/WithSuspiciousModuleReporting/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_84/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_13/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*WebFontsIntervention/Enabled/WebRTC-EnableWebRtcEcdsa/Default/ --primordial-pipe-token=9887E288E61EB1944570D73767C05385 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --channel="4820.13.1482636498\1587882361" --mojo-platform-channel-handle=3200 /prefetch:1
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Users\Admin\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-01-06 60576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-06-24 2803496]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-01-06 615584]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-01-06 379040]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-08-31 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-08-31 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-08-31 416024]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-09-08 1424896]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2011-01-26 13880]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-12-08 8590760]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-10-13 343168]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2011-01-28 299576]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-26 283160]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-08-31 390144]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-06-30 21:01:09 ----D---- C:\_OTM
2016-06-29 21:35:18 ----D---- C:\AdwCleaner
2016-06-28 21:05:29 ----D---- C:\Program Files\trend micro
2016-06-28 21:05:28 ----D---- C:\rsit
2016-06-25 16:25:58 ----A---- C:\Windows\system32\wuauclt.exe
2016-06-25 16:25:58 ----A---- C:\Windows\system32\wuapp.exe
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-06-25 16:25:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-06-25 16:25:57 ----A---- C:\Windows\system32\wucltux.dll
2016-06-25 16:25:57 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wuwebv.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wudriver.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wuaueng.dll
2016-06-25 16:25:56 ----A---- C:\Windows\system32\wuapi.dll
2016-06-25 16:25:55 ----A---- C:\Windows\system32\ntdll.dll
2016-06-25 16:25:54 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-06-25 16:25:54 ----A---- C:\Windows\system32\wups2.dll
2016-06-25 16:25:54 ----A---- C:\Windows\system32\wups.dll
2016-06-25 16:25:54 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-06-25 16:25:50 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-06-25 16:25:48 ----A---- C:\Windows\system32\msi.dll
2016-06-25 16:25:47 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-06-25 16:25:47 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2016-06-25 16:25:47 ----A---- C:\Windows\system32\wdigest.dll
2016-06-25 16:25:47 ----A---- C:\Windows\system32\ncrypt.dll
2016-06-25 16:25:47 ----A---- C:\Windows\system32\msiexec.exe
2016-06-25 16:25:47 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-06-25 16:25:46 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-06-25 16:25:45 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-06-25 16:25:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-06-25 16:25:43 ----A---- C:\Windows\system32\consent.exe
2016-06-25 16:25:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-06-25 16:25:41 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-06-25 16:25:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-06-25 16:25:40 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-06-25 16:25:40 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-06-25 16:25:39 ----A---- C:\Windows\system32\oleaut32.dll
2016-06-25 16:25:38 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-06-25 16:25:38 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\smss.exe
2016-06-25 16:25:38 ----A---- C:\Windows\system32\rpcrt4.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\lsasrv.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\kernel32.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\kerberos.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-06-25 16:25:38 ----A---- C:\Windows\system32\certcli.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\authui.dll
2016-06-25 16:25:38 ----A---- C:\Windows\system32\advapi32.dll
2016-06-25 16:25:37 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-06-25 16:25:37 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\wow64win.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\srcore.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\schannel.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\msv1_0.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\KernelBase.dll
2016-06-25 16:25:37 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-06-25 16:25:36 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\wow64.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\winsrv.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\TSpkg.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\sspicli.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\rpchttp.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\msihnd.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\lsass.exe
2016-06-25 16:25:36 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-06-25 16:25:36 ----A---- C:\Windows\system32\csrsrv.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\cryptbase.dll
2016-06-25 16:25:36 ----A---- C:\Windows\system32\conhost.exe
2016-06-25 16:25:36 ----A---- C:\Windows\system32\appinfo.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-06-25 16:25:35 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-06-25 16:25:35 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\wow64cpu.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\sspisrv.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\srclient.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\secur32.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\rstrui.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\ntvdm64.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\drivers\appid.sys
2016-06-25 16:25:35 ----A---- C:\Windows\system32\credssp.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\auditpol.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\asycfilt.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidsvc.dll
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-06-25 16:25:35 ----A---- C:\Windows\system32\appidapi.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-06-25 16:25:34 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-06-25 16:25:33 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-06-25 16:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-06-25 16:25:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-06-25 16:25:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-06-25 16:25:32 ----A---- C:\Windows\system32\apisetschema.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-06-25 16:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-06-25 16:25:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-06-25 16:25:30 ----A---- C:\Windows\SYSWOW64\user.exe
2016-06-25 16:25:30 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-06-25 16:25:30 ----A---- C:\Windows\system32\adtschema.dll
2016-06-25 16:25:28 ----A---- C:\Windows\system32\msaudite.dll
2016-06-25 16:25:27 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-06-25 16:25:27 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-06-25 16:25:27 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-06-25 16:25:27 ----A---- C:\Windows\system32\msobjs.dll
2016-06-25 16:25:27 ----A---- C:\Windows\system32\msimsg.dll
2016-06-19 18:11:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-06-19 18:11:25 ----A---- C:\Windows\system32\tzres.dll
2016-06-19 18:11:21 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\srv.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\drivers\cng.sys
2016-06-19 18:11:21 ----A---- C:\Windows\system32\bcryptprimitives.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\invagent.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\generaltel.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\devinv.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-06-19 18:11:15 ----A---- C:\Windows\system32\centel.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\appraiser.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\aeinv.dll
2016-06-19 18:11:15 ----A---- C:\Windows\system32\acmigration.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-06-19 18:11:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\lpk.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\fontsub.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\dciman32.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\atmlib.dll
2016-06-19 18:11:10 ----A---- C:\Windows\system32\atmfd.dll
2016-06-19 18:11:05 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2016-06-19 18:11:05 ----A---- C:\Windows\system32\StructuredQuery.dll
2016-06-19 18:11:01 ----A---- C:\Windows\system32\win32k.sys
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2016-06-19 18:10:59 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\ws2_32.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\winhttp.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\netbtugc.exe
2016-06-19 18:10:59 ----A---- C:\Windows\system32\mswsock.dll
2016-06-19 18:10:59 ----A---- C:\Windows\system32\drivers\netbt.sys
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\polstore.dll
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2016-06-19 18:10:58 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\winipsec.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\polstore.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\IPSECSVC.DLL
2016-06-19 18:10:58 ----A---- C:\Windows\system32\gpsvc.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\gpapi.dll
2016-06-19 18:10:58 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2016-06-19 18:10:56 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-06-19 18:10:56 ----A---- C:\Windows\system32\gdi32.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-06-19 18:10:55 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-06-19 18:10:55 ----A---- C:\Windows\system32\iernonce.dll
2016-06-19 18:10:55 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-06-19 18:10:55 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-06-19 18:10:54 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-06-19 18:10:54 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-19 18:10:54 ----A---- C:\Windows\system32\inseng.dll
2016-06-19 18:10:54 ----A---- C:\Windows\system32\ie4uinit.exe
2016-06-19 18:10:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-06-19 18:10:53 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-06-19 18:10:53 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-06-19 18:10:52 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\urlmon.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\occache.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-19 18:10:52 ----A---- C:\Windows\system32\msfeeds.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\iedkcs32.dll
2016-06-19 18:10:52 ----A---- C:\Windows\system32\dxtrans.dll
2016-06-19 18:10:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-06-19 18:10:51 ----A---- C:\Windows\system32\iesetup.dll
2016-06-19 18:10:51 ----A---- C:\Windows\system32\ieapfltr.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-06-19 18:10:50 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-06-19 18:10:50 ----A---- C:\Windows\system32\vbscript.dll
2016-06-19 18:10:50 ----A---- C:\Windows\system32\iertutil.dll
2016-06-19 18:10:49 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\jsproxy.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\ieui.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\ieframe.dll
2016-06-19 18:10:49 ----A---- C:\Windows\system32\dxtmsft.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\webcheck.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\mshtmled.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\jscript.dll
2016-06-19 18:10:48 ----A---- C:\Windows\system32\ieUnatt.exe
2016-06-19 18:10:47 ----A---- C:\Windows\system32\wininet.dll
2016-06-19 18:10:47 ----A---- C:\Windows\system32\jscript9diag.dll
2016-06-19 18:10:47 ----A---- C:\Windows\system32\jscript9.dll
2016-06-19 18:10:46 ----A---- C:\Windows\system32\msrating.dll
2016-06-19 18:10:46 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-06-19 18:10:46 ----A---- C:\Windows\system32\mshtml.dll

======List of files/folders modified in the last 1 month======

2016-06-30 21:03:57 ----D---- C:\Windows\Temp
2016-06-30 21:03:52 ----A---- C:\Windows\SYSWOW64\log.txt
2016-06-30 21:01:47 ----D---- C:\Windows
2016-06-30 21:01:27 ----D---- C:\Windows\system32\config
2016-06-30 21:01:10 ----D---- C:\Windows\Tasks
2016-06-30 20:43:56 ----D---- C:\Windows\System32
2016-06-30 20:43:56 ----D---- C:\Windows\inf
2016-06-30 20:43:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-06-28 21:05:29 ----RD---- C:\Program Files
2016-06-28 18:45:18 ----SHD---- C:\System Volume Information
2016-06-27 22:20:47 ----D---- C:\Users\Admin\AppData\Roaming\vlc
2016-06-26 17:10:57 ----D---- C:\Windows\system32\NDF
2016-06-26 17:01:32 ----D---- C:\Users\Admin\AppData\Roaming\hpqLog
2016-06-26 16:54:04 ----D---- C:\Windows\system32\catroot2
2016-06-25 16:41:00 ----D---- C:\Windows\winsxs
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\sl-SI
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\sk-SK
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\ro-RO
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\lv-LV
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\lt-LT
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\hr-HR
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\et-EE
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\en-US
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-06-25 16:39:31 ----D---- C:\Windows\SYSWOW64\bg-BG
2016-06-25 16:39:31 ----D---- C:\Windows\SysWOW64
2016-06-25 16:39:31 ----D---- C:\Windows\system32\sl-SI
2016-06-25 16:39:31 ----D---- C:\Windows\system32\hr-HR
2016-06-25 16:39:31 ----D---- C:\Windows\system32\drivers
2016-06-25 16:39:31 ----D---- C:\Windows\system32\bg-BG
2016-06-25 16:39:30 ----D---- C:\Windows\system32\sk-SK
2016-06-25 16:39:30 ----D---- C:\Windows\system32\ro-RO
2016-06-25 16:39:30 ----D---- C:\Windows\system32\lv-LV
2016-06-25 16:39:30 ----D---- C:\Windows\system32\lt-LT
2016-06-25 16:39:30 ----D---- C:\Windows\system32\et-EE
2016-06-25 16:39:30 ----D---- C:\Windows\system32\en-US
2016-06-25 16:39:30 ----D---- C:\Windows\system32\cs-CZ
2016-06-25 16:39:30 ----D---- C:\Windows\system32\Boot
2016-06-25 16:39:30 ----D---- C:\Windows\AppPatch
2016-06-25 16:15:27 ----D---- C:\Windows\debug
2016-06-20 09:32:02 ----D---- C:\Windows\system32\wbem
2016-06-20 09:32:02 ----D---- C:\Windows\system32\appraiser
2016-06-20 09:32:01 ----D---- C:\Program Files\Internet Explorer
2016-06-20 09:32:01 ----D---- C:\Program Files (x86)\Internet Explorer
2016-06-19 18:46:44 ----D---- C:\Windows\system32\MRT
2016-06-19 18:45:10 ----A---- C:\Windows\system32\MRT.exe
2016-06-13 19:31:06 ----N---- C:\Windows\system32\MpSigStub.exe
2016-06-02 12:25:48 ----SHD---- C:\Windows\Installer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-19 84800]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-13 439320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-19 264552]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-11-20 186784]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-19 198096]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-19 53384]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-11-20 142976]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-10-14 10496000]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-10-14 326656]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-01-06 36000]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-06-20 3678720]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-01-06 298144]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-01-06 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-01-06 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-01-06 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-01-06 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-01-06 279200]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2010-12-02 25912]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-08-31 12306848]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2011-01-31 174168]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2014-12-10 797400]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2015-07-16 2621128]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-09-08 535040]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-06-24 1446960]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2011-01-06 51872]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-10-14 204288]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-01-06 138400]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-01-06 53920]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-06-25 2520928]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2011-01-26 131128]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [2011-01-28 281656]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-26 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-01-17 326168]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2011-01-18 113264]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-09-08 305152]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-01-25 791608]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-31 144200]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-05-20 114688]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-12-31 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

[Rudy]

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

[tmczech]

Po několika denním testování to vypadá, že se vše vrátilo do normálu.

[Rudy]

Tak to jsem rád.

[tmczech]

Vytížení CPU tedy způsoboval GoogleUpdate? Bylo z logů poznat co tento problém způsobilo?

[Rudy]

To, co jsme mazali, je plánovač updatů. Pravděpodobně to byl on.

[tmczech]

Díky moc za pomoc

[Rudy]

Rádo se stalo!