Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola Logu prosím

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Kontrola Logu prosím

#1 Příspěvek od Misho »

Zdravím, již delší dobu mám zpomalený boottime u windows - značně. Počítač startuje kolem 3 minut, další 2 minuty je poté vytížen disk na 100%. Mimo jiné se mi notebook sám vypíná "natvrdo", nedělám si příliš iluze že by za druhý případ mohl vir namísto nějakého chybného hardware. Avšak za pokus to stojí, již opravdu nevím co kde zkusit, krom servisu který bude poslední možnost. :-) Děkuji předem. Nějak zítra-již dnes tedy k večeru se zde zase ukážu, tak snad je vše správně vloženo. :-) Pěkný den přeji.


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-01-2017
Ran by MIchal (administrator) on LIGHT (21-01-2017 03:39:21)
Running from C:\Users\MIchal\Desktop
Loaded Profiles: MIchal (Available Profiles: MIchal)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(forum.viry.cz) C:\Users\MIchal\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [114480 2016-10-27] (Panda Security, S.L.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWoW64\userinit.exe,
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts-x32: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{cf54bfdd-f480-49c4-9020-09c785b4a44b}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKU\S-1-5-21-2104545360-4030691183-2689995252-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-2104545360-4030691183-2689995252-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-03] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-03] (Oracle Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File

FireFox:
========
FF DefaultProfile: km6s75m9.default
FF ProfilePath: C:\Users\MIchal\AppData\Roaming\Mozilla\Firefox\Profiles\km6s75m9.default [2017-01-21]
FF Extension: (Greasemonkey) - C:\Users\MIchal\AppData\Roaming\Mozilla\Firefox\Profiles\km6s75m9.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-05-11]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-18] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-18] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-03] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-31] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\WidevineCdm\_platform_specific\win_x64\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\PepperFlash\24.0.0.194\pepflashplayer.dll ()
CHR Profile: C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default [2017-01-21]
CHR Extension: (Prezentace Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-31]
CHR Extension: (Flash Video Downloader) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2016-12-31]
CHR Extension: (Dokumenty Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-31]
CHR Extension: (Disk Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-31]
CHR Extension: (YouTube) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-31]
CHR Extension: (Adblock Plus) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-31]
CHR Extension: (Tabulky Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-31]
CHR Extension: (Tampermonkey BETA) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcalenpjmijncebpfijmoaglllgpjagf [2017-01-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-31]
CHR Extension: (AdBlock) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-31]
CHR Extension: (Twitch Now) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-12-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-31]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [File not signed]
R2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-07] (EasyAntiCheat Ltd)
R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2215168 2016-12-05] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2016-12-01] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-07] (Intel Corporation)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109816 2016-10-24] (Panda Security, S.L.)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3844640 2015-11-22] (INCA Internet Co., Ltd.)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
S4 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-08-14] ()
S4 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [202040 2016-12-18] ()
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48584 2016-10-27] (Panda Security, S.L.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S3 PAExec; C:\WINDOWS\PAExec.exe -service [X]
S3 Steam Client Service; "C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASInsHelp; C:\WINDOWS\SysWow64\drivers\AsInsHelp64.sys [11832 2008-01-04] ()
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [98296 2016-07-02] (ASUS Corporation)
R3 bcbtums; C:\WINDOWS\system32\DRIVERS\bcbtums.sys [186152 2016-07-02] (Broadcom Corporation.)
R3 BCMWL63A; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [11758840 2016-07-02] (Broadcom Corp)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [71232 2016-12-05] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [66624 2016-12-05] (Intel Corporation)
S3 dptf_pch; C:\WINDOWS\System32\drivers\dptf_pch.sys [50696 2015-08-17] (Intel Corporation)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-05-14] (Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-05-14] (Disc Soft Ltd)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [350272 2016-12-05] (Intel Corporation)
S3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [31832 2016-07-02] (ELAN Microelectronic Corp.)
R3 MEIx64; C:\WINDOWS\System32\drivers\TeeDriverx64.sys [199760 2016-12-18] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [106928 2016-07-05] (Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [211376 2016-07-05] (Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [119728 2016-07-05] (Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [125872 2016-07-05] (Panda Security, S.L.)
R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [80152 2016-07-06] (Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [116656 2016-07-05] (Panda Security, S.L.)
R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [90032 2016-07-05] (Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [135088 2016-07-05] (Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [335792 2016-07-05] (Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [197040 2016-07-05] (Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [123312 2016-07-05] (Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [278960 2016-07-05] (Panda Security, S.L.)
R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [125360 2016-07-05] (Panda Security, S.L.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_11a67240324f74de\nvlddmkm.sys [14200880 2016-12-12] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-12-12] (NVIDIA Corporation)
R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [179120 2016-10-24] (Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [130992 2016-10-24] (Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207792 2016-10-24] (Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [133552 2016-10-24] (Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [146864 2016-10-24] (Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [117168 2016-10-24] (Panda Security, S.L.)
R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [72112 2016-08-09] (Panda Security, S.L.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [946696 2016-12-05] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [418784 2016-12-05] (Realsil Semiconductor Corporation)
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U0 aswVmm; no ImagePath
S3 DptfDevDram; \SystemRoot\system32\DRIVERS\DptfDevDram.sys [X]
S3 DptfDevPch; \SystemRoot\system32\DRIVERS\DptfDevPch.sys [X]
S3 DptfDevProc; \SystemRoot\system32\DRIVERS\DptfDevProc.sys [X]
S3 DptfManager; \SystemRoot\system32\DRIVERS\DptfManager.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-21 03:39 - 2017-01-21 03:40 - 00020144 _____ C:\Users\MIchal\Desktop\FRST.txt
2017-01-21 03:39 - 2017-01-21 03:39 - 00000000 ____D C:\FRST
2017-01-21 03:38 - 2017-01-21 03:38 - 00112640 _____ (forum.viry.cz) C:\Users\MIchal\Desktop\FRSTLauncher.exe
2017-01-21 03:37 - 2017-01-21 03:38 - 02419712 _____ (Farbar) C:\Users\MIchal\Desktop\FRST64.exe
2017-01-21 02:57 - 2017-01-21 03:01 - 00000000 ____D C:\AdwCleaner
2017-01-21 02:06 - 2017-01-21 02:06 - 00601464 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-21 01:41 - 2016-12-01 03:22 - 02142216 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-01-21 01:41 - 2016-12-01 03:22 - 00354784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-01-21 01:41 - 2016-12-01 03:22 - 00268768 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-01-21 01:41 - 2016-12-01 03:21 - 07969760 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2017-01-21 01:41 - 2016-12-01 03:21 - 00756744 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-01-21 01:41 - 2016-12-01 03:21 - 00399368 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-01-21 01:41 - 2016-12-01 03:21 - 00373728 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-01-21 01:41 - 2016-12-01 02:57 - 06696848 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-01-21 01:41 - 2016-12-01 02:56 - 16446360 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-01-21 01:41 - 2016-08-22 13:44 - 15216464 _____ (Intel Corporation) C:\WINDOWS\system32\SET59E0.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 07958504 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\SET578C.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 06696232 _____ (Intel Corporation) C:\WINDOWS\system32\SET70A1.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 02070552 _____ (Intel Corporation) C:\WINDOWS\system32\SET9D3F.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 00831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-01-21 01:41 - 2016-08-22 13:44 - 00756760 _____ (Intel Corporation) C:\WINDOWS\system32\SET995F.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 00519152 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2017-01-21 01:41 - 2016-08-22 13:44 - 00511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-01-21 01:41 - 2016-08-22 13:44 - 00398872 _____ (Intel Corporation) C:\WINDOWS\system32\SET9C70.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 00356336 _____ (Intel Corporation) C:\WINDOWS\system32\SETA417.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 00350192 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2017-01-21 01:41 - 2016-08-22 13:44 - 00337392 _____ (Intel Corporation) C:\WINDOWS\system32\SET9E50.tmp
2017-01-21 01:41 - 2016-08-22 13:44 - 00251376 _____ (Intel Corporation) C:\WINDOWS\system32\SETA4F6.tmp
2017-01-21 00:33 - 2017-01-21 00:33 - 00039629 _____ C:\WINDOWS\system32\energy-report.html
2017-01-20 22:57 - 2017-01-20 22:57 - 00000000 ____D C:\Users\MIchal\AppData\Local\Downloaded Installations
2017-01-20 22:51 - 2010-11-09 14:35 - 00021992 _____ (CPUID) C:\WINDOWS\system32\Drivers\cpuz135_x64.sys
2017-01-20 22:36 - 2017-01-20 22:36 - 04759080 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-01-20 22:35 - 2017-01-20 22:35 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\Intel Corporation
2017-01-20 21:30 - 2017-01-20 21:30 - 00376528 _____ (Microsoft Corporation) C:\Users\MIchal\Desktop\RefreshWindowsTool.exe
2017-01-20 20:47 - 2017-01-20 20:47 - 18309328 _____ (Microsoft Corporation) C:\Users\MIchal\Desktop\MediaCreationTool.exe
2017-01-20 20:47 - 2017-01-20 20:47 - 00000000 ___HD C:\$Windows.~WS
2017-01-20 20:47 - 2017-01-20 20:47 - 00000000 ____D C:\$WINDOWS.~BT
2017-01-20 20:45 - 2017-01-20 20:45 - 00000733 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pomocník při upgradu na Windows 10.lnk
2017-01-20 20:45 - 2017-01-20 20:45 - 00000000 ____D C:\Windows10Upgrade
2017-01-20 18:41 - 2017-01-20 18:43 - 00003544 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2017-01-20 18:41 - 2017-01-20 18:43 - 00003534 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2017-01-20 18:41 - 2017-01-20 18:41 - 00003446 _____ C:\WINDOWS\System32\Tasks\Update Checker
2017-01-19 22:52 - 2017-01-19 22:52 - 00003202 _____ C:\WINDOWS\System32\Tasks\RtHDVBg
2017-01-19 22:52 - 2017-01-19 22:52 - 00003194 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2017-01-19 20:12 - 2017-01-19 20:12 - 00000000 ____D C:\Users\MIchal\Desktop\ProcessExplorer
2017-01-19 16:49 - 2017-01-19 16:49 - 00000000 ____D C:\Users\MIchal\AppData\Local\ESET
2017-01-18 19:41 - 2017-01-19 18:41 - 00000000 ____D C:\WINDOWS\LastGood
2017-01-18 01:24 - 2017-01-18 01:24 - 00000000 ____D C:\Program Files\Intel Corporation
2017-01-17 02:24 - 2017-01-21 01:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-17 02:24 - 2017-01-17 02:23 - 00372736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NVUNINST.EXE
2017-01-17 02:24 - 2007-07-03 16:41 - 01524736 _____ C:\WINDOWS\system32\MFC71.dll
2017-01-17 02:24 - 2007-07-03 16:41 - 00978944 _____ C:\WINDOWS\system32\msvcp71.dll
2017-01-17 02:24 - 2007-07-03 16:41 - 00520192 _____ C:\WINDOWS\system32\msvcr71.dll
2017-01-17 02:24 - 2007-06-25 22:21 - 02065920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcplUI.exe
2017-01-17 02:24 - 2007-06-25 22:21 - 01064448 _____ C:\WINDOWS\system32\nvcplUIR.dll
2017-01-17 02:24 - 2007-06-25 22:21 - 00403456 _____ C:\WINDOWS\system32\nvcpl.cpl
2017-01-17 02:24 - 2007-06-25 22:21 - 00381952 _____ C:\WINDOWS\system32\nvexpBar.dll
2017-01-17 02:04 - 2017-01-17 02:06 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-01-17 01:57 - 2017-01-17 01:57 - 00000000 ___HD C:\$SysReset
2017-01-17 01:16 - 2017-01-17 01:16 - 00000000 ____D C:\Users\Public\Thunder Network
2017-01-17 01:09 - 2017-01-17 01:15 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2017-01-14 18:21 - 2017-01-14 18:21 - 00002328 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (MIchal)
2017-01-14 18:19 - 2017-01-14 18:19 - 00003174 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-14 18:19 - 2017-01-14 18:19 - 00003002 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-14 18:19 - 2017-01-14 18:19 - 00002912 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-14 16:10 - 2017-01-14 16:10 - 00004098 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-01-11 18:05 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-11 18:05 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-11 18:05 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-11 18:05 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-11 18:05 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-11 18:05 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-11 18:05 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-11 18:05 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-11 18:05 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-11 18:05 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 18:05 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-11 18:05 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 18:05 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-11 18:05 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-11 18:05 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-11 18:05 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-11 18:05 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-11 18:05 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-11 18:05 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-11 18:05 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-11 18:05 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-11 18:05 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-11 18:05 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-11 18:05 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-11 18:05 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-11 18:05 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-11 18:05 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-11 18:05 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-11 18:05 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-11 18:05 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-11 18:05 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-11 18:05 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 18:05 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-11 18:05 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-11 18:05 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-11 18:05 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-11 18:05 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-11 18:05 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-11 18:05 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-11 18:05 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-11 18:05 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-11 18:05 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-11 18:05 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-11 18:05 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-11 18:05 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-11 18:05 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-11 18:05 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-11 18:05 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-11 18:05 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-11 18:05 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-11 18:05 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-11 18:05 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-11 18:05 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-11 18:05 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-11 18:05 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-11 18:05 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-11 18:05 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-11 18:05 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-11 18:05 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-11 18:05 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-11 18:05 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-11 18:05 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-11 18:05 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-11 18:05 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-11 18:05 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-11 18:05 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-11 18:05 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-11 18:05 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-11 18:05 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-11 18:05 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-11 18:05 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-11 18:05 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-11 18:05 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-11 18:05 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-11 18:05 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-11 18:05 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-11 18:05 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-11 18:05 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-11 18:05 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-11 18:05 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-11 18:05 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-11 18:05 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-11 18:05 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-11 18:05 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-11 18:05 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-11 18:05 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-11 18:05 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-11 18:05 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-11 18:05 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-11 18:05 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-11 18:05 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-11 18:05 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-11 18:05 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-11 18:05 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-11 18:05 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-11 18:05 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-11 18:05 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-11 18:05 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-11 18:05 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-11 18:05 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-11 18:05 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-11 18:05 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-11 18:05 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-11 18:05 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-11 18:05 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-11 18:05 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-11 18:05 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-11 18:05 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-11 18:05 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-11 18:05 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-11 18:05 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-11 18:05 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-11 18:05 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-11 18:05 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-11 18:05 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-11 18:05 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-11 18:05 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-11 18:05 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-11 18:05 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-11 18:05 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-11 18:05 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-11 18:04 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-11 18:04 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-11 18:04 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-11 18:04 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-11 18:04 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-11 18:04 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-11 18:04 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-11 18:04 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-11 18:04 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 18:04 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-08 15:43 - 2017-01-20 19:47 - 00000000 ____D C:\Users\MIchal\AppData\LocalLow\Intel
2017-01-08 15:42 - 2017-01-20 19:45 - 00003738 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2017-01-08 15:41 - 2017-01-08 15:41 - 00000000 ____D C:\Users\MIchal\Intel
2017-01-07 02:23 - 2017-01-07 02:23 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-07 02:23 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-01-07 02:23 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-01-07 02:23 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-01-07 02:23 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-01-07 01:23 - 2017-01-21 02:08 - 00000000 ____D C:\Users\MIchal\AppData\Local\CrashDumps
2017-01-07 01:03 - 2017-01-21 02:40 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-01-07 01:02 - 2017-01-07 01:02 - 00000000 ____D C:\WINDOWS\pss
2017-01-07 00:43 - 2017-01-07 00:44 - 00000000 ____D C:\Program Files\Core Temp
2017-01-05 17:22 - 2017-01-05 17:25 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-01-05 17:22 - 2017-01-05 17:22 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\NCH Software
2017-01-04 17:49 - 2017-01-04 17:49 - 00002426 _____ C:\WINDOWS\system32\default_error_stack-000000-000000.txt
2017-01-04 17:36 - 2015-10-06 16:03 - 00189952 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4300.dll
2017-01-02 22:19 - 2017-01-02 22:19 - 00001535 _____ C:\Users\MIchal\Desktop\DeadByDaylight-Wnd.lnk
2016-12-31 22:22 - 2008-01-04 13:34 - 00011832 _____ C:\WINDOWS\SysWOW64\Drivers\AsInsHelp64.sys
2016-12-31 15:55 - 2016-12-31 16:04 - 00000000 ____D C:\Users\MIchal\AppData\Local\Google
2016-12-31 15:55 - 2016-12-31 16:00 - 00003470 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-31 15:55 - 2016-12-31 16:00 - 00003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-31 15:55 - 2016-12-31 15:55 - 01065376 _____ (Google Inc.) C:\Users\MIchal\Downloads\ChromeSetup.exe
2016-12-31 15:55 - 2016-12-31 15:55 - 00002350 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-31 15:55 - 2016-12-31 15:55 - 00002338 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-31 15:55 - 2016-12-31 15:55 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-31 14:35 - 2017-01-07 18:09 - 00001769 _____ C:\WINDOWS\Language_trs.ini
2016-12-31 13:57 - 2015-08-17 08:48 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01011.dll
2016-12-31 13:57 - 2015-08-17 08:48 - 01385640 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\esif_uf.exe
2016-12-31 13:57 - 2015-08-17 08:48 - 00050696 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\dptf_pch.sys
2016-12-31 13:25 - 2017-01-20 23:04 - 00004194 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{37183A27-67ED-42FC-9392-871D66A2D223}
2016-12-31 13:20 - 2016-12-31 13:20 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2016-12-31 04:22 - 2016-08-22 13:44 - 05799386 _____ C:\WINDOWS\system32\igdclbif.bin
2016-12-31 04:22 - 2016-08-22 13:44 - 00209424 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4501.dll
2016-12-31 04:22 - 2016-08-22 13:44 - 00041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-21 03:20 - 2016-08-06 12:43 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-01-21 03:20 - 2016-08-06 12:43 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-01-21 03:19 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-21 03:09 - 2015-12-23 01:41 - 00000093 _____ C:\Users\MIchal\AppData\Roaming\sp_data.sys
2017-01-21 03:08 - 2015-12-23 01:39 - 00000000 __SHD C:\Users\MIchal\IntelGraphicsProfiles
2017-01-21 03:06 - 2016-12-19 16:18 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-21 03:06 - 2016-08-06 13:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-21 03:06 - 2016-08-06 12:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-21 02:44 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-21 01:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-21 01:24 - 2015-12-23 01:39 - 00000000 ____D C:\Users\MIchal\AppData\Local\Packages
2017-01-21 01:23 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-21 01:20 - 2016-09-25 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-01-21 01:20 - 2016-08-06 20:27 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-21 01:20 - 2015-12-23 18:57 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\TS3Client
2017-01-20 22:55 - 2016-08-06 12:41 - 00000000 ____D C:\Program Files (x86)\Intel
2017-01-20 22:52 - 2016-12-04 16:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2017-01-20 22:36 - 2016-07-16 23:25 - 02083504 _____ C:\WINDOWS\system32\perfh005.dat
2017-01-20 22:36 - 2016-07-16 23:25 - 00571264 _____ C:\WINDOWS\system32\perfc005.dat
2017-01-20 22:35 - 2016-08-06 12:42 - 00000000 ____D C:\Program Files\Intel
2017-01-20 22:35 - 2015-12-09 08:15 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-01-20 22:08 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-20 20:51 - 2016-08-06 13:39 - 00000000 ___DC C:\WINDOWS\Panther
2017-01-20 19:49 - 2015-12-23 16:33 - 04726240 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-20 19:48 - 2015-12-09 08:14 - 00000000 ____D C:\ProgramData\Intel
2017-01-20 19:11 - 2016-05-07 19:39 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\vlc
2017-01-20 18:41 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-01-20 18:41 - 2014-10-21 05:28 - 00000000 ____D C:\Program Files (x86)\ASUS
2017-01-20 18:21 - 2015-12-25 19:39 - 00000000 ____D C:\Users\MIchal\AppData\Local\ElevatedDiagnostics
2017-01-20 18:08 - 2016-08-06 12:48 - 00000000 ____D C:\Users\MIchal
2017-01-20 00:45 - 2015-12-09 08:21 - 00000000 ___HD C:\Program Files (x86)\Temp
2017-01-19 22:54 - 2016-09-30 12:27 - 00538872 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-01-19 22:53 - 2015-12-23 17:31 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\foobar2000
2017-01-19 22:52 - 2016-08-06 12:44 - 00319042 _____ C:\WINDOWS\system32\Drivers\RTWAVES40.dat
2017-01-19 22:52 - 2016-08-06 12:44 - 00006786 _____ C:\WINDOWS\system32\Drivers\rtwavesEFX.dat
2017-01-19 22:52 - 2016-08-06 12:44 - 00002626 _____ C:\WINDOWS\system32\Drivers\rtwavesMFX.dat
2017-01-19 22:52 - 2016-08-06 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-01-19 22:52 - 2015-12-09 08:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-01-19 22:51 - 2015-12-09 08:21 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-01-19 20:18 - 2015-12-23 17:28 - 00000000 ___RD C:\Users\MIchal\Desktop\Light
2017-01-19 18:28 - 2015-12-23 19:21 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-18 19:57 - 2016-03-06 18:04 - 00007597 _____ C:\Users\MIchal\AppData\Local\Resmon.ResmonCfg
2017-01-18 19:53 - 2016-04-11 15:58 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-18 19:32 - 2016-10-26 16:25 - 20358232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2017-01-18 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-18 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-17 03:51 - 2016-12-10 01:36 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-17 02:53 - 2015-12-09 08:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-17 02:24 - 2015-12-09 08:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-17 02:06 - 2016-08-06 12:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-01-17 01:15 - 2016-08-28 13:48 - 00000000 ____D C:\ProgramData\DriverTalent
2017-01-15 19:55 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-01-14 18:04 - 2016-05-11 14:58 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-01-14 16:10 - 2016-04-11 15:58 - 00000000 ____D C:\Users\MIchal\AppData\Local\Adobe
2017-01-13 21:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-13 21:48 - 2016-05-15 14:38 - 00000000 ____D C:\ProgramData\Corel
2017-01-13 17:55 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-11 18:15 - 2015-12-23 19:21 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 18:26 - 2016-12-19 17:00 - 00000000 ____D C:\Users\MIchal\AppData\Local\NVIDIA Corporation
2017-01-10 18:26 - 2016-12-19 16:18 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-10 18:26 - 2016-08-06 12:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-10 18:26 - 2015-12-23 01:40 - 00000000 ____D C:\Users\MIchal\AppData\Local\NVIDIA
2017-01-10 18:00 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-08 13:49 - 2015-12-23 01:39 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\Adobe
2017-01-04 16:59 - 2016-02-18 17:47 - 00000000 ____D C:\Users\MIchal\Downloads\Intel Components
2017-01-04 00:57 - 2016-12-11 19:12 - 00000000 ____D C:\Users\MIchal\AppData\Local\Ubisoft Game Launcher
2017-01-01 00:56 - 2016-12-04 15:44 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2016-12-31 17:24 - 2016-12-19 00:29 - 00027552 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO64A.SYS
2016-12-29 21:35 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2016-12-25 11:14 - 2016-12-17 16:30 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\obs-studio
2016-12-23 18:29 - 2015-12-27 17:29 - 00000000 ____D C:\Users\MIchal\Documents\My Games
2016-12-23 00:13 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-23 00:13 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-02-21 17:46 - 2016-02-21 17:46 - 0000054 _____ () C:\Users\MIchal\AppData\Roaming\Camdata.ini
2016-02-21 17:46 - 2016-02-21 17:46 - 0000408 _____ () C:\Users\MIchal\AppData\Roaming\CamLayout.ini
2016-02-21 17:46 - 2016-02-21 17:46 - 0000408 _____ () C:\Users\MIchal\AppData\Roaming\CamShapes.ini
2016-02-21 17:46 - 2016-02-21 17:46 - 0004510 _____ () C:\Users\MIchal\AppData\Roaming\CamStudio.cfg
2015-12-23 01:41 - 2017-01-21 03:09 - 0000093 _____ () C:\Users\MIchal\AppData\Roaming\sp_data.sys
2016-02-21 18:07 - 2016-02-21 18:10 - 0003584 _____ () C:\Users\MIchal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-03-06 18:04 - 2017-01-18 19:57 - 0007597 _____ () C:\Users\MIchal\AppData\Local\Resmon.ResmonCfg
2015-12-23 18:33 - 2015-12-23 18:33 - 0000003 _____ () C:\Users\MIchal\AppData\Local\updater.log
2015-12-23 18:33 - 2016-08-06 17:05 - 0000424 _____ () C:\Users\MIchal\AppData\Local\UserProducts.xml
2016-08-06 12:44 - 2016-08-06 12:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-21 05:28 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-21 05:28 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-21 05:28 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Panda Protection (Disabled - Up to date) {46AEFD02-ACA3-E038-1FA5-4A15EFD361E0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Protection (Disabled - Up to date) {FDCF1CE6-8A99-EFB6-2515-716794542B5D}
FW: Panda Firewall (Disabled) {7E957C27-E6CC-E160-34FA-E3201100269B}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\MIchal\Desktop" je 7916 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================
Přílohy
Addition.rar
Addition
(10.6 KiB) Staženo 87 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#2 Příspěvek od Rudy »

Zdravím!
Spousťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#3 Příspěvek od Misho »

Mohu se tě pouze zeptat, zda je vůbec možné, že by za případné vypínání notebooku "natvrdo" mohl vir? Boot věřím, že možný je, ale to vypínání nevím nevím. A děkuji za tvůj čas.
A zde je log - První ještě noční který jsem zkusil pustit ještě před psaním příspěvku, a druhý aktuální podním :

# AdwCleaner v6.042 - Log vytvořen 21/01/2017 v 02:59:46
# Aktualizováno dne 06/01/2017 z Malwarebytes
# Databáze : 2017-01-20.2 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : MIchal - LIGHT
# Spuštěno z : C:\Users\MIchal\Desktop\adwcleaner_6.042.exe
# Mod: Skenování
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Složky ] *****

Složka nalezena: C:\Users\MIchal\AppData\Local\DriverToolkit
Složka nalezena: C:\Users\MIchal\AppData\Local\MalwareProtectionLive
Složka nalezena: C:\ProgramData\Thunder Network
Složka nalezena: C:\Program Files (x86)\DriverToolkit


***** [ Soubory ] *****

Nebyly nalezeny žádné škodlivé soubory.


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupci ] *****

Žádný infikovaný zástupce nenalezen.


***** [ Naplánované úlohy ] *****

Žádná nebezpečná úloha nenalezena.


***** [ Registry ] *****

Klíč nalezen: HKU\S-1-5-21-2104545360-4030691183-2689995252-1001\Software\DriverToolkit
Klíč nalezen: HKCU\Software\DriverToolkit
Klíč nalezen: [x64] HKCU\Software\DriverToolkit
Hodnota nalezena: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [MalwareProtectionLive]


***** [ Internetové prohlížeče ] *****

Nebyly nalezeny žádné škodlivé položky prohlížeče Firefox.
Nebyly nalezeny žádné škodlivé položky prohlížeče Chromium.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [1654 Bajty] - [21/01/2017 02:59:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1727 Bajty] ##########



A zde je dnešní aktuální

# AdwCleaner v6.042 - Log vytvořen 21/01/2017 v 15:47:11
# Aktualizováno dne 06/01/2017 z Malwarebytes
# Databáze : 2017-01-20.2 [Místní]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : MIchal - LIGHT
# Spuštěno z : C:\Users\MIchal\Desktop\adwcleaner_6.042.exe
# Mod: Skenování
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Složky ] *****

Nebyly nalezeny žádné škodlivé složky.


***** [ Soubory ] *****

Nebyly nalezeny žádné škodlivé soubory.


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupci ] *****

Žádný infikovaný zástupce nenalezen.


***** [ Naplánované úlohy ] *****

Žádná nebezpečná úloha nenalezena.


***** [ Registry ] *****

Nebyly nalezeny žádné škodlivé položky registru.


***** [ Internetové prohlížeče ] *****

Nebyly nalezeny žádné škodlivé položky prohlížeče Firefox.
Nebyly nalezeny žádné škodlivé položky prohlížeče Chromium.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1626 Bajty] - [21/01/2017 03:01:05]
C:\AdwCleaner\AdwCleaner[S0].txt - [1814 Bajty] - [21/01/2017 02:59:46]
C:\AdwCleaner\AdwCleaner[S1].txt - [1358 Bajty] - [21/01/2017 15:47:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1431 Bajty] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#4 Příspěvek od Rudy »

Vir obvykle nevypne PC natvrdo. Aby mohl v systému pracovat, systém musí běžet. Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#5 Příspěvek od Misho »

Zde je FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-01-2017
Ran by MIchal (administrator) on LIGHT (21-01-2017 18:06:03)
Running from C:\Users\MIchal\Desktop
Loaded Profiles: MIchal (Available Profiles: MIchal)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\MIchal\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [114480 2016-10-27] (Panda Security, S.L.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWoW64\userinit.exe,
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts-x32: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{cf54bfdd-f480-49c4-9020-09c785b4a44b}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKU\S-1-5-21-2104545360-4030691183-2689995252-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-2104545360-4030691183-2689995252-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-03] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-03] (Oracle Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File

FireFox:
========
FF DefaultProfile: km6s75m9.default
FF ProfilePath: C:\Users\MIchal\AppData\Roaming\Mozilla\Firefox\Profiles\km6s75m9.default [2017-01-21]
FF Extension: (Greasemonkey) - C:\Users\MIchal\AppData\Roaming\Mozilla\Firefox\Profiles\km6s75m9.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-05-11]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-18] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-18] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-03] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-31] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\WidevineCdm\_platform_specific\win_x64\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\PepperFlash\24.0.0.194\pepflashplayer.dll ()
CHR Profile: C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default [2017-01-21]
CHR Extension: (Prezentace Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-31]
CHR Extension: (Flash Video Downloader) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2016-12-31]
CHR Extension: (Dokumenty Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-31]
CHR Extension: (Disk Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-31]
CHR Extension: (YouTube) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-31]
CHR Extension: (Adblock Plus) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-31]
CHR Extension: (Tabulky Google) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-31]
CHR Extension: (Tampermonkey BETA) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcalenpjmijncebpfijmoaglllgpjagf [2017-01-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-31]
CHR Extension: (AdBlock) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-31]
CHR Extension: (Twitch Now) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-12-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\MIchal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-31]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [File not signed]
R2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-07] (EasyAntiCheat Ltd)
R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2215168 2016-12-05] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2016-12-01] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-07] (Intel Corporation)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109816 2016-10-24] (Panda Security, S.L.)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3844640 2015-11-22] (INCA Internet Co., Ltd.)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
S4 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-08-14] ()
S4 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [202040 2016-12-18] ()
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48584 2016-10-27] (Panda Security, S.L.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S3 PAExec; C:\WINDOWS\PAExec.exe -service [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASInsHelp; C:\WINDOWS\SysWow64\drivers\AsInsHelp64.sys [11832 2008-01-04] ()
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [98296 2016-07-02] (ASUS Corporation)
R3 bcbtums; C:\WINDOWS\system32\DRIVERS\bcbtums.sys [186152 2016-07-02] (Broadcom Corporation.)
R3 BCMWL63A; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [11758840 2016-07-02] (Broadcom Corp)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [71232 2016-12-05] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [66624 2016-12-05] (Intel Corporation)
S3 dptf_pch; C:\WINDOWS\System32\drivers\dptf_pch.sys [50696 2015-08-17] (Intel Corporation)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-05-14] (Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-05-14] (Disc Soft Ltd)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [350272 2016-12-05] (Intel Corporation)
S3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [31832 2016-07-02] (ELAN Microelectronic Corp.)
R3 MEIx64; C:\WINDOWS\System32\drivers\TeeDriverx64.sys [199760 2016-12-18] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [106928 2016-07-05] (Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [211376 2016-07-05] (Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [119728 2016-07-05] (Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [125872 2016-07-05] (Panda Security, S.L.)
R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [80152 2016-07-06] (Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [116656 2016-07-05] (Panda Security, S.L.)
R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [90032 2016-07-05] (Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [135088 2016-07-05] (Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [335792 2016-07-05] (Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [197040 2016-07-05] (Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [123312 2016-07-05] (Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [278960 2016-07-05] (Panda Security, S.L.)
R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [125360 2016-07-05] (Panda Security, S.L.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_11a67240324f74de\nvlddmkm.sys [14200880 2016-12-12] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-12-12] (NVIDIA Corporation)
R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [179120 2016-10-24] (Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [130992 2016-10-24] (Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207792 2016-10-24] (Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [133552 2016-10-24] (Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [146864 2016-10-24] (Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [117168 2016-10-24] (Panda Security, S.L.)
R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [72112 2016-08-09] (Panda Security, S.L.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [946696 2016-12-05] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [418784 2016-12-05] (Realsil Semiconductor Corporation)
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U0 aswVmm; no ImagePath
S3 DptfDevDram; \SystemRoot\system32\DRIVERS\DptfDevDram.sys [X]
S3 DptfDevPch; \SystemRoot\system32\DRIVERS\DptfDevPch.sys [X]
S3 DptfDevProc; \SystemRoot\system32\DRIVERS\DptfDevProc.sys [X]
S3 DptfManager; \SystemRoot\system32\DRIVERS\DptfManager.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-21 18:05 - 2017-01-21 18:05 - 02419712 _____ (Farbar) C:\Users\MIchal\Desktop\FRST64.exe
2017-01-21 18:05 - 2017-01-21 18:05 - 00112640 _____ (forum.viry.cz) C:\Users\MIchal\Desktop\FRSTLauncher.exe
2017-01-21 18:05 - 2017-01-21 18:05 - 00029696 _____ C:\Users\MIchal\AppData\Local\MSGBOX.EXE
2017-01-21 18:05 - 2017-01-21 18:05 - 00015327 _____ C:\Users\MIchal\Desktop\LM.bat
2017-01-21 16:07 - 2017-01-21 16:24 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-01-21 16:07 - 2017-01-21 16:24 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2017-01-21 16:06 - 2017-01-21 16:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2017-01-21 15:42 - 2017-01-21 15:42 - 03988944 _____ C:\Users\MIchal\Desktop\adwcleaner_6.042.exe
2017-01-21 03:39 - 2017-01-21 18:06 - 00020074 _____ C:\Users\MIchal\Desktop\FRST.txt
2017-01-21 03:39 - 2017-01-21 18:06 - 00000000 ____D C:\FRST
2017-01-21 02:57 - 2017-01-21 15:47 - 00000000 ____D C:\AdwCleaner
2017-01-21 02:06 - 2017-01-21 02:06 - 00601464 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-21 01:41 - 2016-12-01 03:22 - 02142216 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll
2017-01-21 01:41 - 2016-12-01 03:22 - 00354784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2017-01-21 01:41 - 2016-12-01 03:22 - 00268768 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2017-01-21 01:41 - 2016-12-01 03:21 - 07969760 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2017-01-21 01:41 - 2016-12-01 03:21 - 00756744 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll
2017-01-21 01:41 - 2016-12-01 03:21 - 00399368 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll
2017-01-21 01:41 - 2016-12-01 03:21 - 00373728 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2017-01-21 01:41 - 2016-12-01 02:57 - 06696848 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll
2017-01-21 01:41 - 2016-12-01 02:56 - 16446360 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll
2017-01-21 01:41 - 2016-08-22 13:44 - 00831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2017-01-21 01:41 - 2016-08-22 13:44 - 00519152 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2017-01-21 01:41 - 2016-08-22 13:44 - 00511260 _____ C:\WINDOWS\system32\cp_resources.bin
2017-01-21 01:41 - 2016-08-22 13:44 - 00350192 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2017-01-21 00:33 - 2017-01-21 00:33 - 00039629 _____ C:\WINDOWS\system32\energy-report.html
2017-01-20 22:57 - 2017-01-20 22:57 - 00000000 ____D C:\Users\MIchal\AppData\Local\Downloaded Installations
2017-01-20 22:51 - 2010-11-09 14:35 - 00021992 _____ (CPUID) C:\WINDOWS\system32\Drivers\cpuz135_x64.sys
2017-01-20 22:36 - 2017-01-20 22:36 - 04759080 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-01-20 22:35 - 2017-01-20 22:35 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\Intel Corporation
2017-01-20 21:30 - 2017-01-20 21:30 - 00376528 _____ (Microsoft Corporation) C:\Users\MIchal\Desktop\RefreshWindowsTool.exe
2017-01-20 20:47 - 2017-01-20 20:47 - 18309328 _____ (Microsoft Corporation) C:\Users\MIchal\Desktop\MediaCreationTool.exe
2017-01-20 20:47 - 2017-01-20 20:47 - 00000000 ___HD C:\$Windows.~WS
2017-01-20 20:47 - 2017-01-20 20:47 - 00000000 ____D C:\$WINDOWS.~BT
2017-01-20 20:45 - 2017-01-20 20:45 - 00000733 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pomocník při upgradu na Windows 10.lnk
2017-01-20 20:45 - 2017-01-20 20:45 - 00000000 ____D C:\Windows10Upgrade
2017-01-20 18:41 - 2017-01-21 15:42 - 00003544 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2017-01-20 18:41 - 2017-01-21 15:42 - 00003534 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2017-01-20 18:41 - 2017-01-20 18:41 - 00003446 _____ C:\WINDOWS\System32\Tasks\Update Checker
2017-01-19 22:52 - 2017-01-19 22:52 - 00003202 _____ C:\WINDOWS\System32\Tasks\RtHDVBg
2017-01-19 22:52 - 2017-01-19 22:52 - 00003194 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2017-01-19 20:12 - 2017-01-19 20:12 - 00000000 ____D C:\Users\MIchal\Desktop\ProcessExplorer
2017-01-19 16:49 - 2017-01-19 16:49 - 00000000 ____D C:\Users\MIchal\AppData\Local\ESET
2017-01-18 19:41 - 2017-01-19 18:41 - 00000000 ____D C:\WINDOWS\LastGood
2017-01-18 01:24 - 2017-01-18 01:24 - 00000000 ____D C:\Program Files\Intel Corporation
2017-01-17 02:24 - 2017-01-21 01:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-17 02:24 - 2017-01-17 02:23 - 00372736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NVUNINST.EXE
2017-01-17 02:24 - 2007-07-03 16:41 - 01524736 _____ C:\WINDOWS\system32\MFC71.dll
2017-01-17 02:24 - 2007-07-03 16:41 - 00978944 _____ C:\WINDOWS\system32\msvcp71.dll
2017-01-17 02:24 - 2007-07-03 16:41 - 00520192 _____ C:\WINDOWS\system32\msvcr71.dll
2017-01-17 02:24 - 2007-06-25 22:21 - 02065920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcplUI.exe
2017-01-17 02:24 - 2007-06-25 22:21 - 01064448 _____ C:\WINDOWS\system32\nvcplUIR.dll
2017-01-17 02:24 - 2007-06-25 22:21 - 00403456 _____ C:\WINDOWS\system32\nvcpl.cpl
2017-01-17 02:24 - 2007-06-25 22:21 - 00381952 _____ C:\WINDOWS\system32\nvexpBar.dll
2017-01-17 02:04 - 2017-01-17 02:06 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-01-17 01:57 - 2017-01-17 01:57 - 00000000 ___HD C:\$SysReset
2017-01-17 01:16 - 2017-01-17 01:16 - 00000000 ____D C:\Users\Public\Thunder Network
2017-01-17 01:09 - 2017-01-17 01:15 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2017-01-14 18:21 - 2017-01-14 18:21 - 00002328 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (MIchal)
2017-01-14 18:19 - 2017-01-14 18:19 - 00003174 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-14 18:19 - 2017-01-14 18:19 - 00003002 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-14 18:19 - 2017-01-14 18:19 - 00002912 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-14 16:10 - 2017-01-14 16:10 - 00004098 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-01-11 18:05 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-11 18:05 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-11 18:05 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-11 18:05 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-11 18:05 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-11 18:05 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-11 18:05 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-11 18:05 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-11 18:05 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-11 18:05 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-11 18:05 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 18:05 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-11 18:05 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 18:05 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-11 18:05 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-11 18:05 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-11 18:05 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-11 18:05 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-11 18:05 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-11 18:05 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-11 18:05 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-11 18:05 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-11 18:05 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-11 18:05 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-11 18:05 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-11 18:05 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-11 18:05 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-11 18:05 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-11 18:05 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-11 18:05 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-11 18:05 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-11 18:05 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-11 18:05 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-11 18:05 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 18:05 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-11 18:05 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-11 18:05 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-11 18:05 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-11 18:05 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-11 18:05 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-11 18:05 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-11 18:05 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-11 18:05 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-11 18:05 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-11 18:05 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-11 18:05 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-11 18:05 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-11 18:05 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-11 18:05 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-11 18:05 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-11 18:05 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-11 18:05 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-11 18:05 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-11 18:05 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-11 18:05 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-11 18:05 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-11 18:05 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-11 18:05 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-11 18:05 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-11 18:05 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-11 18:05 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-11 18:05 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-11 18:05 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-11 18:05 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-11 18:05 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-11 18:05 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-11 18:05 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-11 18:05 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-11 18:05 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-11 18:05 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-11 18:05 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-11 18:05 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-11 18:05 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-11 18:05 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-11 18:05 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-11 18:05 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-11 18:05 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-11 18:05 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-11 18:05 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-11 18:05 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-11 18:05 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-11 18:05 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-11 18:05 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-11 18:05 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-11 18:05 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-11 18:05 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-11 18:05 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-11 18:05 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-11 18:05 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-11 18:05 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-11 18:05 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-11 18:05 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-11 18:05 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-11 18:05 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-11 18:05 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-11 18:05 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 18:05 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-11 18:05 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-11 18:05 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-11 18:05 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-11 18:05 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-11 18:05 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-11 18:05 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-11 18:05 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-11 18:05 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-11 18:05 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-11 18:05 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-11 18:05 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-11 18:05 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-11 18:05 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-11 18:05 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-11 18:05 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-11 18:05 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-11 18:05 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-11 18:05 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-11 18:05 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-11 18:05 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-11 18:05 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-11 18:05 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-11 18:05 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-11 18:05 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-11 18:05 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-11 18:05 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-11 18:05 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-11 18:05 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-11 18:05 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-11 18:05 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-11 18:05 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-11 18:05 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-11 18:04 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-11 18:04 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-11 18:04 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-11 18:04 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-11 18:04 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-11 18:04 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-11 18:04 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-11 18:04 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-11 18:04 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 18:04 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-08 15:43 - 2017-01-20 19:47 - 00000000 ____D C:\Users\MIchal\AppData\LocalLow\Intel
2017-01-08 15:42 - 2017-01-20 19:45 - 00003738 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2017-01-08 15:41 - 2017-01-08 15:41 - 00000000 ____D C:\Users\MIchal\Intel
2017-01-07 02:23 - 2017-01-07 02:23 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-07 02:23 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-01-07 02:23 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-01-07 02:23 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-01-07 02:23 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-01-07 01:23 - 2017-01-21 02:08 - 00000000 ____D C:\Users\MIchal\AppData\Local\CrashDumps
2017-01-07 01:03 - 2017-01-21 02:40 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-01-07 01:02 - 2017-01-07 01:02 - 00000000 ____D C:\WINDOWS\pss
2017-01-07 00:43 - 2017-01-07 00:44 - 00000000 ____D C:\Program Files\Core Temp
2017-01-05 17:22 - 2017-01-05 17:25 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-01-05 17:22 - 2017-01-05 17:22 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\NCH Software
2017-01-04 17:49 - 2017-01-04 17:49 - 00002426 _____ C:\WINDOWS\system32\default_error_stack-000000-000000.txt
2017-01-04 17:36 - 2015-10-06 16:03 - 00189952 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4300.dll
2017-01-02 22:19 - 2017-01-02 22:19 - 00001535 _____ C:\Users\MIchal\Desktop\DeadByDaylight-Wnd.lnk
2016-12-31 22:22 - 2008-01-04 13:34 - 00011832 _____ C:\WINDOWS\SysWOW64\Drivers\AsInsHelp64.sys
2016-12-31 15:55 - 2016-12-31 16:04 - 00000000 ____D C:\Users\MIchal\AppData\Local\Google
2016-12-31 15:55 - 2016-12-31 16:00 - 00003470 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-31 15:55 - 2016-12-31 16:00 - 00003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-31 15:55 - 2016-12-31 15:55 - 01065376 _____ (Google Inc.) C:\Users\MIchal\Downloads\ChromeSetup.exe
2016-12-31 15:55 - 2016-12-31 15:55 - 00002350 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-31 15:55 - 2016-12-31 15:55 - 00002338 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-31 15:55 - 2016-12-31 15:55 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-31 14:35 - 2017-01-07 18:09 - 00001769 _____ C:\WINDOWS\Language_trs.ini
2016-12-31 13:57 - 2015-08-17 08:48 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01011.dll
2016-12-31 13:57 - 2015-08-17 08:48 - 01385640 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\esif_uf.exe
2016-12-31 13:57 - 2015-08-17 08:48 - 00050696 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\dptf_pch.sys
2016-12-31 13:25 - 2017-01-21 15:42 - 00004194 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{37183A27-67ED-42FC-9392-871D66A2D223}
2016-12-31 13:20 - 2016-12-31 13:20 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2016-12-31 04:22 - 2016-08-22 13:44 - 05799386 _____ C:\WINDOWS\system32\igdclbif.bin
2016-12-31 04:22 - 2016-08-22 13:44 - 00209424 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4501.dll
2016-12-31 04:22 - 2016-08-22 13:44 - 00041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2016-12-31 04:22 - 2016-08-22 13:44 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-21 16:23 - 2015-12-23 16:37 - 00000000 ____D C:\Users\TEMP
2017-01-21 16:23 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated
2017-01-21 16:22 - 2016-04-07 03:21 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-01-21 15:42 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-21 15:37 - 2015-12-23 01:41 - 00000093 _____ C:\Users\MIchal\AppData\Roaming\sp_data.sys
2017-01-21 15:35 - 2016-08-06 12:43 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-01-21 15:35 - 2015-12-23 01:39 - 00000000 __SHD C:\Users\MIchal\IntelGraphicsProfiles
2017-01-21 15:34 - 2016-12-19 16:18 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-21 15:34 - 2016-08-06 13:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-21 15:34 - 2016-08-06 12:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-21 03:20 - 2016-08-06 12:43 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-01-21 03:19 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-21 02:44 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-21 01:24 - 2015-12-23 01:39 - 00000000 ____D C:\Users\MIchal\AppData\Local\Packages
2017-01-21 01:23 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-21 01:20 - 2016-09-25 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-01-21 01:20 - 2016-08-06 20:27 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-21 01:20 - 2015-12-23 18:57 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\TS3Client
2017-01-20 22:55 - 2016-08-06 12:41 - 00000000 ____D C:\Program Files (x86)\Intel
2017-01-20 22:52 - 2016-12-04 16:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2017-01-20 22:36 - 2016-07-16 23:25 - 02083504 _____ C:\WINDOWS\system32\perfh005.dat
2017-01-20 22:36 - 2016-07-16 23:25 - 00571264 _____ C:\WINDOWS\system32\perfc005.dat
2017-01-20 22:35 - 2016-08-06 12:42 - 00000000 ____D C:\Program Files\Intel
2017-01-20 22:35 - 2015-12-09 08:15 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-01-20 22:08 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-20 20:51 - 2016-08-06 13:39 - 00000000 ___DC C:\WINDOWS\Panther
2017-01-20 19:49 - 2015-12-23 16:33 - 04726240 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-20 19:48 - 2015-12-09 08:14 - 00000000 ____D C:\ProgramData\Intel
2017-01-20 19:11 - 2016-05-07 19:39 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\vlc
2017-01-20 18:41 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-01-20 18:41 - 2014-10-21 05:28 - 00000000 ____D C:\Program Files (x86)\ASUS
2017-01-20 18:21 - 2015-12-25 19:39 - 00000000 ____D C:\Users\MIchal\AppData\Local\ElevatedDiagnostics
2017-01-20 18:08 - 2016-08-06 12:48 - 00000000 ____D C:\Users\MIchal
2017-01-20 00:45 - 2015-12-09 08:21 - 00000000 ___HD C:\Program Files (x86)\Temp
2017-01-19 22:54 - 2016-09-30 12:27 - 00538872 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-01-19 22:53 - 2015-12-23 17:31 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\foobar2000
2017-01-19 22:52 - 2016-08-06 12:44 - 00319042 _____ C:\WINDOWS\system32\Drivers\RTWAVES40.dat
2017-01-19 22:52 - 2016-08-06 12:44 - 00006786 _____ C:\WINDOWS\system32\Drivers\rtwavesEFX.dat
2017-01-19 22:52 - 2016-08-06 12:44 - 00002626 _____ C:\WINDOWS\system32\Drivers\rtwavesMFX.dat
2017-01-19 22:52 - 2016-08-06 12:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-01-19 22:52 - 2015-12-09 08:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-01-19 22:51 - 2015-12-09 08:21 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-01-19 20:18 - 2015-12-23 17:28 - 00000000 ___RD C:\Users\MIchal\Desktop\Light
2017-01-19 18:28 - 2015-12-23 19:21 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-18 19:57 - 2016-03-06 18:04 - 00007597 _____ C:\Users\MIchal\AppData\Local\Resmon.ResmonCfg
2017-01-18 19:53 - 2016-04-11 15:58 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-18 19:32 - 2016-10-26 16:25 - 20358232 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2017-01-18 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-18 19:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-17 03:51 - 2016-12-10 01:36 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-17 02:53 - 2015-12-09 08:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-17 02:24 - 2015-12-09 08:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-17 02:06 - 2016-08-06 12:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-01-17 01:15 - 2016-08-28 13:48 - 00000000 ____D C:\ProgramData\DriverTalent
2017-01-15 19:55 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-01-14 18:04 - 2016-05-11 14:58 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-01-14 16:10 - 2016-04-11 15:58 - 00000000 ____D C:\Users\MIchal\AppData\Local\Adobe
2017-01-13 21:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-13 21:48 - 2016-05-15 14:38 - 00000000 ____D C:\ProgramData\Corel
2017-01-13 17:55 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-11 18:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-11 18:15 - 2015-12-23 19:21 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 18:26 - 2016-12-19 17:00 - 00000000 ____D C:\Users\MIchal\AppData\Local\NVIDIA Corporation
2017-01-10 18:26 - 2016-12-19 16:18 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-10 18:26 - 2016-08-06 12:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-10 18:26 - 2015-12-23 01:40 - 00000000 ____D C:\Users\MIchal\AppData\Local\NVIDIA
2017-01-10 18:00 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-08 13:49 - 2015-12-23 01:39 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\Adobe
2017-01-04 16:59 - 2016-02-18 17:47 - 00000000 ____D C:\Users\MIchal\Downloads\Intel Components
2017-01-04 00:57 - 2016-12-11 19:12 - 00000000 ____D C:\Users\MIchal\AppData\Local\Ubisoft Game Launcher
2017-01-01 00:56 - 2016-12-04 15:44 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2016-12-31 17:24 - 2016-12-19 00:29 - 00027552 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO64A.SYS
2016-12-29 21:35 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2016-12-25 11:14 - 2016-12-17 16:30 - 00000000 ____D C:\Users\MIchal\AppData\Roaming\obs-studio
2016-12-23 18:29 - 2015-12-27 17:29 - 00000000 ____D C:\Users\MIchal\Documents\My Games
2016-12-23 00:13 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-23 00:13 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-02-21 17:46 - 2016-02-21 17:46 - 0000054 _____ () C:\Users\MIchal\AppData\Roaming\Camdata.ini
2016-02-21 17:46 - 2016-02-21 17:46 - 0000408 _____ () C:\Users\MIchal\AppData\Roaming\CamLayout.ini
2016-02-21 17:46 - 2016-02-21 17:46 - 0000408 _____ () C:\Users\MIchal\AppData\Roaming\CamShapes.ini
2016-02-21 17:46 - 2016-02-21 17:46 - 0004510 _____ () C:\Users\MIchal\AppData\Roaming\CamStudio.cfg
2015-12-23 01:41 - 2017-01-21 15:37 - 0000093 _____ () C:\Users\MIchal\AppData\Roaming\sp_data.sys
2016-02-21 18:07 - 2016-02-21 18:10 - 0003584 _____ () C:\Users\MIchal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-01-21 18:05 - 2017-01-21 18:05 - 0029696 _____ () C:\Users\MIchal\AppData\Local\MSGBOX.EXE
2016-03-06 18:04 - 2017-01-18 19:57 - 0007597 _____ () C:\Users\MIchal\AppData\Local\Resmon.ResmonCfg
2015-12-23 18:33 - 2015-12-23 18:33 - 0000003 _____ () C:\Users\MIchal\AppData\Local\updater.log
2015-12-23 18:33 - 2016-08-06 17:05 - 0000424 _____ () C:\Users\MIchal\AppData\Local\UserProducts.xml
2016-08-06 12:44 - 2016-08-06 12:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-21 05:28 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-21 05:28 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-21 05:28 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-20 17:52

==================== End of FRST.txt ============================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts-x32: Restriction <======= ATTENTION
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
U0 aswVmm; no ImagePath
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\ProgramData\DP45977C.lfl
C:\ProgramData\SetStretch.VBS

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#7 Příspěvek od Misho »

Zde

Fix result of Farbar Recovery Scan Tool (x64) Version: 18-01-2017
Ran by MIchal (21-01-2017 18:17:26) Run:1
Running from C:\Users\MIchal\Desktop
Loaded Profiles: MIchal (Available Profiles: MIchal)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts-x32: Restriction <======= ATTENTION
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
U0 aswVmm; no ImagePath
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\ProgramData\DP45977C.lfl
C:\ProgramData\SetStretch.VBS

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\Machine => moved successfully
HKCR\PROTOCOLS\Filter\application/x-mfe-ipt => key not found.
HKCR\CLSID\{3EF5086B-5478-4598-A054-786C45D75692} => key not found.
HKLM\System\CurrentControlSet\Services\aswVmm => key removed successfully
aswVmm => service removed successfully
C:\WINDOWS\LastGood.Tmp => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\ProgramData\SetStretch.VBS => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 51029597 B
Java, Flash, Steam htmlcache => 453679962 B
Windows/system/drivers => 815874 B
Edge => 950 B
Chrome => 389106442 B
Firefox => 3618048 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 97974 B
NetworkService => 6304 B
MIchal => 194830659 B

RecycleBin => 0 B
EmptyTemp: => 1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:17:36 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#9 Příspěvek od Misho »

Bohužel, stále stejné, zkusil jsem nyní restart, a stále mám hrozně zdlouhavou černou obrazovku se symbolem načítání, než se dostanu k přihlašovací obrazovce, a i ta poněkud trvá než mne pustí vůbec na plochu. O závadě s vypínaním nevím, to může trvat i týden než se opět noťas vypne. Jak říkám, ono je možné že u mne to bude i chybný hardware nějaký kvůli tomu vypínaní náhodnému a po různě dlouhé době - dny,době běhu systému. Nejspíš zítra udělám reinstal win10, a poté notebook nakonec i tak do servisu dám. Už se tím trápím pěknou dobu. A vážně nevím v čem je chyba.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#10 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#11 Příspěvek od Misho »

Tady je, doufám, že je to ono. :-)

Čas skenování: 20:58
Logovací soubor:
Správce: Ano

-Informace o softwaru-
Verze: 3.0.5.1299
Verze komponentů: 1.0.43
Aktualizovat verzi balíku komponent: 1.0.1071
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: LIGHT\MIchal

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 443736
Uplynulý čas: 2 min, 35 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#12 Příspěvek od Rudy »

Log je OK. Je to problém systému. Zkuste z přík. řádky příkazem msconfig spustit konfigurační okno systému a na záložkách "Po spuštění" a "Služby" odstranit zatržítka u ne- microsoftích služeb, s vyjímkou antiviru a ovladačů. Nastavení uložte a restartujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#13 Příspěvek od Misho »

Vyzkoušeno.. zkoušel jsem zakázat i úplně všechny ne-micr. služby, stejně tak nechat poue antivir,grafiky. Avšak stále stejné, úplně bezezměny. Problém je i například v safe-bootu.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119672
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola Logu prosím

#14 Příspěvek od Rudy »

Zkuste obnovu systému k datu, kdy korektně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Misho
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 21 led 2017 03:44
Bydliště: Plzeň

Re: Kontrola Logu prosím

#15 Příspěvek od Misho »

Bohužel to také nejde, díval jsem se a počítač z neznámého důvodu nemá žádné starší body obnovy k dispozici.. Proto jsem chtěl zkusit kompletní reinstal win10 přímo přes microsoft utilitku, zda alespoň přihlašovací problém poté zmizne na novém systému úplně. :-)
No Notebook se právě zase sám od sebe prostě vypl.. což mne tíží mnohem více jak i ten pomalý boot :-) A pokud to není vir.. tak věřím že přeinstal pomůže pak, ale to vypínání.. nejspíše to vidím na případnou reklamaci - servis.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“