Zahlcení sítě

Zpráva

Cris · #1 Příspěvek od **Cris** » 11 lis 2016 22:40

Dobrý večer, nevím si rady a ocenil bych vaši pomoc.
Na úplně nový PC jsem nainstaloval W10 Home. Všechno se zdálo být v pořádku, ale při připojení počítače do sítě se síť absolutně zahltí a to i jiných zařízeních v síti. Po vypnutí PC nebo odpojení síťového kabelu se chod sítě ihned obnoví. Ovladače základní desky jsem aktualizoval. Přikládám log z hijacku. Budu neskutečně rád za jakékoliv rady či tipy. Děkuji!

Logfile of random's system information tool 1.14 (written by random/random)
Run by Tom at 2016-11-11 22:53:21
Microsoft Windows 10 Home
System drive C: has 88 GB (77%) free of 114 GB
Total RAM: 16331 MB (84% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:53:24, on 11.11.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
C:\Program Files (x86)\WTFast\WTFast.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Program Files (x86)\MSI\Live Update\Live Update.exe
C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2svc32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\fondue.exe
E:\LOL\RADS\system\rads_user_kernel.exe
E:\LOL\RADS\projects\lol_launcher\releases\0.0.1.30\deploy\LoLLauncher.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Tom_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [WTFast Tray] "C:\Program Files (x86)\WTFast\WTFast.exe" trayonly
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_F6A43803F41C0EE8AA9068339E55A010] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI Live Update Service (MSI_LiveUpdate_Service) - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Wireless Controller Service - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Small Business Advantage Service (SbaService) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9830 bytes

======Enumerating Processes======

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\dwm.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-514cc002-8b20-4e47-a9da-68a745f1e982 -SystemEventPortName:HostProcess-63556ba2-15c4-4292-969e-2bba4d024666 -IoCancelEventPortName:HostProcess-936469aa-abd7-4607-9ea3-390db8fb8326 -NonStateChangingEventPortName:HostProcess-8430fe89-3181-4291-b558-2478189201e8 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:9b63c9b7-de54-4da4-9f3d-7bb5f5b737da -DeviceGroupId:WpdFsGroup
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe"
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem"
C:\Windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe"
C:\Windows\system32\dashost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -l 3 -c
C:\Windows\system32\sihost.exe
C:\Windows\system32\taskhostw.exe
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 4DE06145-A2EC-EF9E-CB0E-65025B2AF2D4 -Reinvoke
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe" /noUI
"C:\Program Files (x86)\WTFast\WTFast.exe" trayonly
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2984.0.1625412980\2095009703" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,22,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x1c02 --gpu-driver-vendor=NVIDIA --gpu-driver-version=21.21.13.7570 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.1.1007822585\950673757" --font-cache-shared-handle=1804 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.2.1869382514\2005082365" --font-cache-shared-handle=1944 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.3.2085228300\868315037" --font-cache-shared-handle=2100 /prefetch:673131151
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe"
"C:\Program Files (x86)\MSI\Live Update\Live Update.exe" /REMINDER
C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2svc32.exe
"C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2svc64.exe" /start all
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
"C:\Windows\system32\cmd.exe"
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=*AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.7.1168703184\1583518294" --font-cache-shared-handle=3660 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=*AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.8.1789707784\1888436211" --font-cache-shared-handle=5488 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=*AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.14.1529906205\687744111" --font-cache-shared-handle=7440 /prefetch:673131151
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe -Embedding
C:\Windows\SysWOW64\fondue.exe
C:\Windows\system32\FonDUE.EXE
"C:\Windows\system32\OptionalFeatures.EXE" /enable-feature:NetFx3 /caller-name:mscoreei.dll
C:\Windows\system32\fontdrvhost.exe
E:\LOL\RADS\system\rads_user_kernel.exe
C:\Windows\system32\PING.EXE
E:\LOL\RADS\projects\lol_launcher\releases\0.0.1.30\deploy\LoLLauncher.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials=*AffiliationBasedMatching/EnabledThroughFieldTrial/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*DomRel-Enable/enable/EnforceCTForProblematicRoots/disabled/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*IntelligentSessionRestore/Enabled2/NewVideoRendererTrial/Enabled/PasswordBranding/Control/*PasswordGeneration/Disabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_57/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/group_01/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --use-image-texture-target=3553 --channel="2984.27.783492314\543594634" --font-cache-shared-handle=6560 /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 624 628 636 8192 632
"C:\Users\Tom\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\Intel PTT EK Recertification - "C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe"
C:\Windows\system32\tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 - "C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe" --automatic
C:\Windows\system32\tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon - "C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe" --automatic
C:\Windows\system32\tasks\Nahimic2Svc32Run - "C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7)
C:\Windows\system32\tasks\Nahimic2Svc64Run - "C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7)
C:\Windows\system32\tasks\Nahimic2UILauncherRun - "C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7)
C:\Windows\system32\tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe
C:\Windows\system32\tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
C:\Windows\system32\tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe --logon
C:\Windows\system32\tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
C:\Windows\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - %ProgramFiles%\Windows Defender\MpCmdRun.exe Scan -ScheduleJob
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - %ProgramFiles%\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\Windows\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\SpaceMan.exe /Repair
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\Windows\system32\tasks\Microsoft\Windows\DiskFootprint\StorageSense - %windir%\system32\rundll32.exe %windir%\system32\StorageUsage.dll,GetStorageUsageInfo
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Intel(R) Small Business Advantage\Notifier - "C:\Program Files\Intel\Intel(R) Small Business Advantage\UI\SBA_Notifier.exe"

=========Google Chrome=========

C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.12.4
Extension cmedhionkhpnakcndndgjdbohmhepckk 1 Adblock na Youtube™ 4.1.0
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Vyhledávání Google 0.0.0.19
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.5.0
Extension hldngpjilggobfjfjhodmohobamhbdhh 1 Profile Views: Save Who Viewed My LinkedIn 0.1.7
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.22
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension mihcahmgecmbnbcchbopgniflfhgnkff 1 Kontrola e-mailu Google 4.4.0
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google+ Hangouts 1.0
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Homepage:
default_search_provider.search_url:
C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-04-29 8804608]
"Nahimic2UILauncher"=C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [2016-04-22 691560]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-10-25 1852352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-11-12 382144]
"WTFast Tray"=C:\Program Files (x86)\WTFast\WTFast.exe [2016-02-23 7381000]
"GoogleChromeAutoLaunch_F6A43803F41C0EE8AA9068339E55A010"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-07-23 813896]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2016-03-17 1027024]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\Live Update.exe [2016-11-11 11344848]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2016-08-30 136992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-11-12 02:17:28 ----D---- C:\Program Files\Killer Networking
2016-11-12 02:17:15 ----D---- C:\ProgramData\Downloaded Installations
2016-11-12 02:17:05 ----D---- C:\Program Files\Intel
2016-11-12 02:17:02 ----D---- C:\ProgramData\Package Cache
2016-11-12 02:16:43 ----D---- C:\MSI
2016-11-12 02:15:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-11-12 02:13:57 ----D---- C:\ProgramData\Microsoft OneDrive
2016-11-12 02:12:43 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2016-11-12 02:12:35 ----D---- C:\Users\Tom\AppData\Roaming\Adobe
2016-11-12 02:12:27 ----SD---- C:\Users\Tom\AppData\Roaming\Microsoft
2016-11-12 02:11:43 ----D---- C:\Windows\SoftwareDistribution
2016-11-12 02:11:43 ----D---- C:\ProgramData\USOShared
2016-11-12 02:10:51 ----HD---- C:\Program Files\Uninstall Information
2016-11-12 02:10:41 ----SHD---- C:\ProgramData\Šablony
2016-11-12 02:10:41 ----SHD---- C:\ProgramData\Plocha
2016-11-12 02:10:41 ----SHD---- C:\ProgramData\Nabídka Start
2016-11-12 02:10:41 ----SHD---- C:\ProgramData\Dokumenty
2016-11-12 02:10:41 ----SHD---- C:\ProgramData\Data aplikací
2016-11-12 02:10:41 ----SHD---- C:\Documents and Settings
2016-11-12 02:10:34 ----ASH---- C:\hiberfil.sys
2016-11-12 02:10:09 ----SHD---- C:\Recovery
2016-11-12 02:09:52 ----D---- C:\Windows\Prefetch
2016-11-12 02:09:51 ----AS---- C:\Windows\bootstat.dat
2016-11-12 02:09:43 ----SD---- C:\Windows\system32\Microsoft
2016-11-12 02:09:42 ----A---- C:\Windows\system32\FNTCACHE.DAT
2016-11-12 02:09:40 ----SHD---- C:\System Volume Information
2016-11-12 02:09:40 ----ASH---- C:\swapfile.sys
2016-11-12 02:09:40 ----ASH---- C:\pagefile.sys
2016-11-12 02:09:08 ----D---- C:\Windows\Panther
2016-11-11 22:53:21 ----D---- C:\rsit
2016-11-11 22:53:21 ----D---- C:\Program Files\trend micro
2016-11-11 22:53:19 ----D---- C:\Windows\SYSWOW64\XPSViewer
2016-11-11 22:53:17 ----D---- C:\Program Files\Reference Assemblies
2016-11-11 22:53:17 ----D---- C:\Program Files\MSBuild
2016-11-11 22:53:17 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-11-11 22:53:17 ----D---- C:\Program Files (x86)\MSBuild
2016-11-11 22:52:59 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2016-11-11 22:52:59 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2016-11-11 22:52:59 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-11-11 22:52:58 ----A---- C:\Windows\system32\TsWpfWrp.exe
2016-11-11 22:52:58 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2016-11-11 22:52:58 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-11-11 22:45:43 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2016-11-11 22:45:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2016-11-11 22:45:43 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2016-11-11 22:45:43 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2016-11-11 22:45:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2016-11-11 22:44:54 ----D---- C:\Users\Tom\AppData\Roaming\Riot Games
2016-11-11 21:48:55 ----A---- C:\Windows\system32\d3dx11_43.dll
2016-11-11 21:48:16 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-11-11 21:48:13 ----D---- C:\Program Files (x86)\VulkanRT
2016-11-11 21:48:13 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2016-11-11 21:48:13 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2016-11-11 21:48:13 ----A---- C:\Windows\system32\vulkaninfo.exe
2016-11-11 21:48:13 ----A---- C:\Windows\system32\vulkan-1.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nvsvcr.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nvsvc64.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nvshext.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nvmctray.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nvcpl.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-11-11 21:48:08 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-11-11 21:47:50 ----D---- C:\ProgramData\NVIDIA
2016-11-11 21:47:50 ----A---- C:\Windows\NvContainerRecovery.bat
2016-11-11 21:47:33 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2016-11-11 21:47:33 ----A---- C:\Windows\system32\OpenCL.dll
2016-11-11 21:47:27 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2016-11-11 21:46:19 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvEncMFThevc.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvDecMFTMjpeg.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-11-11 21:46:18 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvopencl.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvoglv64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvmcumd.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvinitx.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\NvIFR64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvhdap64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\NvFBC64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvEncMFThevc.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvdispgenco6437570.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvdispco6437570.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvDecMFTMjpeg.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvcuvid.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvcuda.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvcompiler.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvaudcap64v.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\nvapi64.dll
2016-11-11 21:46:18 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-11-11 21:46:18 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2016-11-11 19:28:12 ----D---- C:\Windows\SYSWOW64\LiveUpdate
2016-11-11 19:28:12 ----A---- C:\Windows\SYSWOW64\LiveUpdate 6.1 ReleaseNote.txt
2016-11-11 19:27:54 ----D---- C:\ProgramData\Nahimic22.2.6
2016-11-11 19:25:03 ----A---- C:\Windows\system32\drivers\WtfEngineDrv.sys
2016-11-11 19:24:57 ----AD---- C:\Program Files (x86)\WTFast
2016-11-11 19:24:36 ----D---- C:\Users\Tom\AppData\Roaming\Skype
2016-11-11 19:24:24 ----AD---- C:\Program Files\MSI Kombustor 3
2016-11-11 19:24:21 ----A---- C:\Windows\acpimof.dll
2016-11-11 19:24:04 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2016-11-11 19:24:04 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2016-11-11 19:24:04 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2016-11-11 19:24:04 ----A---- C:\Windows\system32\D3DX9_43.dll
2016-11-11 19:24:04 ----A---- C:\Windows\system32\d3dx10_43.dll
2016-11-11 19:24:02 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2016-11-11 19:24:02 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2016-11-11 19:24:02 ----A---- C:\Windows\system32\nvspcap64.dll
2016-11-11 19:24:02 ----A---- C:\Windows\system32\nvspbridge64.dll
2016-11-11 19:24:02 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-11-11 19:23:55 ----D---- C:\ProgramData\NVIDIA Corporation
2016-11-11 19:23:50 ----D---- C:\Program Files\NVIDIA Corporation
2016-11-11 19:23:17 ----D---- C:\NVIDIA
2016-11-11 19:20:43 ----D---- C:\Program Files (x86)\MSI
2016-11-11 19:20:16 ----D---- C:\Program Files (x86)\Google
2016-11-11 19:19:40 ----D---- C:\ProgramData\Intel(R) Update Manager
2016-11-11 19:19:21 ----D---- C:\Intel
2016-11-11 19:18:12 ----D---- C:\Program Files (x86)\Intel
2016-11-11 19:17:29 ----D---- C:\ProgramData\Intel
2016-11-11 19:17:20 ----D---- C:\Program Files\Nahimic
2016-11-11 19:16:44 ----D---- C:\Windows\system32\DAX2
2016-11-11 19:16:40 ----D---- C:\Windows\SYSWOW64\RTCOM
2016-11-11 19:16:40 ----D---- C:\Program Files\Realtek
2016-11-11 19:16:24 ----A---- C:\Windows\system32\tossaemaxapo64.dll
2016-11-11 19:16:24 ----A---- C:\Windows\system32\tossaeapo64.dll
2016-11-11 19:16:23 ----A---- C:\Windows\system32\toseaeapo64.dll
2016-11-11 19:16:23 ----A---- C:\Windows\system32\tosasfapo64.dll
2016-11-11 19:16:23 ----A---- C:\Windows\system32\tosade.dll
2016-11-11 19:16:22 ----A---- C:\Windows\system32\tepeqapo64.dll
2016-11-11 19:16:22 ----A---- C:\Windows\system32\tadefxapo264.dll
2016-11-11 19:16:22 ----A---- C:\Windows\system32\tadefxapo.dll
2016-11-11 19:16:20 ----A---- C:\Windows\system32\sltech64.dll
2016-11-11 19:16:19 ----A---- C:\Windows\system32\slprp64.dll
2016-11-11 19:16:17 ----A---- C:\Windows\system32\slcnt64.dll
2016-11-11 19:16:16 ----A---- C:\Windows\system32\sl3apo64.dll
2016-11-11 19:16:15 ----A---- C:\Windows\system32\drivers\rtvienna.dat
2016-11-11 19:16:15 ----A---- C:\Windows\system32\drivers\rtkSSTsetting.dat
2016-11-11 19:16:13 ----A---- C:\Windows\system32\audioLibVc.dll
2016-11-11 19:16:12 ----A---- C:\Windows\system32\YamahaAE3.dll
2016-11-11 19:16:11 ----A---- C:\Windows\system32\YamahaAE2.dll
2016-11-11 19:16:11 ----A---- C:\Windows\system32\YamahaAE.dll
2016-11-11 19:16:10 ----A---- C:\Windows\system32\WavesGUILib64.dll
2016-11-11 19:16:09 ----A---- C:\Windows\system32\SRSWOW64.dll
2016-11-11 19:16:09 ----A---- C:\Windows\system32\SRSTSX64.dll
2016-11-11 19:16:08 ----A---- C:\Windows\system32\SRSTSH64.dll
2016-11-11 19:16:08 ----A---- C:\Windows\system32\SRSHP64.dll
2016-11-11 19:16:08 ----A---- C:\Windows\system32\SRRPTR64.dll
2016-11-11 19:16:07 ----A---- C:\Windows\SYSWOW64\SRCOM.dll
2016-11-11 19:16:07 ----A---- C:\Windows\system32\SRCOM64.dll
2016-11-11 19:16:07 ----A---- C:\Windows\system32\SRCOM.dll
2016-11-11 19:16:07 ----A---- C:\Windows\system32\SRAPO64.dll
2016-11-11 19:16:06 ----A---- C:\Windows\system32\SFSS_APO.dll
2016-11-11 19:16:06 ----A---- C:\Windows\system32\SFNHK64.dll
2016-11-11 19:16:05 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2016-11-11 19:16:05 ----A---- C:\Windows\system32\SFCOM64.dll
2016-11-11 19:16:05 ----A---- C:\Windows\system32\SFAPO64.dll
2016-11-11 19:16:05 ----A---- C:\Windows\system32\SEHDRA64.dll
2016-11-11 19:16:04 ----A---- C:\Windows\SYSWOW64\SECOMN32.DLL
2016-11-11 19:16:04 ----A---- C:\Windows\system32\SECOMN64.dll
2016-11-11 19:16:03 ----A---- C:\Windows\system32\SEAPO64.dll
2016-11-11 19:16:02 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2016-11-11 19:16:00 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2016-11-11 19:16:00 ----A---- C:\Windows\system32\RtkCfg64.dll
2016-11-11 19:15:59 ----A---- C:\Windows\system32\RtkApi64.dll
2016-11-11 19:15:58 ----A---- C:\Windows\system32\RtPgEx64.dll
2016-11-11 19:15:57 ----A---- C:\Windows\system32\RtDataProc64.dll
2016-11-11 19:15:57 ----A---- C:\Windows\system32\RTCOM64.dll
2016-11-11 19:15:56 ----A---- C:\Windows\system32\RltkAPO64.dll
2016-11-11 19:15:55 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2016-11-11 19:15:53 ----A---- C:\Windows\system32\RTEEP64A.dll
2016-11-11 19:15:53 ----A---- C:\Windows\system32\RTEEL64A.dll
2016-11-11 19:15:53 ----A---- C:\Windows\system32\RTEEG64A.dll
2016-11-11 19:15:53 ----A---- C:\Windows\system32\RTEED64A.dll
2016-11-11 19:15:53 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2016-11-11 19:15:51 ----A---- C:\Windows\system32\RP3DHT64.dll
2016-11-11 19:15:51 ----A---- C:\Windows\system32\RP3DAA64.dll
2016-11-11 19:15:51 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2016-11-11 19:15:50 ----A---- C:\Windows\system32\RCoInstII64.dll
2016-11-11 19:15:46 ----A---- C:\Windows\system32\RCoRes64.dat
2016-11-11 19:15:43 ----A---- C:\Windows\system32\R4EEP64A.dll
2016-11-11 19:15:43 ----A---- C:\Windows\system32\R4EEL64A.dll
2016-11-11 19:15:43 ----A---- C:\Windows\system32\R4EEG64A.dll
2016-11-11 19:15:43 ----A---- C:\Windows\system32\R4EED64A.dll
2016-11-11 19:15:42 ----A---- C:\Windows\system32\R4EEA64A.dll
2016-11-11 19:15:42 ----A---- C:\Windows\system32\NahimicAPONSControl.dll
2016-11-11 19:15:41 ----A---- C:\Windows\system32\NAHIMICV3apo.dll
2016-11-11 19:15:40 ----A---- C:\Windows\system32\NAHIMICV2apo.dll
2016-11-11 19:15:39 ----A---- C:\Windows\system32\NAHIMICAPOlfx.dll
2016-11-11 19:15:39 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-11-11 19:15:37 ----A---- C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-11-11 19:15:35 ----A---- C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-11-11 19:15:32 ----A---- C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-11-11 19:15:32 ----A---- C:\Windows\system32\MaxxSpeechAPO64.dll
2016-11-11 19:15:29 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll
2016-11-11 19:15:27 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2016-11-11 19:15:26 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-11-11 19:15:26 ----A---- C:\Windows\system32\MaxxAudioAPO7064.dll
2016-11-11 19:15:24 ----A---- C:\Windows\system32\MaxxAudioAPO6064.dll
2016-11-11 19:15:23 ----A---- C:\Windows\system32\MaxxAudioAPO5064.dll
2016-11-11 19:15:22 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll
2016-11-11 19:15:22 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2016-11-11 19:15:21 ----A---- C:\Windows\system32\MISS_APO.dll
2016-11-11 19:15:21 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2016-11-11 19:15:16 ----A---- C:\Windows\system32\KAAPORT64.dll
2016-11-11 19:15:16 ----A---- C:\Windows\system32\IntelSstCApoPropPage.dll
2016-11-11 19:15:15 ----A---- C:\Windows\system32\IntelSSTAPO.dll
2016-11-11 19:15:14 ----A---- C:\Windows\system32\ICEsoundAPO64.dll
2016-11-11 19:15:14 ----A---- C:\Windows\system32\HiFiDAX2API.dll
2016-11-11 19:15:13 ----A---- C:\Windows\system32\HMUI.dll
2016-11-11 19:15:13 ----A---- C:\Windows\system32\HMLimiter.dll
2016-11-11 19:15:13 ----A---- C:\Windows\system32\HMHVS.dll
2016-11-11 19:15:13 ----A---- C:\Windows\system32\HMEQ_Voice.dll
2016-11-11 19:15:13 ----A---- C:\Windows\system32\HarmanAudioInterface.dll
2016-11-11 19:15:12 ----A---- C:\Windows\system32\HMEQ.dll
2016-11-11 19:15:12 ----A---- C:\Windows\system32\HMClariFi.dll
2016-11-11 19:15:12 ----A---- C:\Windows\system32\HMAPO.dll
2016-11-11 19:15:02 ----A---- C:\Windows\system32\FMAPO64.dll
2016-11-11 19:15:00 ----A---- C:\Windows\system32\DolbyDAX2APOv211.dll
2016-11-11 19:14:59 ----A---- C:\Windows\system32\DolbyDAX2APOv201.dll
2016-11-11 19:14:59 ----A---- C:\Windows\system32\DolbyDAX2APOProp.dll
2016-11-11 19:14:58 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-11-11 19:14:58 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2016-11-11 19:14:57 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2016-11-11 19:14:57 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2016-11-11 19:14:56 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2016-11-11 19:14:56 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-11-11 19:14:56 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-11-11 19:14:55 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2016-11-11 19:14:55 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2016-11-11 19:14:55 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2016-11-11 19:14:55 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-11-11 19:14:54 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2016-11-11 19:14:54 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2016-11-11 19:14:54 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2016-11-11 19:14:53 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-11-11 19:14:52 ----A---- C:\Windows\system32\DDPP64AF3.dll
2016-11-11 19:14:52 ----A---- C:\Windows\system32\DDPP64A.dll
2016-11-11 19:14:51 ----A---- C:\Windows\system32\DDPO64AF3.dll
2016-11-11 19:14:51 ----A---- C:\Windows\system32\DDPO64A.dll
2016-11-11 19:14:50 ----A---- C:\Windows\system32\DDPD64AF3.dll
2016-11-11 19:14:50 ----A---- C:\Windows\system32\DDPD64A.dll
2016-11-11 19:14:50 ----A---- C:\Windows\system32\DDPA64F3.dll
2016-11-11 19:14:49 ----A---- C:\Windows\system32\DDPA64.dll
2016-11-11 19:14:48 ----A---- C:\Windows\system32\CX64APO.dll
2016-11-11 19:14:48 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-11-11 19:14:46 ----A---- C:\Windows\system32\AcpiServiceVnA64.dll
2016-11-11 19:14:45 ----A---- C:\Windows\system32\AERTAR64.dll
2016-11-11 19:14:45 ----A---- C:\Windows\system32\AERTAC64.dll
2016-11-11 19:14:44 ----D---- C:\Program Files (x86)\Realtek
2016-11-11 19:14:43 ----HD---- C:\Program Files (x86)\Temp
2016-11-11 19:14:41 ----R---- C:\Windows\RtlExUpd.dll
2016-11-11 19:14:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of files/folders modified in the last 1 month======

2016-11-12 02:13:46 ----SHD---- C:\$Recycle.Bin
2016-11-12 02:12:44 ----D---- C:\Windows\system32\FxsTmp
2016-11-12 02:12:42 ----D---- C:\Windows\system32\spool
2016-11-12 02:12:38 ----RD---- C:\Windows\PurchaseDialog
2016-11-12 02:12:38 ----RD---- C:\Windows\PrintDialog
2016-11-12 02:12:38 ----RD---- C:\Windows\MiracastView
2016-11-12 02:12:36 ----RD---- C:\Windows\ImmersiveControlPanel
2016-11-12 02:11:43 ----D---- C:\ProgramData\USOPrivate
2016-11-12 02:10:41 ----D---- C:\Program Files\Windows NT
2016-11-12 02:10:09 ----D---- C:\Windows\system32\Sysprep
2016-11-12 02:10:09 ----D---- C:\Windows\system32\Recovery
2016-11-12 02:09:44 ----D---- C:\Windows\ServiceProfiles
2016-11-12 02:09:43 ----D---- C:\Windows\debug
2016-11-11 22:53:25 ----D---- C:\Windows\Temp
2016-11-11 22:53:21 ----RD---- C:\Program Files
2016-11-11 22:53:20 ----D---- C:\Windows\WinSxS
2016-11-11 22:53:19 ----D---- C:\Windows\SYSWOW64\MUI
2016-11-11 22:53:19 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-11-11 22:53:19 ----D---- C:\Windows\SysWOW64
2016-11-11 22:53:19 ----D---- C:\Windows\system32\MUI
2016-11-11 22:53:19 ----D---- C:\Windows\system32\cs-CZ
2016-11-11 22:53:19 ----D---- C:\Windows\System32
2016-11-11 22:53:18 ----RSD---- C:\Windows\Fonts
2016-11-11 22:53:18 ----D---- C:\Windows\INF
2016-11-11 22:53:17 ----RD---- C:\Program Files (x86)
2016-11-11 22:53:06 ----D---- C:\Windows\system32\catroot2
2016-11-11 22:45:44 ----D---- C:\Windows\CbsTemp
2016-11-11 22:45:40 ----SHD---- C:\Windows\Installer
2016-11-11 22:45:40 ----D---- C:\Windows\Tasks
2016-11-11 22:29:55 ----D---- C:\Windows\system32\DriverStore
2016-11-11 22:28:21 ----D---- C:\Windows\AppReadiness
2016-11-11 22:27:40 ----HD---- C:\Program Files\WindowsApps
2016-11-11 22:21:39 ----D---- C:\Windows\system32\Tasks
2016-11-11 22:18:21 ----D---- C:\Windows\system32\config
2016-11-11 22:15:01 ----D---- C:\Windows\system32\CatRoot
2016-11-11 22:14:16 ----D---- C:\Program Files (x86)\Common Files
2016-11-11 22:12:55 ----D---- C:\Windows\system32\drivers
2016-11-11 22:12:53 ----D---- C:\Windows\SYSWOW64\drivers
2016-11-11 21:53:24 ----D---- C:\Windows\system32\sru
2016-11-11 21:52:57 ----D---- C:\Windows\system32\WDI
2016-11-11 21:51:43 ----D---- C:\Windows
2016-11-11 21:48:08 ----D---- C:\Windows\Help
2016-11-11 21:47:50 ----HD---- C:\ProgramData
2016-11-11 21:44:19 ----SD---- C:\ProgramData\Microsoft
2016-11-11 21:44:16 ----D---- C:\Windows\system32\drivers\UMDF
2016-11-11 21:15:41 ----D---- C:\Windows\Microsoft.NET
2016-11-11 21:15:23 ----RD---- C:\Windows\assembly
2016-11-11 21:15:21 ----D---- C:\Windows\Logs
2016-11-11 20:07:35 ----D---- C:\Windows\system32\NDF
2016-11-11 19:24:53 ----D---- C:\Program Files\Common Files\microsoft shared
2016-11-11 19:21:59 ----RD---- C:\Windows\DevicesFlow
2016-11-11 19:21:31 ----RD---- C:\Users
2016-11-11 19:19:39 ----D---- C:\Windows\system32\wbem
2016-11-11 19:18:21 ----D---- C:\Windows\system32\CodeIntegrity

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 BfLwf;@oem5.inf,%BfLwf_Desc%;Killer Bandwidth Control; C:\Windows\system32\DRIVERS\bwcW10x64.sys [2016-01-22 144456]
R3 iaLPSS2_GPIO2;@oem7.inf,%iaLPSS2_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [2015-07-20 84264]
R3 iaLPSS2_I2C;iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [2015-07-20 185128]
R3 KillerEth;@oem4.inf,%RIVET.Service.DispName%;NDIS Miniport Driver for Killer e2400 PCI-E Ehternet Controller; C:\Windows\System32\drivers\e24w10x64.sys [2015-10-07 156744]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [2012-10-25 13368]
R3 NVHDA;@oem12.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-10-26 212936]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-10-26 14159928]
R3 nvvad_WaveExtensible;@oem14.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-10-25 46016]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys []
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-10-25 27584]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-08-30 177440]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-08-30 419616]
R2 MSI_LiveUpdate_Service;MSI Live Update Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2016-11-10 2236880]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2015-05-18 163280]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-10-25 456640]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2016-10-25 458176]
R2 NVIDIA Wireless Controller Service;NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [2016-10-25 1163712]
R2 OneSyncSvc_2a8bc;Hostitel synchronizace_2a8bc; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 SbaService;Intel(R) Small Business Advantage Service; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe [2015-10-14 26296]
R3 Intel(R) Security Assist;Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2016-03-18 335360]
R3 PimIndexMaintenanceSvc_2a8bc;Data kontaktů_2a8bc; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R3 UnistoreSvc_2a8bc;Úložiště uživatelských dat_2a8bc; C:\Windows\System32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R3 UserDataSvc_2a8bc;Přístup k uživatelským datům_2a8bc; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
S2 isaHelperSvc;Intel(R) Security Assist Helper; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [2016-03-18 8704]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-07-26 987432]
S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2015-06-04 58792]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-08-12 177376]
S3 MessagingService_2a8bc;Služba zasílání zpráv_2a8bc; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-10-25 456640]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 12 lis 2016 17:07

Zdravím!
Je to sice netypické, ale zkusíme PC vyčistit. Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Cris · #3 Příspěvek od **Cris** » 13 lis 2016 13:51

# AdwCleaner v6.030 - Log soubor vytvořen 13/11/2016 na 13:49:46
# Aktualizováno dne 19/10/2016 z Malwarebytes
# Databáze : 2016-11-13.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Tom - DESKTOP-NNJK7NF
# Beží od : C:\Users\Tom\Desktop\adwcleaner_6.030.exe
# Mod: Čištění
# Podpora : hxxps://www.malwarebytes.com/support

***** [ Služby ] *****

***** [ Adresáře ] *****

***** [ Soubory ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Zástupce ] *****

***** [ Plánovač úloh ] *****

***** [ Registry ] *****

***** [ Prohlížeče ] *****

[-] [C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:hattrick-organizer.en.softonic.com

*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [935 Bajtů] - [13/11/2016 13:49:46]
C:\AdwCleaner\AdwCleaner[S0].txt - [1455 Bajtů] - [13/11/2016 13:49:31]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1082 Bajtů] ##########

Cris · #4 Příspěvek od **Cris** » 13 lis 2016 14:00

Update stavu ještě před pročištěním adwcleanerem: síť po zapnutí počítače jede normálně třeba hodinu, poté je odezva 3000 ms a více nebo se sít zahltí úplně.. Po restartu počítače vše opět v pořádku.. Nevysledoval jsem žádnou pravidelnost ani spojitost s nějakou činností. :-/

#5 Příspěvek od **Rudy** » 13 lis 2016 17:57

3000ms je sakra hodně. Po restratu je ta odezva jaká? Ping dáváte na nějakou stránku v internetu, nebo na nějakou IP v síti? Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Cris · #6 Příspěvek od **Cris** » 13 lis 2016 19:46

Ping zkouším na webovou stránku www.seznam.cz... Běžně mám 53-57 ms.. Přikládám FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by Tom (administrator) on DESKTOP-NNJK7NF (13-11-2016 19:42:46)
Running from C:\Users\Tom\Desktop
Loaded Profiles: Tom (Available Profiles: Tom)
Platform: Windows 10 Home Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\Live Update.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(forum.viry.cz) C:\Users\Tom\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8804608 2016-04-29] (Realtek Semiconductor)
HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [691560 2016-04-22] ()
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1027024 2016-03-17] (MSI)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [11344848 2016-11-11] (Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1190688 2016-08-30] (Intel Corporation)
HKU\S-1-5-21-3220524927-1643978500-602845033-1001\...\Run: [WTFast Tray] => C:\Program Files (x86)\WTFast\WTFast.exe [7381000 2016-02-23] (AAA Internet Publishing, Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-10-12] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-10-12] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-10-12] (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{3cd5e290-ec0c-49de-91cf-ee953fcf6931}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================

FireFox:
========
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-12] (Google Inc.)

Chrome:
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default [2016-11-13]
CHR Extension: (Prezentace Google) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-11]
CHR Extension: (Dokumenty Google) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-11]
CHR Extension: (Disk Google) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-11]
CHR Extension: (YouTube) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-11]
CHR Extension: (Adblock Plus) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-11]
CHR Extension: (Adblock na Youtube™) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2016-11-11]
CHR Extension: (Vyhledávání Google) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-11-11]
CHR Extension: (Tabulky Google) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-12]
CHR Extension: (AdBlock) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-11]
CHR Extension: (Kontrola e-mailu Google) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2016-11-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-11]
CHR Extension: (Gmail) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-11]
CHR Extension: (Chrome Media Router) - C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-12]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [File not signed]
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [58792 2015-06-04] (Intel Corporation)
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-08-30] (Intel Corporation)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2236880 2016-11-10] (Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [163280 2015-05-18] (MSI)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation)
R2 SbaService; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe [26296 2015-10-14] (Intel Corporation)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [144456 2016-01-22] (Rivet Networks, LLC.)
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-07-20] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [185128 2015-07-20] (Intel Corporation)
R3 KillerEth; C:\Windows\System32\drivers\e24w10x64.sys [156744 2015-10-07] (Qualcomm Atheros, Inc.)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-10-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-10-25] (NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R2 WtfEngineDrv; C:\Windows\system32\DRIVERS\WtfEngineDrv.sys [27904 2016-02-01] (AAA Internet Publishing, Inc.)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-13 19:41 - 2016-11-13 19:42 - 00112640 _____ (forum.viry.cz) C:\Users\Tom\Desktop\FRSTLauncher.exe
2016-11-13 19:41 - 2016-11-13 19:41 - 00000000 ____D C:\Users\Tom\AppData\Local\MicrosoftEdge
2016-11-13 19:40 - 2016-11-13 19:42 - 00012640 _____ C:\Users\Tom\Desktop\FRST.txt
2016-11-13 19:39 - 2016-11-13 19:42 - 00000000 ____D C:\FRST
2016-11-13 19:39 - 2016-11-13 19:39 - 02411520 _____ (Farbar) C:\Users\Tom\Desktop\FRST64.exe
2016-11-13 16:18 - 2016-11-13 16:19 - 00000000 ____D C:\Windows\system32\MRT
2016-11-13 16:18 - 2016-11-13 16:18 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-13 13:48 - 2016-11-13 13:51 - 00000000 ____D C:\AdwCleaner
2016-11-13 13:48 - 2016-11-13 13:48 - 03910208 _____ C:\Users\Tom\Desktop\adwcleaner_6.030.exe
2016-11-12 12:18 - 2016-11-13 16:01 - 00000000 ____D C:\Users\Tom\AppData\Roaming\TS3Client
2016-11-12 12:18 - 2016-11-12 12:18 - 00001008 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2016-11-12 12:18 - 2016-11-12 12:18 - 00000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2016-11-12 12:18 - 2016-11-12 12:18 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-11-12 12:15 - 2016-11-12 12:18 - 32019840 _____ (TeamSpeak Systems GmbH) C:\Users\Tom\Downloads\TeamSpeak3-Client-win64-3.0.19.4.exe
2016-11-12 11:21 - 2016-10-28 02:22 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-11-12 11:08 - 2016-11-12 11:08 - 00000000 ____D C:\Users\Tom\AppData\Local\ElevatedDiagnostics
2016-11-12 08:31 - 2016-11-12 08:31 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Macromedia
2016-11-12 08:31 - 2016-11-12 08:31 - 00000000 ____D C:\Users\Tom\AppData\Roaming\LolClient
2016-11-12 07:59 - 2016-11-12 07:59 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2016-11-12 07:59 - 2016-11-12 07:59 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2016-11-12 02:17 - 2016-11-12 02:17 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-11-12 02:17 - 2016-11-12 02:17 - 00000000 ____D C:\Program Files\Killer Networking
2016-11-12 02:17 - 2016-11-11 22:14 - 00000000 ____D C:\Program Files\Intel
2016-11-12 02:17 - 2016-11-11 21:47 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-12 02:16 - 2016-11-11 19:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2016-11-12 02:16 - 2016-11-11 19:29 - 00000000 ____D C:\MSI
2016-11-12 02:15 - 2016-11-13 19:42 - 01771468 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-12 02:14 - 2016-11-12 02:14 - 00002352 _____ C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-11-12 02:14 - 2016-11-12 02:14 - 00000000 ___RD C:\Users\Tom\OneDrive
2016-11-12 02:13 - 2016-11-12 02:13 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-11-12 02:12 - 2016-11-12 11:27 - 00000000 ____D C:\Users\Tom
2016-11-12 02:12 - 2016-11-12 07:52 - 00000000 ____D C:\Users\Tom\AppData\Local\Packages
2016-11-12 02:12 - 2016-11-12 02:12 - 00000020 ___SH C:\Users\Tom\ntuser.ini
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Šablony
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Soubory cookie
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Poslední
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Okolní tiskárny
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Okolní síť
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Nabídka Start
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Dokumenty
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Documents\Obrázky
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Documents\Hudba
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Documents\Filmy
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\Data aplikací
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 _SHDL C:\Users\Tom\AppData\Local\Data aplikací
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Adobe
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 ____D C:\Users\Tom\AppData\Local\TileDataLayer
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 ____D C:\Users\Tom\AppData\Local\Publishers
2016-11-12 02:12 - 2016-11-12 02:12 - 00000000 ____D C:\Users\Tom\AppData\Local\ActiveSync
2016-11-12 02:12 - 2016-11-11 22:28 - 00000000 ____D C:\Users\Tom\AppData\Local\VirtualStore
2016-11-12 02:12 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-11-12 02:11 - 2016-11-12 02:11 - 00000000 ____D C:\ProgramData\USOShared
2016-11-12 02:10 - 2016-11-13 19:36 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Šablony
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Poslední
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Okolní síť
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Dokumenty
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\Data aplikací
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\ProgramData\Šablony
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\ProgramData\Plocha
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\ProgramData\Dokumenty
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\ProgramData\Data aplikací
2016-11-12 02:10 - 2016-11-12 02:10 - 00000000 _SHDL C:\Documents and Settings
2016-11-12 02:09 - 2016-11-12 02:10 - 00000000 ____D C:\Windows\Panther
2016-11-12 02:09 - 2016-11-12 02:09 - 00192920 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-11 23:37 - 2016-11-11 23:37 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-11-11 22:59 - 2016-11-11 22:59 - 00000000 ____D C:\ProgramData\Riot Games
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\rsit
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\Program Files\trend micro
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\Program Files\MSBuild
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-11-11 22:53 - 2016-11-11 22:53 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-11-11 22:52 - 2016-11-11 22:53 - 01323520 _____ C:\Users\Tom\Downloads\RSITx64.exe
2016-11-11 22:52 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2016-11-11 22:52 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-11-11 22:52 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-11-11 22:52 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2016-11-11 22:52 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-11-11 22:52 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-11-11 22:45 - 2016-11-11 22:45 - 00001287 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-11-11 22:45 - 2016-11-11 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-11-11 22:45 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-11-11 22:45 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-11-11 22:45 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-11-11 22:45 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-11-11 22:45 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-11-11 22:44 - 2016-11-11 22:45 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Riot Games
2016-11-11 22:41 - 2016-11-11 22:44 - 31336304 _____ (Riot Games) C:\Users\Tom\Downloads\LeagueofLegends_EUNE_Installer_2016_05_13.exe
2016-11-11 22:27 - 2016-11-11 22:27 - 00388608 _____ (Trend Micro Inc.) C:\Users\Tom\Downloads\hijackthis.exe
2016-11-11 22:13 - 2016-11-11 22:13 - 00000000 _____ C:\Windows\SysWOW64\wsmand.log.lock
2016-11-11 21:49 - 2016-11-11 21:49 - 00001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-11-11 21:49 - 2016-11-11 21:49 - 00000000 ____D C:\Users\Tom\AppData\Local\CEF
2016-11-11 21:48 - 2016-11-11 21:51 - 00000000 ____D C:\Users\Tom\AppData\Local\NVIDIA Corporation
2016-11-11 21:48 - 2016-11-11 21:48 - 00003998 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-11 21:48 - 2016-11-11 21:48 - 00003970 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-11 21:48 - 2016-11-11 21:48 - 00003934 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-11 21:48 - 2016-11-11 21:48 - 00003908 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-11 21:48 - 2016-11-11 21:48 - 00003746 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-11 21:48 - 2016-11-11 21:48 - 00003704 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-11 21:48 - 2016-11-11 21:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-11-11 21:48 - 2016-11-11 21:48 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-11-11 21:48 - 2016-10-25 21:17 - 06386232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-11-11 21:48 - 2016-10-25 21:17 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-11-11 21:48 - 2016-10-25 21:17 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-11-11 21:48 - 2016-10-25 21:17 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-11-11 21:48 - 2016-10-25 21:17 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-11-11 21:48 - 2016-10-25 21:17 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-11-11 21:48 - 2016-10-25 21:17 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-11-11 21:48 - 2016-10-25 21:00 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-11-11 21:48 - 2016-10-24 07:31 - 07507695 _____ C:\Windows\system32\nvcoproc.bin
2016-11-11 21:48 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-11-11 21:48 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-11-11 21:48 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-11-11 21:48 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-11-11 21:48 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-11-11 21:47 - 2016-11-13 19:36 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-11 21:47 - 2016-11-11 21:48 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-11-11 21:47 - 2016-10-25 22:40 - 00215608 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-11-11 21:47 - 2016-10-25 22:40 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-11-11 21:47 - 2016-10-25 20:12 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-11-11 21:46 - 2016-10-26 23:16 - 14159928 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-11-11 21:46 - 2016-10-26 02:09 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-11-11 21:46 - 2016-10-26 02:09 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-11-11 21:46 - 2016-10-26 02:09 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 40123840 _____ C:\Windows\system32\nvcompiler.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 35224632 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 34711096 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 28202040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 24365624 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 20718400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 17577728 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 14516216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 10912232 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 10782952 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 10332664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 09120512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 08913512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 08723968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 03927288 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 03468736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 02940352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 02574784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437570.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437570.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 01037248 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00975296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00943552 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00897080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00801560 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00642392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00617696 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00572584 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00470584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00327224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00172920 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00150784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-11-11 21:46 - 2016-10-25 22:40 - 00042296 _____ C:\Windows\system32\nvinfo.pb
2016-11-11 21:46 - 2016-10-25 22:40 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-11-11 21:46 - 2016-10-25 22:40 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-11-11 21:46 - 2016-10-25 21:19 - 00104384 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-11-11 21:46 - 2016-10-25 21:19 - 00094144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-11-11 21:46 - 2016-10-25 21:19 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-11-11 21:44 - 2016-11-11 21:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-11-11 20:35 - 2016-11-11 20:35 - 00026583 _____ C:\Users\Tom\Desktop\idc_debug_log.txt
2016-11-11 19:47 - 2016-11-11 19:47 - 00000017 _____ C:\Users\Tom\AppData\Local\resmon.resmoncfg
2016-11-11 19:29 - 2016-11-11 19:29 - 00001238 _____ C:\Users\Public\Desktop\MSI Live Update 6.lnk
2016-11-11 19:28 - 2016-11-10 16:22 - 00000000 ____D C:\Windows\SysWOW64\LiveUpdate
2016-11-11 19:28 - 2016-11-10 14:08 - 00013582 _____ C:\Windows\SysWOW64\LiveUpdate 6.1 ReleaseNote.txt
2016-11-11 19:27 - 2016-11-13 16:01 - 00000000 ____D C:\Users\Tom\AppData\Local\CrashDumps
2016-11-11 19:27 - 2016-11-11 19:27 - 00000000 ____D C:\ProgramData\Nahimic22.2.6
2016-11-11 19:26 - 2016-11-11 19:26 - 00000000 ____D C:\Users\Tom\AppData\Local\AAA_Internet_Publishing,_
2016-11-11 19:25 - 2016-11-11 19:25 - 00001048 _____ C:\Users\Public\Desktop\WTFast.lnk
2016-11-11 19:25 - 2016-11-11 19:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTFast
2016-11-11 19:25 - 2016-02-01 12:17 - 00027904 _____ (AAA Internet Publishing, Inc.) C:\Windows\system32\Drivers\WtfEngineDrv.sys
2016-11-11 19:24 - 2016-11-11 21:48 - 00000000 ____D C:\Users\Tom\AppData\Local\NVIDIA
2016-11-11 19:24 - 2016-11-11 19:25 - 00000000 ____D C:\Program Files (x86)\WTFast
2016-11-11 19:24 - 2016-11-11 19:24 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Skype
2016-11-11 19:24 - 2016-11-11 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor 3
2016-11-11 19:24 - 2016-11-11 19:24 - 00000000 ____D C:\Program Files\MSI Kombustor 3
2016-11-11 19:24 - 2016-10-25 21:19 - 01852352 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-11-11 19:24 - 2016-10-25 21:19 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-11-11 19:24 - 2016-10-25 21:19 - 01452480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-11-11 19:24 - 2016-10-25 21:19 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-11-11 19:24 - 2016-10-25 21:19 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-11-11 19:24 - 2014-04-30 16:23 - 00011248 _____ (Windows (R) Win 7 DDK provider) C:\Windows\acpimof.dll
2016-11-11 19:24 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-11-11 19:24 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-11-11 19:24 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-11-11 19:24 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-11-11 19:24 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-11-11 19:23 - 2016-11-11 21:48 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-11-11 19:23 - 2016-11-11 21:48 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-11-11 19:23 - 2016-11-11 21:45 - 00000000 ____D C:\NVIDIA
2016-11-11 19:22 - 2016-11-11 19:22 - 00000000 ____D C:\Users\Tom\AppData\Local\Comms
2016-11-11 19:20 - 2016-11-13 19:36 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-11 19:20 - 2016-11-13 15:33 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-11 19:20 - 2016-11-12 11:19 - 00000000 ____D C:\Users\Tom\AppData\Local\Google
2016-11-11 19:20 - 2016-11-12 08:04 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-11 19:20 - 2016-11-12 08:04 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-11 19:20 - 2016-11-12 07:59 - 00002115 _____ C:\Users\Public\Desktop\Google Slides.lnk
2016-11-11 19:20 - 2016-11-12 07:59 - 00002113 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2016-11-11 19:20 - 2016-11-12 07:59 - 00002103 _____ C:\Users\Public\Desktop\Google Docs.lnk
2016-11-11 19:20 - 2016-11-12 07:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-11-11 19:20 - 2016-11-12 00:28 - 00004050 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-11-11 19:20 - 2016-11-12 00:28 - 00003818 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-11-11 19:20 - 2016-11-11 19:29 - 00000000 ____D C:\Program Files (x86)\MSI
2016-11-11 19:20 - 2016-11-11 19:20 - 00002136 _____ C:\Users\Public\Desktop\MSI Super Charger.lnk
2016-11-11 19:20 - 2016-11-11 19:20 - 00001359 _____ C:\Users\Public\Desktop\Small Business Advantage.lnk
2016-11-11 19:20 - 2016-11-11 19:20 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-11 19:19 - 2016-11-12 11:15 - 00003834 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2016-11-11 19:19 - 2016-11-11 22:21 - 00003604 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2016-11-11 19:19 - 2016-11-11 19:19 - 00002508 _____ C:\Users\Public\Desktop\Intel® Small Business Advantage.lnk
2016-11-11 19:19 - 2016-11-11 19:19 - 00000000 ____D C:\Windows\System32\Tasks\Intel(R) Small Business Advantage
2016-11-11 19:19 - 2016-11-11 19:19 - 00000000 ____D C:\ProgramData\Intel(R) Update Manager
2016-11-11 19:19 - 2016-11-11 19:19 - 00000000 ____D C:\Intel
2016-11-11 19:18 - 2016-11-11 22:14 - 00003738 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification
2016-11-11 19:18 - 2016-11-11 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-11-11 19:18 - 2016-11-11 19:20 - 00000000 ____D C:\Program Files (x86)\Intel
2016-11-11 19:17 - 2016-11-11 22:14 - 00000000 ____D C:\ProgramData\Intel
2016-11-11 19:17 - 2016-11-11 19:17 - 00003206 _____ C:\Windows\System32\Tasks\Nahimic2UILauncherRun
2016-11-11 19:17 - 2016-11-11 19:17 - 00003194 _____ C:\Windows\System32\Tasks\Nahimic2Svc64Run
2016-11-11 19:17 - 2016-11-11 19:17 - 00003186 _____ C:\Windows\System32\Tasks\Nahimic2Svc32Run
2016-11-11 19:17 - 2016-11-11 19:17 - 00002156 _____ C:\Users\Public\Desktop\Nahimic 2.lnk
2016-11-11 19:17 - 2016-11-11 19:17 - 00000000 ____D C:\Users\Tom\Intel
2016-11-11 19:17 - 2016-11-11 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nahimic 2
2016-11-11 19:17 - 2016-11-11 19:17 - 00000000 ____D C:\Program Files\Nahimic
2016-11-11 19:16 - 2016-11-11 19:16 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-11-11 19:16 - 2016-11-11 19:16 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-11-11 19:16 - 2016-11-11 19:16 - 00000000 ____D C:\Windows\system32\DAX2
2016-11-11 19:16 - 2016-11-11 19:16 - 00000000 ____D C:\Program Files\Realtek
2016-11-11 19:16 - 2016-04-29 03:04 - 15202040 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-11-11 19:16 - 2016-04-29 03:04 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-11-11 19:16 - 2016-04-29 03:04 - 02477520 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 02110592 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 01847888 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 01023240 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00888480 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00873464 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00716104 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00596120 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-11-11 19:16 - 2016-04-29 03:04 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00467160 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00450128 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00258872 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00224256 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaemaxapo64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00221976 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00172576 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00088328 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-11-11 19:16 - 2016-04-29 03:04 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-11-11 19:16 - 2016-04-29 03:03 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-11-11 19:15 - 2016-04-29 03:04 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 12988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 06402440 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 05776960 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 05763572 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-11-11 19:15 - 2016-04-29 03:04 - 05289952 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 05006080 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-11-11 19:15 - 2016-04-29 03:04 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 03199232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 03093648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-11-11 19:15 - 2016-04-29 03:04 - 02825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 02724328 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 02058496 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01422928 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01186832 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01166160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00999856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00678192 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00214840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-11-11 19:15 - 2016-04-29 03:04 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 05339552 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-11-11 19:15 - 2016-04-29 03:03 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-11-11 19:14 - 2016-11-11 19:16 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-11-11 19:14 - 2016-11-11 19:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-11 19:14 - 2016-11-11 19:14 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-11-11 19:14 - 2016-04-29 03:03 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00708320 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00327464 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00310432 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00118600 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-11-11 19:14 - 2016-04-29 03:03 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-11-11 19:14 - 2016-04-11 06:38 - 02838232 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-13 19:42 - 2015-10-30 19:31 - 00750030 _____ C:\Windows\system32\perfh005.dat
2016-11-13 19:42 - 2015-10-30 19:31 - 00150654 _____ C:\Windows\system32\perfc005.dat
2016-11-13 19:37 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\AppReadiness
2016-11-13 19:36 - 2015-10-30 07:28 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-11-13 16:20 - 2015-10-30 08:11 - 00000000 ____D C:\Windows\CbsTemp
2016-11-13 16:10 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-11-13 16:07 - 2015-10-30 08:21 - 00000000 ____D C:\Windows\INF
2016-11-12 02:12 - 2015-10-30 08:24 - 00000000 ___RD C:\Windows\PurchaseDialog
2016-11-12 02:12 - 2015-10-30 08:24 - 00000000 ___RD C:\Windows\PrintDialog
2016-11-12 02:12 - 2015-10-30 08:24 - 00000000 ___RD C:\Windows\MiracastView
2016-11-12 02:12 - 2015-10-30 08:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-11-12 02:12 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\spool
2016-11-12 02:12 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-11-12 02:11 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-11-12 02:10 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2016-11-12 02:10 - 2015-10-30 07:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-11-12 02:10 - 2015-10-30 07:28 - 00000000 ____D C:\Windows\system32\Sysprep
2016-11-12 02:09 - 2015-10-30 19:41 - 00000000 ____D C:\Windows\ServiceProfiles
2016-11-12 02:08 - 2015-10-30 08:24 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-11-11 23:35 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\rescache
2016-11-11 22:53 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\SysWOW64\MUI
2016-11-11 22:53 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\MUI
2016-11-11 21:48 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\Help
2016-11-11 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\Windows\system32\NDF
2016-11-11 19:24 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-11 19:21 - 2015-10-30 08:24 - 00000000 ___RD C:\Windows\DevicesFlow
2016-10-28 22:48 - 2015-10-30 08:26 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-28 22:48 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-11-11 19:47 - 2016-11-11 19:47 - 0000017 _____ () C:\Users\Tom\AppData\Local\resmon.resmoncfg
2016-11-11 19:16 - 2016-11-11 19:16 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-11-11 21:15

==================== End of FRST.txt ============================

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.79 GB) (Free:84.29 GB) NTFS
Drive e: (Místní disk) (Fixed) (Total:931.02 GB) (Free:924.45 GB) NTFS

Available physical RAM: 14066.17 MB
Total physical RAM: 16330.8 MB
Percentage of memory in use: 13%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3BDD5A25)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 3BDD5A1D)
Partition 1: (Not Active) - (Size=111.8 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Tom\Desktop" je 6 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

==================== End Of Log ==============================

#7 Příspěvek od **Rudy** » 13 lis 2016 20:30

Cris píše:Ping zkouším na webovou stránku www.seznam.cz... Běžně mám 53-57 ms..

I to je dost, do 50ms bych to bral.

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Cris · #8 Příspěvek od **Cris** » 13 lis 2016 20:37

Pod 50 ms jsem se nikdy nedostal ani na notebooku používaném před tímto, řekl bych, že to je způsobené připojením.. ADSL od O2.. Jsem údajně celkem daleko od ústředny, když jsem se dotazoval o navýšení rychlosti.

Přikládám log:

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-11-2016
Ran by Tom (13-11-2016 20:36:18) Run:1
Running from C:\Users\Tom\Desktop
Loaded Profiles: Tom (Available Profiles: Tom)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
End
*****************

C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully

==== End of Fixlog 20:36:18 ====

#9 Příspěvek od **Rudy** » 13 lis 2016 20:39

Smazáno. Nastala nějaká změna?

Cris · #10 Příspěvek od **Cris** » 13 lis 2016 20:42

Zatím jede vše ok, ale jak už jsem řekl, ten problém s zahlcením sítě nastal nečekaně třeba po hodině provozu PC. Jestli se problém objeví znovu, dám vědět. Zatím díky! Hezký večer.

#11 Příspěvek od **Rudy** » 13 lis 2016 20:43

OK, zatím není zač. Nechám to tu ještě otevřené.

VIRY.CZ

Zahlcení sítě

Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě

Re: Zahlcení sítě