Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pomalé spouštění a zahlcený systém

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Ve dnech 5.9. - 7.9.2025 budou někteří z nás na každoročním srazu teamu našeho fóra. V této době se může stát, že budete o něco déle čekat na naší odezvu. Děkujeme a omlouváme se.
Zamčeno
Zpráva
Autor
ceddrik
Návštěvník
Návštěvník
Příspěvky: 68
Registrován: 06 zář 2007 18:13
Bydliště: Ostrava
Kontaktovat uživatele:
Kontaktovat uživatele ceddrik

Pomalé spouštění a zahlcený systém

#1 Příspěvek od ceddrik »

Dobrý den, prosím o pomoc jsem zde po delší době tak snad dělám vše zprávně :D Dostal se mi pod ruce starší NTB od známé která si stěžuje že je pomalý a zahlcený . Chtěl bych Vás poprosit o pomoc při kontrole a čištění :-) Předem děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kacvik at 2017-09-04 09:57:09
Microsoft Windows 10 Pro
System drive C: has 223 GB (81%) free of 276 GB
Total RAM: 4061 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:57:16, on 4.9.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0953)
Boot mode: Normal

Running processes:
C:\Program Files\ASUS\Net4Switch\Net4Switch.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files\trend micro\Kacvik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.apsolo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=fmw
O4 - HKCU\..\Run: [Google Update] C:\Users\Kacvik\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Kacvik\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://ampeople.amrest.eu
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4f1c2e95-bd5e-42d4-bcec-276f6eb529ae}: NameServer =
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: FastBootAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @oem14.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\WINDOWS\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8621 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Elantech\ETDService.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
dashost.exe {3fc93c39-9977-49a6-9ee38b11c28c4846}
"C:\Windows\system32\FBAgent.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
C:\WINDOWS\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc


C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
"C:\Program Files\Elantech\ETDCtrl.exe"
sihost.exe
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
Atouch64.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\ASUS\Net4Switch\Net4Switch.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe"
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNetServiceDss -RestrictPrivileges -AccessKey 33044F5F-0077-9226-294B-844CF2403773 -Reinvoke
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 640 644 652 8192 648
"C:\Users\Kacvik\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core.job - C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000UA.job - C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Scheduled scanning task.job - C:\PROGRA~2\O2\STRAZC~1\apps\COMPUT~1\ANTI-V~1\fsav.exe /HARD /POLICY /SCHED /REPORT="C:\PROGRA~2\O2\STRAZC~1\apps\COMPUT~1\ANTI-V~1\report.txt"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-14 551840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-14 209824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-08-12 323072]
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-04-28 631808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Kacvik\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [2017-05-01 601168]
"OneDrive"=C:\Users\Kacvik\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-07-27 1536208]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe /MONITOR []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2011-05-18 72248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-05-18 3058304]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-07-13 2244096]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-19 170624]
"NPSStartup"= []
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe /lps=fmw []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"DSCAutomationHostEnabled"=2
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktopChanges"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-09-04 09:57:09 ----D---- C:\rsit
2017-09-04 09:57:09 ----D---- C:\Program Files\trend micro
2017-09-04 09:37:58 ----N---- C:\WINDOWS\SYSWOW64\IJRMF.exe
2017-09-04 09:30:27 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2017-09-04 06:28:46 ----HD---- C:\$WINDOWS.~BT
2017-09-04 01:24:20 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2017-09-04 01:24:18 ----A---- C:\WINDOWS\SYSWOW64\aspnet_counters.dll
2017-09-04 01:24:02 ----A---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2017-09-04 01:23:56 ----A---- C:\WINDOWS\SYSWOW64\msvcr100_clr0400.dll
2017-09-04 01:17:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2017-09-04 01:17:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2017-09-04 01:17:16 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-09-04 01:17:16 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-09-04 01:17:16 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2017-09-04 01:17:16 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\ErrorDetails.dll
2017-09-04 01:17:15 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-09-04 01:17:14 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2017-09-04 01:17:13 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2017-09-04 01:17:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-09-04 01:17:12 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2017-09-04 01:17:12 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-09-04 01:17:11 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-09-04 01:17:11 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2017-09-04 01:17:11 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2017-09-04 01:17:10 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-09-04 01:17:10 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-09-04 01:17:10 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-09-04 01:17:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-09-04 01:17:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-09-04 01:17:09 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2017-09-04 01:17:09 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2017-09-04 01:17:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2017-09-04 01:17:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2017-09-04 01:17:08 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2017-09-04 01:17:07 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-09-04 01:17:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2017-09-04 01:17:06 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-09-04 01:17:06 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-09-04 01:17:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2017-09-04 01:17:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2017-09-04 01:17:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-09-04 01:17:05 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2017-09-04 01:17:04 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2017-09-04 01:17:04 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-09-04 01:17:04 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-09-04 01:17:03 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2017-09-04 01:17:03 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-09-04 01:17:02 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-09-04 01:17:02 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-09-04 01:17:02 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-09-04 01:17:01 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2017-09-04 01:17:01 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-09-04 01:17:00 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2017-09-04 01:17:00 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2017-09-04 01:16:59 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-09-04 01:16:59 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2017-09-04 01:16:58 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-09-04 01:16:55 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2017-09-04 01:16:55 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\uReFS.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msrepl40.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msrd3x40.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msrd2x40.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msjtes40.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msjetoledb40.dll
2017-09-04 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\msjet40.dll
2017-09-04 01:16:53 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-09-04 01:16:52 ----A---- C:\WINDOWS\SYSWOW64\mstext40.dll
2017-09-04 01:16:52 ----A---- C:\WINDOWS\SYSWOW64\msltus40.dll
2017-09-04 01:16:52 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2017-09-04 01:16:52 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-09-04 01:16:52 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2017-09-04 01:16:52 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-09-04 01:16:51 ----A---- C:\WINDOWS\SYSWOW64\msxbde40.dll
2017-09-04 01:16:51 ----A---- C:\WINDOWS\SYSWOW64\mspbde40.dll
2017-09-04 01:16:50 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2017-09-04 01:16:50 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2017-09-04 01:16:50 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2017-09-04 01:16:49 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll
2017-09-04 01:16:49 ----A---- C:\WINDOWS\SYSWOW64\mswdat10.dll
2017-09-04 01:16:49 ----A---- C:\WINDOWS\SYSWOW64\msjter40.dll
2017-09-04 01:16:49 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2017-09-04 01:16:49 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2017-09-04 01:16:47 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2017-09-04 01:16:47 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-09-04 01:16:47 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2017-09-04 01:16:47 ----A---- C:\WINDOWS\SYSWOW64\container.dll
2017-09-04 01:16:47 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-09-04 01:16:46 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2017-09-04 01:16:46 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2017-09-04 01:16:46 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2017-09-04 01:16:46 ----A---- C:\WINDOWS\SYSWOW64\tokenbinding.dll
2017-09-04 01:16:46 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2017-09-04 01:16:46 ----A---- C:\WINDOWS\SYSWOW64\comuid.dll
2017-09-04 01:16:46 ----A---- C:\WINDOWS\system32\drivers\sdstor.sys
2017-09-04 01:16:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-09-04 01:16:45 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2017-09-04 01:16:45 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2017-09-04 01:16:45 ----A---- C:\WINDOWS\SYSWOW64\perfnet.dll
2017-09-04 01:16:45 ----A---- C:\WINDOWS\SYSWOW64\nshhttp.dll
2017-09-04 01:16:45 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2017-09-04 01:16:44 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2017-09-04 01:16:44 ----A---- C:\WINDOWS\SYSWOW64\iscsium.dll
2017-09-04 01:16:44 ----A---- C:\WINDOWS\SYSWOW64\httpapi.dll
2017-09-04 01:16:44 ----A---- C:\WINDOWS\SYSWOW64\FXSCOMEX.dll
2017-09-04 01:16:44 ----A---- C:\WINDOWS\SYSWOW64\fdeploy.dll
2017-09-04 01:16:43 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2017-09-04 01:16:43 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2017-09-04 01:16:43 ----A---- C:\WINDOWS\SYSWOW64\dabapi.dll
2017-09-04 01:16:43 ----A---- C:\WINDOWS\system32\drivers\scmdisk0101.sys
2017-09-04 01:16:42 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerUI.dll
2017-09-04 01:16:42 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2017-09-04 01:16:42 ----A---- C:\WINDOWS\SYSWOW64\frprov.dll
2017-09-04 01:16:42 ----A---- C:\WINDOWS\SYSWOW64\certmgr.dll
2017-09-04 01:16:36 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2017-09-04 01:16:36 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-09-04 01:16:36 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2017-09-04 01:16:36 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-09-04 01:16:36 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-09-04 01:16:36 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-09-04 01:16:35 ----A---- C:\WINDOWS\system32\tquery.dll
2017-09-04 01:16:30 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2017-09-04 01:16:25 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-09-04 01:16:25 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-09-04 01:16:25 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-09-04 01:16:13 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2017-09-04 01:16:13 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-09-04 01:16:13 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-09-04 01:16:13 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\rdpshell.exe
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\rdpinit.exe
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-09-04 01:16:12 ----A---- C:\WINDOWS\system32\efswrt.dll
2017-09-04 01:16:11 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-09-04 01:16:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-09-04 01:16:11 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2017-09-04 01:16:11 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2017-09-04 01:16:11 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-09-04 01:16:10 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2017-09-04 01:16:10 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2017-09-04 01:16:10 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-09-04 01:16:09 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-09-04 01:16:09 ----A---- C:\WINDOWS\system32\puiobj.dll
2017-09-04 01:16:08 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-09-04 01:16:08 ----A---- C:\WINDOWS\system32\usocore.dll
2017-09-04 01:16:07 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-09-04 01:16:07 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2017-09-04 01:16:07 ----A---- C:\WINDOWS\system32\mstsc.exe
2017-09-04 01:16:06 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-09-04 01:16:06 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-09-04 01:16:05 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2017-09-04 01:16:05 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-09-04 01:16:05 ----A---- C:\WINDOWS\system32\cscui.dll
2017-09-04 01:16:04 ----A---- C:\WINDOWS\system32\wmp.dll
2017-09-04 01:16:03 ----A---- C:\WINDOWS\system32\lsass.exe
2017-09-04 01:16:03 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-09-04 01:16:03 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-09-04 01:16:02 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-09-04 01:16:02 ----A---- C:\WINDOWS\system32\localspl.dll
2017-09-04 01:16:01 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-09-04 01:16:01 ----A---- C:\WINDOWS\system32\shell32.dll
2017-09-04 01:15:59 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-09-04 01:15:56 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-09-04 01:15:55 ----A---- C:\WINDOWS\system32\wlansvc.dll
2017-09-04 01:15:54 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-09-04 01:15:54 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-09-04 01:15:53 ----A---- C:\WINDOWS\system32\PeerDistSvc.dll
2017-09-04 01:15:53 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2017-09-04 01:15:50 ----A---- C:\WINDOWS\system32\mfps.dll
2017-09-04 01:15:45 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-09-04 01:15:45 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2017-09-04 01:15:45 ----A---- C:\WINDOWS\system32\drivers\pacer.sys
2017-09-04 01:15:44 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-09-04 01:15:44 ----A---- C:\WINDOWS\system32\perfnet.dll
2017-09-04 01:15:44 ----A---- C:\WINDOWS\system32\nshhttp.dll
2017-09-04 01:15:39 ----A---- C:\WINDOWS\system32\RdpRelayTransport.dll
2017-09-04 01:15:36 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-09-04 01:15:36 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2017-09-04 01:15:36 ----A---- C:\WINDOWS\system32\browser_broker.exe
2017-09-04 01:15:33 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-09-04 01:15:33 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-09-04 01:15:32 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-09-04 01:15:31 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-09-04 01:15:31 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-09-04 01:15:30 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-09-04 01:15:30 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-09-04 01:15:29 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-09-04 01:15:29 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-09-04 01:15:29 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-09-04 01:15:28 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-09-04 01:15:28 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-09-04 01:15:27 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-09-04 01:15:27 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-09-04 01:15:26 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-09-04 01:15:26 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-09-04 01:15:25 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-09-04 01:15:25 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-09-04 01:15:25 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-09-04 01:15:22 ----A---- C:\WINDOWS\system32\wininet.dll
2017-09-04 01:15:22 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-09-04 01:15:22 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-09-04 01:15:21 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-09-04 01:15:21 ----A---- C:\WINDOWS\system32\msxml3.dll
2017-09-04 01:15:20 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2017-09-04 01:15:20 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-09-04 01:15:19 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2017-09-04 01:15:19 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-09-04 01:15:19 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-09-04 01:15:19 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-09-04 01:15:18 ----A---- C:\WINDOWS\system32\wlidprov.dll
2017-09-04 01:15:18 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2017-09-04 01:15:18 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-09-04 01:15:18 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-09-04 01:15:17 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-09-04 01:15:17 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-09-04 01:15:12 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2017-09-04 01:15:12 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-09-04 01:15:11 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-09-04 01:15:11 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-09-04 01:15:11 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-09-04 01:15:10 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-09-04 01:15:10 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2017-09-04 01:15:09 ----A---- C:\WINDOWS\system32\werconcpl.dll
2017-09-04 01:15:09 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-09-04 01:15:09 ----A---- C:\WINDOWS\system32\dialclient.dll
2017-09-04 01:15:09 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-09-04 01:15:08 ----A---- C:\WINDOWS\system32\wc_storage.dll
2017-09-04 01:15:08 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2017-09-04 01:15:08 ----A---- C:\WINDOWS\system32\container.dll
2017-09-04 01:15:08 ----A---- C:\WINDOWS\system32\comuid.dll
2017-09-04 01:15:07 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-09-04 01:15:06 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-09-04 01:15:06 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2017-09-04 01:15:06 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-09-04 01:15:06 ----A---- C:\WINDOWS\system32\fdeploy.dll
2017-09-04 01:15:05 ----A---- C:\WINDOWS\system32\wcimage.dll
2017-09-04 01:15:05 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2017-09-04 01:15:05 ----A---- C:\WINDOWS\system32\httpapi.dll
2017-09-04 01:15:04 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-09-04 01:15:04 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2017-09-04 01:15:04 ----A---- C:\WINDOWS\system32\frprov.dll
2017-09-04 01:15:04 ----A---- C:\WINDOWS\system32\drivers\wcnfs.sys
2017-09-04 01:15:01 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-09-04 01:15:00 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2017-09-04 01:15:00 ----A---- C:\WINDOWS\system32\ErrorDetails.dll
2017-09-04 01:15:00 ----A---- C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-09-04 01:15:00 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-09-04 01:14:59 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-04 01:14:59 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-09-04 01:14:58 ----A---- C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-09-04 01:14:58 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-09-04 01:14:58 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-09-04 01:14:58 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-09-04 01:14:58 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-09-04 01:14:57 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-09-04 01:14:57 ----A---- C:\WINDOWS\system32\uReFS.dll
2017-09-04 01:14:57 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-09-04 01:14:57 ----A---- C:\WINDOWS\system32\dlnashext.dll
2017-09-04 01:14:56 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-09-04 01:14:56 ----A---- C:\WINDOWS\explorer.exe
2017-09-04 01:14:55 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-09-04 01:14:54 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-09-04 01:14:54 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll
2017-09-04 01:14:54 ----A---- C:\WINDOWS\system32\sbe.dll
2017-09-04 01:14:54 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-09-04 01:14:53 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-09-04 01:14:53 ----A---- C:\WINDOWS\system32\wer.dll
2017-09-04 01:14:53 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-09-04 01:14:53 ----A---- C:\WINDOWS\system32\CPFilters.dll
2017-09-04 01:14:52 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-09-04 01:14:52 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-09-04 01:14:52 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-09-04 01:14:51 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-09-04 01:14:51 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-09-04 01:14:50 ----A---- C:\WINDOWS\system32\twinui.dll
2017-09-04 01:14:50 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-09-04 01:14:45 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-09-04 01:14:43 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-09-04 01:14:43 ----A---- C:\WINDOWS\system32\mispace.dll
2017-09-04 01:14:42 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-09-04 01:14:42 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-09-04 01:14:41 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-09-04 01:14:40 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2017-09-04 01:14:40 ----A---- C:\WINDOWS\system32\apprepsync.dll
2017-09-04 01:14:39 ----A---- C:\WINDOWS\system32\schannel.dll
2017-09-04 01:14:39 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2017-09-04 01:14:39 ----A---- C:\WINDOWS\system32\autoconv.exe
2017-09-04 01:14:39 ----A---- C:\WINDOWS\system32\apprepapi.dll
2017-09-04 01:14:38 ----A---- C:\WINDOWS\system32\ubpm.dll
2017-09-04 01:14:38 ----A---- C:\WINDOWS\system32\autochk.exe
2017-09-04 01:14:38 ----A---- C:\WINDOWS\system32\autofmt.exe
2017-09-04 01:14:37 ----A---- C:\WINDOWS\system32\werui.dll
2017-09-04 01:14:37 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-09-04 01:14:36 ----A---- C:\WINDOWS\system32\untfs.dll
2017-09-04 01:14:36 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2017-09-04 01:14:36 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2017-09-04 01:14:35 ----A---- C:\WINDOWS\system32\tokenbinding.dll
2017-09-04 01:14:35 ----A---- C:\WINDOWS\system32\netlogon.dll
2017-09-04 01:14:35 ----A---- C:\WINDOWS\system32\Faultrep.dll
2017-09-04 01:14:35 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2017-09-04 01:14:35 ----A---- C:\WINDOWS\system32\dab.dll
2017-09-04 01:14:34 ----A---- C:\WINDOWS\system32\wermgr.exe
2017-09-04 01:14:34 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2017-09-04 01:14:34 ----A---- C:\WINDOWS\system32\WerFault.exe
2017-09-04 01:14:34 ----A---- C:\WINDOWS\system32\drivers\vmbkmclr.sys
2017-09-04 01:14:34 ----A---- C:\WINDOWS\system32\apisetschema.dll
2017-09-04 01:14:33 ----A---- C:\WINDOWS\system32\profsvcext.dll
2017-09-04 01:14:33 ----A---- C:\WINDOWS\system32\iscsium.dll
2017-09-04 01:14:33 ----A---- C:\WINDOWS\system32\dabapi.dll
2017-09-04 01:14:32 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2017-09-04 01:14:32 ----A---- C:\WINDOWS\system32\wersvc.dll
2017-09-04 01:14:32 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-09-04 01:14:32 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2017-09-04 01:14:31 ----A---- C:\WINDOWS\system32\srvsvc.dll
2017-09-04 01:14:31 ----A---- C:\WINDOWS\system32\certmgr.dll
2017-09-04 01:14:30 ----A---- C:\WINDOWS\system32\windowslivelogin.dll
2017-09-04 01:14:30 ----A---- C:\WINDOWS\system32\TokenBrokerUI.dll
2017-09-04 00:45:35 ----A---- C:\WINDOWS\system32\devinv.dll
2017-09-04 00:45:35 ----A---- C:\WINDOWS\system32\dcntel.dll
2017-09-04 00:45:34 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\invagent.dll
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\aepic.dll
2017-09-04 00:45:34 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-09-04 00:45:33 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-09-03 22:59:00 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-09-03 22:45:13 ----D---- C:\WINDOWS\system32\appmgmt

======List of files/folders modified in the last 1 month======

2017-09-04 09:57:15 ----D---- C:\WINDOWS\Prefetch
2017-09-04 09:57:09 ----RD---- C:\Program Files
2017-09-04 09:54:12 ----D---- C:\WINDOWS\Temp
2017-09-04 09:47:15 ----D---- C:\WINDOWS\system32\Tasks
2017-09-04 09:46:37 ----D---- C:\WINDOWS\INF
2017-09-04 09:42:44 ----A---- C:\WINDOWS\system32\BootTime.ini
2017-09-04 09:42:08 ----D---- C:\WINDOWS\system32\SleepStudy
2017-09-04 09:42:08 ----D---- C:\WINDOWS\System32
2017-09-04 09:42:08 ----D---- C:\WINDOWS\Minidump
2017-09-04 09:42:06 ----D---- C:\Windows
2017-09-04 09:42:06 ----D---- C:\Users\Kacvik\AppData\Roaming\AVG
2017-09-04 09:42:06 ----AD---- C:\ProgramData\AVG
2017-09-04 09:42:04 ----D---- C:\Program Files (x86)\AVG
2017-09-04 09:42:00 ----D---- C:\WINDOWS\system32\drivers
2017-09-04 09:40:01 ----D---- C:\WINDOWS\system32\sru
2017-09-04 09:37:58 ----D---- C:\WINDOWS\SysWOW64
2017-09-04 09:37:53 ----HD---- C:\Program Files\WindowsApps
2017-09-04 09:37:53 ----D---- C:\WINDOWS\AppReadiness
2017-09-04 09:34:47 ----D---- C:\WINDOWS\system32\DriverStore
2017-09-04 09:31:57 ----SHD---- C:\WINDOWS\Installer
2017-09-04 09:31:56 ----SHD---- C:\Config.Msi
2017-09-04 09:31:19 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2017-09-04 09:31:06 ----D---- C:\WINDOWS\SoftwareDistribution
2017-09-04 09:26:38 ----D---- C:\Users\Kacvik\AppData\Roaming\DAEMON Tools Lite
2017-09-04 09:25:02 ----DC---- C:\WINDOWS\Panther
2017-09-04 09:25:02 ----D---- C:\WINDOWS\ModemLogs
2017-09-04 09:25:01 ----D---- C:\WINDOWS\debug
2017-09-04 09:16:45 ----AD---- C:\ProgramData\Nero
2017-09-04 09:16:34 ----RD---- C:\Program Files (x86)
2017-09-04 08:59:28 ----A---- C:\WINDOWS\Irremote.ini
2017-09-04 08:28:01 ----HD---- C:\ProgramData
2017-09-04 07:58:58 ----RD---- C:\WINDOWS\Microsoft.NET
2017-09-04 07:57:54 ----D---- C:\WINDOWS\system32\config
2017-09-04 07:36:41 ----D---- C:\Program Files (x86)\StepMania
2017-09-04 07:33:43 ----D---- C:\ProgramData\f-secure
2017-09-04 07:29:02 ----D---- C:\WINDOWS\system32\catroot2
2017-09-04 07:28:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-04 07:26:23 ----D---- C:\WINDOWS\system32\WDI
2017-09-04 07:21:34 ----A---- C:\WINDOWS\system32\Defrag.ini
2017-09-04 07:19:08 ----D---- C:\ProgramData\Skype
2017-09-04 07:19:06 ----RD---- C:\Program Files (x86)\Skype
2017-09-04 07:19:06 ----D---- C:\Program Files (x86)\Common Files
2017-09-04 06:50:19 ----RD---- C:\WINDOWS\assembly
2017-09-04 06:15:34 ----D---- C:\WINDOWS\WinSxS
2017-09-04 06:14:57 ----D---- C:\Program Files (x86)\Google
2017-09-04 06:09:43 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2017-09-04 06:09:43 ----D---- C:\WINDOWS\SYSWOW64\en-US
2017-09-04 06:09:43 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-09-04 06:09:36 ----D---- C:\WINDOWS\system32\wbem
2017-09-04 06:09:36 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-09-04 06:09:34 ----D---- C:\WINDOWS\system32\oobe
2017-09-04 06:09:34 ----D---- C:\WINDOWS\system32\migration
2017-09-04 06:09:33 ----D---- C:\WINDOWS\system32\inetsrv
2017-09-04 06:09:33 ----D---- C:\WINDOWS\system32\en-US
2017-09-04 06:09:33 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2017-09-04 06:09:33 ----D---- C:\WINDOWS\system32\cs-CZ
2017-09-04 06:09:25 ----D---- C:\WINDOWS\ShellExperiences
2017-09-04 06:09:25 ----D---- C:\WINDOWS\Provisioning
2017-09-04 06:09:25 ----D---- C:\WINDOWS\PolicyDefinitions
2017-09-04 06:09:24 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-09-04 06:09:24 ----RD---- C:\Program Files\Windows Defender
2017-09-04 06:09:24 ----D---- C:\WINDOWS\bcastdvr
2017-09-04 06:09:24 ----D---- C:\Program Files\Windows Photo Viewer
2017-09-04 06:09:24 ----D---- C:\Program Files\Windows Mail
2017-09-04 06:09:24 ----D---- C:\Program Files\Windows Defender Advanced Threat Protection
2017-09-04 06:09:24 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-09-04 06:09:24 ----D---- C:\Program Files (x86)\Windows Defender
2017-09-04 06:09:23 ----D---- C:\Program Files\Common Files\System
2017-09-04 01:50:33 ----D---- C:\WINDOWS\CbsTemp
2017-09-03 23:58:47 ----D---- C:\WINDOWS\Registration
2017-09-03 23:49:01 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-09-03 23:48:39 ----D---- C:\Program Files (x86)\MyFree Codec
2017-09-03 23:48:14 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-03 23:47:47 ----AD---- C:\Program Files (x86)\ManyCam
2017-09-03 23:43:12 ----D---- C:\Program Files (x86)\Canon
2017-09-03 23:41:42 ----D---- C:\WINDOWS\twain_32
2017-09-03 23:41:42 ----D---- C:\Users\Kacvik\AppData\Roaming\Canon
2017-09-03 23:35:56 ----D---- C:\Program Files (x86)\NCH Software
2017-09-03 23:34:58 ----D---- C:\Program Files (x86)\T-Mobile
2017-09-03 23:33:13 ----D---- C:\WINDOWS\system32\FxsTmp
2017-09-03 23:27:13 ----D---- C:\Program Files\Common Files
2017-09-03 23:23:42 ----D---- C:\Users\Kacvik\AppData\Roaming\ESTsoft
2017-09-03 23:23:42 ----D---- C:\Program Files (x86)\ESTsoft
2017-09-03 23:23:26 ----D---- C:\ProgramData\ESTsoft
2017-09-03 23:08:21 ----D---- C:\ProgramData\ScanSoft
2017-09-03 22:54:43 ----D---- C:\Program Files (x86)\GRETECH
2017-09-03 22:44:51 ----SD---- C:\ProgramData\Microsoft
2017-09-03 22:44:51 ----D---- C:\Program Files (x86)\Microsoft
2017-09-03 22:30:09 ----D---- C:\Users\Kacvik\AppData\Roaming\Samsung
2017-09-03 22:30:08 ----D---- C:\Program Files (x86)\Samsung
2017-09-03 22:30:06 ----D---- C:\ProgramData\Samsung
2017-09-03 20:17:39 ----SHD---- C:\System Volume Information
2017-08-15 04:32:56 ----D---- C:\WINDOWS\system32\MRT
2017-08-15 04:23:45 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-08-10 17:07:00 ----D---- C:\WINDOWS\system32\Macromed
2017-08-10 17:06:57 ----D---- C:\WINDOWS\SYSWOW64\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\WINDOWS\system32\drivers\AsDsm.sys [2011-05-18 35384]
R0 iaStor;@oem49.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2009-06-04 408600]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R0 lullaby;lullaby; C:\WINDOWS\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-07-16 88576]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2016-07-16 8192]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2016-07-16 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2016-07-16 78336]
R3 athr;@netathrx.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athwnx.sys [2016-07-16 4233728]
R3 ETD;@oem10.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-10-07 525512]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-03-23 10627744]
R3 kbfiltr;@oem66.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2009-07-20 15416]
R3 L1E;@netl1e64.inf,%L1E.Service.DispName%;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1E62x64.sys [2016-07-16 59904]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2016-10-04 175616]
R3 MTsensor;@oem85.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATK64AMD.sys [2009-05-13 15928]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2016-07-16 105824]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2016-07-16 101216]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2016-07-16 58720]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2016-07-16 61792]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-06-21 88416]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2016-07-16 32096]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 AmUStor;@oem17.inf,%AmUStor.SvcDesc%;AM USB Stroage Driver; C:\WINDOWS\system32\drivers\AmUStor.SYS [2015-07-15 101040]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2016-09-15 127328]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2016-07-17 157024]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2016-07-17 141152]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2016-07-16 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2016-07-16 38912]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-09-10 118272]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2016-07-16 20480]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2016-07-16 50016]
S3 huawei_enumerator;huawei_enumerator; C:\WINDOWS\System32\drivers\ew_jubusenum.sys []
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-10-04 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2016-07-16 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2016-07-16 176384]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2016-07-16 526176]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 ManyCam;@oem54.inf,%ManyCam.DeviceDesc%;ManyCam Virtual Webcam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [2014-07-28 49264]
S3 mcaudrv_simple;@oem87.inf,%mcaudrv_simple.SvcDesc%;ManyCam Virtual Microphone; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [2014-05-13 35440]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2016-07-16 842584]
S3 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2016-07-17 179040]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2016-07-16 108896]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2016-07-16 928608]
S3 rimvndis;@oem26.inf,%rimvndis.DeviceDesc%;BlackBerry Virtual Private Network; C:\WINDOWS\System32\Drivers\rimvndis6_AMD64.sys [2014-11-28 17920]
S3 RimVSerPort;@oem69.inf,%RimVSerPort%;RIM Virtual Serial Port v2; C:\WINDOWS\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2017-07-12 124928]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CDPUserSvc_3e6d2;CDPUserSvc_3e6d2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-10-07 144072]
R2 FastBootAgent;FastBootAgent; C:\Windows\system32\FBAgent.exe [2009-08-21 356480]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2016-10-04 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
R2 OneSyncSvc_3e6d2;Hostitel synchronizace_3e6d2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
R3 PimIndexMaintenanceSvc_3e6d2;Data kontaktů_3e6d2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S2 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 MessagingService_3e6d2;Služba zasílání zpráv_3e6d2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-10 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2016-07-16 93184]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2017-08-01 2889888]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-04 1312768]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2016-07-16 287744]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2017-06-21 822624]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-04-21 52856]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2016-07-16 44496]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2016-07-16 44496]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119490
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomalé spouštění a zahlcený systém

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ceddrik
Návštěvník
Návštěvník
Příspěvky: 68
Registrován: 06 zář 2007 18:13
Bydliště: Ostrava
Kontaktovat uživatele:
Kontaktovat uživatele ceddrik

Re: Pomalé spouštění a zahlcený systém

#3 Příspěvek od ceddrik »

# AdwCleaner 7.0.2.1 - Logfile created on Mon Sep 04 11:22:34 2017
# Updated on 2017/29/08 by Malwarebytes
# Running on Windows 10 Pro (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Program Files (x86)\ICQ6Toolbar
Deleted: C:\ProgramData\AVG Security Toolbar
Deleted: C:\Users\All Users\AVG Security Toolbar
Deleted: C:\Program Files (x86)\myfree codec
Deleted: C:\ProgramData\ICQ\ICQNewTab
Deleted: C:\Users\All Users\ICQ\ICQNewTab
Deleted: C:\ProgramData\Ask
Deleted: C:\Users\All Users\Ask
Deleted: C:\ProgramData\ICQ\ICQToolbar
Deleted: C:\Users\All Users\ICQ\ICQToolbar
Deleted: C:\ProgramData\apn
Deleted: C:\Users\All Users\apn
Deleted: C:\Users\Kacvik\AppData\Roaming\IHlpr
Deleted: C:\Users\Kacvik\AppData\Roaming\mystarttb
Deleted: C:\Users\mamka\AppData\LocalLow\mystarttb
Deleted: C:\ProgramData\ESTsoft
Deleted: C:\Program Files (x86)\ESTsoft
Deleted: C:\Users\All Users\ESTsoft
Deleted: C:\Users\Kacvik\AppData\Roaming\ESTsoft
Deleted: C:\Users\mamka\AppData\Roaming\ESTsoft
Deleted: C:\ProgramData\Avg_Update_0117tb
Deleted: C:\ProgramData\Avg_Update_0516tb
Deleted: C:\ProgramData\Avg_Update_1216tb


***** [ Files ] *****

Deleted: C:\Users\Kacvik\AppData\Local\Temp\mystart-toolbar.xml


***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Data] - HKCU\Software\Microsoft\Internet Explorer\Main|ICQ Search [http:\\search.icq.com\search\results.php?q={searchTerms}&ch_id=osd]
Deleted: [Key] - HKU\S-1-5-21-3088349659-500496727-3994943973-1000\Software\APN PIP
Deleted: [Key] - HKCU\Software\APN PIP
Deleted: [Key] - HKU\.DEFAULT\Software\VNT
Deleted: [Key] - HKU\S-1-5-18\Software\VNT
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB24E92-62C4-4C53-95D2-65F9EED476BC}
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Deleted: [Value] - HKCU\Software\Microsoft\Internet Explorer\Main|ICQ Search
Deleted: [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork
Deleted: [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork
Deleted: [Key] - HKLM\SOFTWARE\Conduit
Deleted: [Key] - HKU\S-1-5-21-3088349659-500496727-3994943973-1000\Software\Conduit
Deleted: [Key] - HKCU\Software\Conduit
Deleted: [Key] - HKLM\SOFTWARE\ICQ\ICQToolbar
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolbar
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2159D33-3CE2-401B-8967-1B270628A311}
Deleted: [Key] - HKU\S-1-5-21-3088349659-500496727-3994943973-1000\Software\Softonic
Deleted: [Key] - HKCU\Software\Softonic
Deleted: [Key] - HKLM\SOFTWARE\Speedchecker Limited
Deleted: [Key] - HKU\S-1-5-21-3088349659-500496727-3994943973-1000\Software\PRODUCTSETUP
Deleted: [Key] - HKCU\Software\PRODUCTSETUP


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [3975 B] - [2017/9/4 11:19:53]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119490
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomalé spouštění a zahlcený systém

#4 Příspěvek od Rudy »

Teď dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ceddrik
Návštěvník
Návštěvník
Příspěvky: 68
Registrován: 06 zář 2007 18:13
Bydliště: Ostrava
Kontaktovat uživatele:
Kontaktovat uživatele ceddrik

Re: Pomalé spouštění a zahlcený systém

#5 Příspěvek od ceddrik »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
Ran by Kacvik (administrator) on KACVIK-PC (04-09-2017 14:06:35)
Running from C:\Users\Kacvik\Desktop
Loaded Profiles: Kacvik (Available Profiles: Kacvik & mamka & DefaultAppPool)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe
(ASUS) C:\Program Files\ASUS\Net4Switch\Net4Switch.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
(ASUS) C:\Windows\AsScrPro.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Google Inc.) C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1561_none_7ef6e89821f9a6be\TiWorker.exe
(Google Inc.) C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323072 2009-08-12] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2244096 2009-07-13] (VIA)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [6859392 2009-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [170624 2009-08-19] (ASUS)
HKLM-x32\...\Run: [NPSStartup] => [X]
HKLM-x32\...\Run: [AvgUi] => "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=fmw
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\...\Run: [Google Update] => C:\Users\Kacvik\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-05-01] (Google Inc.)
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\...\Run: [CCleaner Monitoring] => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [152064 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk [2011-05-18]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{1d6d409f-1ddd-4d8e-8ebe-c1ae4ccdb38d}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{4f1c2e95-bd5e-42d4-bcec-276f6eb529ae}: [NameServer]
Tcpip\..\Interfaces\{dedda089-2ad2-44d7-bf7e-0dee5d662d86}: [DhcpNameServer] 192.168.1.1 0.0.0.0

Internet Explorer:
==================
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.apsolo.com
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={664E4A84-761E-435F-8A28-DF0D30CBCFC0}&mid=8707c0363b3847cca7f0f1867691f6ab-94dc70cfae4024ef8a110d2a32403b899fe1754a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2016-04-18 08:18:19&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen=ms&pr=m ... earchTerms}
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={664E4A84-761E-435F-8A28-DF0D30CBCFC0}&mid=8707c0363b3847cca7f0f1867691f6ab-94dc70cfae4024ef8a110d2a32403b899fe1754a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2016-04-18 08:18:19&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-14] (Oracle Corporation)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-14] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File

FireFox:
========
FF ProfilePath: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default [2017-09-04]
FF user.js: detected! => C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\user.js [2015-11-07]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\xjkfozud.default -> AVG Secure Search
FF Homepage: Mozilla\Firefox\Profiles\xjkfozud.default -> hxxp://google.apsolo.com/
FF Extension: (AVG SafePrice) - C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\Extensions\sp@avg.com.xpi [2016-11-16]
FF Extension: (Google Translator for Firefox) - C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\Extensions\translator@zoli.bod.xpi [2017-02-03]
FF Extension: (ICQ Toolbar) - C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-26] [not signed]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-1.xml [2016-03-14]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-10.xml [2012-01-16]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-11.xml [2012-02-26]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-12.xml [2012-04-01]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-13.xml [2012-05-24]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-14.xml [2012-06-09]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-15.xml [2012-06-22]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-16.xml [2012-07-24]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-17.xml [2012-07-31]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-2.xml [2011-07-16]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-3.xml [2011-08-19]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-4.xml [2011-08-19]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-5.xml [2011-09-04]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-6.xml [2011-09-12]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-7.xml [2011-10-04]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-8.xml [2011-10-04]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin-9.xml [2011-11-09]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin.gif [2012-07-24]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin.src [2012-07-24]
FF SearchPlugin: C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\searchplugins\icqplugin.xml [2011-06-28]
FF HKU\S-1-5-21-3088349659-500496727-3994943973-1000\...\Firefox\Extensions: [customsearch@apsolo.com] - C:\Program Files (x86)\SMRecorder\scripts\firefox
FF Extension: (Custom Search) - C:\Program Files (x86)\SMRecorder\scripts\firefox [2015-11-07] [not signed]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystarttb.xml [2014-10-22]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2017-02-06]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-10] ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 -> C:\Windows\system32\npDeployJava1.dll [2013-01-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-01-14] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-10] ()
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin HKU\S-1-5-21-3088349659-500496727-3994943973-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Kacvik\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
FF Plugin HKU\S-1-5-21-3088349659-500496727-3994943973-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Kacvik\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Kacvik\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Kacvik\AppData\Local\Google\Chrome\User Data\Default [2017-09-04]
CHR Extension: (Skype) - C:\Users\Kacvik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-09-03]
CHR Extension: (AVG SafePrice) - C:\Users\Kacvik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2017-09-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Kacvik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-03]
CHR Extension: (Chrome Media Router) - C:\Users\Kacvik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-03]
CHR HKU\S-1-5-21-3088349659-500496727-3994943973-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dghncoeocefmhkhiphdgikkamjeglbfh] - C:\Program Files (x86)\mystarttb\chrome-newtab-search.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
StartMenuInternet: Google Chrome.Z5II5CAR7I7NL2546QLXAMR4DY - C:\Users\Kacvik\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ADSMService; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.) [File not signed]
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] () [File not signed]
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corp.)
R2 FastBootAgent; C:\Windows\system32\FBAgent.exe [356480 2009-08-21] (ASUSTeK Computer Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889888 2017-08-01] (Microsoft Corporation)
S3 swprv; C:\WINDOWS\System32\swprv.dll [467456 2016-07-16] (Microsoft Corporation) [File not signed]
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [33240 2015-12-09] (VIA Technologies, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-08-01] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [15416 2009-07-20] ( )
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R1 MpKsl83e6c8fd; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2835A8FE-5DA8-4D0D-A499-199A154FAAAA}\MpKsl83e6c8fd.sys [44928 2017-09-04] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 rimvndis; C:\WINDOWS\System32\Drivers\rimvndis6_AMD64.sys [17920 2014-11-28] (Research in Motion Limited)
S3 RimVSerPort; C:\WINDOWS\system32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-04 14:06 - 2017-09-04 14:07 - 000017748 _____ C:\Users\Kacvik\Desktop\FRST.txt
2017-09-04 14:06 - 2017-09-04 14:06 - 002395648 _____ (Farbar) C:\Users\Kacvik\Desktop\FRST64.exe
2017-09-04 14:06 - 2017-09-04 14:06 - 000000000 ____D C:\FRST
2017-09-04 14:05 - 2017-09-04 14:06 - 002395648 _____ (Farbar) C:\Users\Kacvik\Downloads\FRST64.exe
2017-09-04 13:17 - 2017-09-04 13:19 - 000000000 ____D C:\AdwCleaner
2017-09-04 13:17 - 2017-09-04 13:17 - 008182736 _____ (Malwarebytes) C:\Users\Kacvik\Downloads\adwcleaner_7.0.2.1.exe
2017-09-04 13:17 - 2017-09-04 13:17 - 008182736 _____ (Malwarebytes) C:\Users\Kacvik\Desktop\adwcleaner_7.0.2.1.exe
2017-09-04 12:14 - 2017-09-04 12:14 - 012823230 _____ C:\Users\Kacvik\Downloads\SŽDC D31.pdf
2017-09-04 09:57 - 2017-09-04 09:57 - 000000000 ____D C:\rsit
2017-09-04 09:57 - 2017-09-04 09:57 - 000000000 ____D C:\Program Files\trend micro
2017-09-04 09:56 - 2017-09-04 09:57 - 001222144 _____ C:\Users\Kacvik\Desktop\RSITx64.exe
2017-09-04 09:56 - 2017-09-04 09:56 - 001222144 _____ C:\Users\Kacvik\Downloads\RSITx64.exe
2017-09-04 09:46 - 2017-09-04 09:46 - 000000017 _____ C:\Users\Kacvik\AppData\Local\resmon.resmoncfg
2017-09-04 09:42 - 2017-09-04 09:42 - 588339201 _____ C:\WINDOWS\MEMORY.DMP
2017-09-04 09:42 - 2017-09-04 09:42 - 000505628 _____ C:\WINDOWS\Minidump\090417-44000-01.dmp
2017-09-04 09:37 - 2006-03-29 07:05 - 000032768 ____N (CANON INC.) C:\WINDOWS\SysWOW64\IJRMF.exe
2017-09-04 09:21 - 2017-09-04 09:21 - 009791816 _____ (Piriform Ltd) C:\Users\Kacvik\Downloads\ccsetup533.exe
2017-09-04 06:28 - 2017-09-04 06:28 - 000000000 ___HD C:\$WINDOWS.~BT
2017-09-04 01:24 - 2017-04-21 23:53 - 000029376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2017-09-04 01:24 - 2017-04-21 23:50 - 000030912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2017-09-04 01:24 - 2017-04-21 23:50 - 000018592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2017-09-04 01:23 - 2017-04-21 23:53 - 000018600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2017-09-04 01:17 - 2017-08-01 19:20 - 002264344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-09-04 01:17 - 2017-08-01 19:20 - 001431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-09-04 01:17 - 2017-08-01 19:20 - 000781144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-09-04 01:17 - 2017-08-01 19:20 - 000116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-09-04 01:17 - 2017-08-01 19:19 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-09-04 01:17 - 2017-08-01 19:16 - 006665952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-09-04 01:17 - 2017-08-01 19:16 - 004023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-09-04 01:17 - 2017-08-01 19:16 - 001845512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-09-04 01:17 - 2017-08-01 19:15 - 001360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-09-04 01:17 - 2017-08-01 19:15 - 001277856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-09-04 01:17 - 2017-08-01 19:15 - 000981888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-09-04 01:17 - 2017-08-01 19:10 - 000306800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2017-09-04 01:17 - 2017-08-01 19:07 - 005686784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-09-04 01:17 - 2017-08-01 18:56 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2017-09-04 01:17 - 2017-08-01 18:56 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2017-09-04 01:17 - 2017-08-01 18:55 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-09-04 01:17 - 2017-08-01 18:54 - 000505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-09-04 01:17 - 2017-08-01 18:54 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2017-09-04 01:17 - 2017-08-01 18:54 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-09-04 01:17 - 2017-08-01 18:53 - 000557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-09-04 01:17 - 2017-08-01 18:52 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2017-09-04 01:17 - 2017-08-01 18:51 - 000483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2017-09-04 01:17 - 2017-08-01 18:51 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-09-04 01:17 - 2017-08-01 18:50 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-09-04 01:17 - 2017-08-01 18:50 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-09-04 01:17 - 2017-08-01 18:50 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-09-04 01:17 - 2017-08-01 18:49 - 004615168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-09-04 01:17 - 2017-08-01 18:48 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2017-09-04 01:17 - 2017-08-01 18:47 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sbe.dll
2017-09-04 01:17 - 2017-08-01 18:45 - 002333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-09-04 01:17 - 2017-08-01 18:41 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2017-09-04 01:17 - 2017-08-01 18:39 - 007626240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-09-04 01:17 - 2017-08-01 18:39 - 001255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-09-04 01:17 - 2017-08-01 18:37 - 002641920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-09-04 01:17 - 2017-08-01 18:37 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-09-04 01:17 - 2017-08-01 18:36 - 007468544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-09-04 01:17 - 2017-08-01 18:35 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-09-04 01:17 - 2017-08-01 18:34 - 001170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-09-04 01:17 - 2017-08-01 18:34 - 000709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-09-04 01:17 - 2017-08-01 18:33 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2017-09-04 01:17 - 2017-08-01 18:32 - 002682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-09-04 01:17 - 2017-08-01 18:32 - 002648576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-09-04 01:17 - 2017-08-01 18:31 - 001988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-09-04 01:17 - 2017-08-01 18:31 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-09-04 01:17 - 2017-08-01 18:31 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-09-04 01:17 - 2017-08-01 18:31 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2017-09-04 01:17 - 2017-08-01 18:31 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-09-04 01:17 - 2017-08-01 18:31 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2017-09-04 01:17 - 2017-08-01 18:30 - 002997248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-09-04 01:17 - 2017-08-01 18:30 - 002482688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-09-04 01:17 - 2017-08-01 18:30 - 001886720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-09-04 01:17 - 2017-08-01 18:30 - 001556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-09-04 01:17 - 2017-08-01 18:30 - 001013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2017-09-04 01:17 - 2017-08-01 18:30 - 000751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-09-04 01:17 - 2017-08-01 18:30 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-09-04 01:17 - 2017-08-01 18:29 - 003106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2017-09-04 01:17 - 2017-08-01 18:28 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2017-09-04 01:17 - 2017-07-12 07:55 - 000607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-09-04 01:17 - 2017-07-12 07:55 - 000111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2017-09-04 01:17 - 2017-07-12 07:52 - 004312760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-09-04 01:17 - 2017-07-12 07:29 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-09-04 01:17 - 2017-07-12 07:25 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-09-04 01:17 - 2017-07-12 07:23 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-09-04 01:17 - 2017-07-12 07:19 - 006474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-09-04 01:17 - 2017-07-12 07:18 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-09-04 01:17 - 2017-07-12 07:09 - 000641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-09-04 01:17 - 2017-07-12 07:07 - 001572352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-09-04 01:17 - 2017-03-04 08:05 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2017-09-04 01:16 - 2017-08-01 21:27 - 000118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-09-04 01:16 - 2017-08-01 21:22 - 001860288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-09-04 01:16 - 2017-08-01 21:21 - 000857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-09-04 01:16 - 2017-08-01 21:20 - 000557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-09-04 01:16 - 2017-08-01 21:18 - 008169536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-09-04 01:16 - 2017-08-01 21:18 - 004260064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-09-04 01:16 - 2017-08-01 21:18 - 001983408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-09-04 01:16 - 2017-08-01 21:18 - 001702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-09-04 01:16 - 2017-08-01 21:18 - 000092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-09-04 01:16 - 2017-08-01 21:17 - 022220856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-09-04 01:16 - 2017-08-01 21:17 - 001072248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-09-04 01:16 - 2017-08-01 21:13 - 002532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-09-04 01:16 - 2017-08-01 20:58 - 000299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2017-09-04 01:16 - 2017-08-01 20:57 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2017-09-04 01:16 - 2017-08-01 20:57 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-09-04 01:16 - 2017-08-01 20:53 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-09-04 01:16 - 2017-08-01 20:52 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-09-04 01:16 - 2017-08-01 20:51 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-09-04 01:16 - 2017-08-01 20:48 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-09-04 01:16 - 2017-08-01 20:47 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-09-04 01:16 - 2017-08-01 20:46 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-09-04 01:16 - 2017-08-01 20:46 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2017-09-04 01:16 - 2017-08-01 20:46 - 000260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-09-04 01:16 - 2017-08-01 20:45 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-09-04 01:16 - 2017-08-01 20:45 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-09-04 01:16 - 2017-08-01 20:43 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2017-09-04 01:16 - 2017-08-01 20:42 - 006288384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-09-04 01:16 - 2017-08-01 20:38 - 013441536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-09-04 01:16 - 2017-08-01 20:32 - 004596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2017-09-04 01:16 - 2017-08-01 20:32 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-09-04 01:16 - 2017-08-01 20:27 - 008076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-09-04 01:16 - 2017-08-01 20:27 - 004149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-09-04 01:16 - 2017-08-01 20:27 - 002538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-09-04 01:16 - 2017-08-01 20:27 - 000903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-09-04 01:16 - 2017-08-01 20:27 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-09-04 01:16 - 2017-08-01 20:24 - 003299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-09-04 01:16 - 2017-08-01 20:24 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-09-04 01:16 - 2017-08-01 19:19 - 000577976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-09-04 01:16 - 2017-08-01 19:19 - 000339896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-09-04 01:16 - 2017-08-01 19:19 - 000266080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-09-04 01:16 - 2017-08-01 19:19 - 000120416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-09-04 01:16 - 2017-08-01 19:18 - 000139104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-09-04 01:16 - 2017-08-01 19:15 - 020967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-09-04 01:16 - 2017-08-01 18:59 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2017-09-04 01:16 - 2017-08-01 18:58 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
2017-09-04 01:16 - 2017-08-01 18:52 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2017-09-04 01:16 - 2017-08-01 18:51 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-09-04 01:16 - 2017-08-01 18:51 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2017-09-04 01:16 - 2017-08-01 18:51 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-09-04 01:16 - 2017-08-01 18:50 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2017-09-04 01:16 - 2017-08-01 18:48 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2017-09-04 01:16 - 2017-08-01 18:47 - 000846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2017-09-04 01:16 - 2017-08-01 18:47 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2017-09-04 01:16 - 2017-08-01 18:47 - 000396288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-09-04 01:16 - 2017-08-01 18:47 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2017-09-04 01:16 - 2017-08-01 18:45 - 001985536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certmgr.dll
2017-09-04 01:16 - 2017-08-01 18:38 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2017-09-04 01:16 - 2017-08-01 18:37 - 012349440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-09-04 01:16 - 2017-08-01 18:37 - 003520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2017-09-04 01:16 - 2017-08-01 18:37 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comuid.dll
2017-09-04 01:16 - 2017-08-01 18:34 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-09-04 01:16 - 2017-08-01 16:15 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-09-04 01:16 - 2017-07-12 08:17 - 000081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-09-04 01:16 - 2017-07-12 08:15 - 002213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-09-04 01:16 - 2017-07-12 08:15 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-09-04 01:16 - 2017-07-12 08:12 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-09-04 01:16 - 2017-07-12 08:12 - 001573280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-09-04 01:16 - 2017-07-12 08:09 - 001181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-09-04 01:16 - 2017-07-12 08:01 - 000715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-09-04 01:16 - 2017-07-12 08:00 - 000095584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2017-09-04 01:16 - 2017-07-12 07:59 - 000857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-09-04 01:16 - 2017-07-12 07:59 - 000148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-09-04 01:16 - 2017-07-12 07:56 - 000277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-09-04 01:16 - 2017-07-12 07:35 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dabapi.dll
2017-09-04 01:16 - 2017-07-12 07:32 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2017-09-04 01:16 - 2017-07-12 07:32 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\frprov.dll
2017-09-04 01:16 - 2017-07-12 07:31 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2017-09-04 01:16 - 2017-07-12 07:31 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2017-09-04 01:16 - 2017-07-12 07:30 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2017-09-04 01:16 - 2017-07-12 07:29 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll
2017-09-04 01:16 - 2017-07-12 07:24 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmdisk0101.sys
2017-09-04 01:16 - 2017-07-12 07:23 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2017-09-04 01:16 - 2017-07-12 07:23 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-09-04 01:16 - 2017-07-12 07:23 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-09-04 01:16 - 2017-07-12 07:21 - 000711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-09-04 01:16 - 2017-07-12 07:17 - 000552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-09-04 01:16 - 2017-07-12 07:15 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-09-04 01:16 - 2017-07-12 07:15 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll
2017-09-04 01:16 - 2017-07-12 07:14 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-09-04 01:16 - 2017-07-12 07:13 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-09-04 01:16 - 2017-07-12 07:12 - 002750464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-09-04 01:16 - 2017-07-12 07:11 - 002154496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-09-04 01:16 - 2017-07-12 07:10 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-09-04 01:16 - 2017-07-12 07:10 - 000546304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2017-09-04 01:16 - 2017-07-12 07:06 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-09-04 01:16 - 2017-07-12 07:05 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-09-04 01:16 - 2017-07-12 07:03 - 000779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2017-09-04 01:16 - 2017-07-12 07:01 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-09-04 01:16 - 2017-07-12 06:58 - 001130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-09-04 01:16 - 2017-07-12 06:58 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-09-04 01:16 - 2017-07-12 04:49 - 000448629 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-09-04 01:16 - 2016-09-07 07:24 - 000057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-09-04 01:15 - 2017-08-01 21:32 - 000133984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-09-04 01:15 - 2017-08-01 21:31 - 007780192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-09-04 01:15 - 2017-08-01 21:29 - 000376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-09-04 01:15 - 2017-08-01 21:22 - 000360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-09-04 01:15 - 2017-08-01 21:21 - 002759712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-09-04 01:15 - 2017-08-01 21:21 - 000146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-09-04 01:15 - 2017-08-01 21:21 - 000026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-09-04 01:15 - 2017-08-01 21:17 - 000244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-09-04 01:15 - 2017-08-01 21:17 - 000241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-09-04 01:15 - 2017-08-01 21:13 - 001102176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2017-09-04 01:15 - 2017-08-01 21:13 - 000387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-09-04 01:15 - 2017-08-01 20:52 - 022569472 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-09-04 01:15 - 2017-08-01 20:50 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-09-04 01:15 - 2017-08-01 20:48 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-09-04 01:15 - 2017-08-01 20:48 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-09-04 01:15 - 2017-08-01 20:47 - 000691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-09-04 01:15 - 2017-08-01 20:47 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-09-04 01:15 - 2017-08-01 20:46 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2017-09-04 01:15 - 2017-08-01 20:46 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-09-04 01:15 - 2017-08-01 20:45 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-09-04 01:15 - 2017-08-01 20:45 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-09-04 01:15 - 2017-08-01 20:44 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-09-04 01:15 - 2017-08-01 20:43 - 000945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2017-09-04 01:15 - 2017-08-01 20:40 - 000945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-09-04 01:15 - 2017-08-01 20:40 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-09-04 01:15 - 2017-08-01 20:39 - 001281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-09-04 01:15 - 2017-08-01 20:39 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2017-09-04 01:15 - 2017-08-01 20:38 - 001589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-09-04 01:15 - 2017-08-01 20:37 - 013091328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-09-04 01:15 - 2017-08-01 20:36 - 023677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-09-04 01:15 - 2017-08-01 20:35 - 001908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-09-04 01:15 - 2017-08-01 20:34 - 001837056 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-09-04 01:15 - 2017-08-01 20:33 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2017-09-04 01:15 - 2017-08-01 20:32 - 008114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-09-04 01:15 - 2017-08-01 20:32 - 000821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
2017-09-04 01:15 - 2017-08-01 20:30 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-09-04 01:15 - 2017-08-01 20:29 - 004743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-09-04 01:15 - 2017-08-01 20:29 - 002852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-09-04 01:15 - 2017-08-01 20:29 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-09-04 01:15 - 2017-08-01 20:28 - 002895360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-09-04 01:15 - 2017-08-01 20:27 - 002695680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-09-04 01:15 - 2017-08-01 20:27 - 001984000 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-09-04 01:15 - 2017-08-01 20:27 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2017-09-04 01:15 - 2017-08-01 20:26 - 001949696 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2017-09-04 01:15 - 2017-08-01 20:26 - 001513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-09-04 01:15 - 2017-08-01 20:26 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-09-04 01:15 - 2017-08-01 20:24 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-09-04 01:15 - 2017-08-01 20:24 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-09-04 01:15 - 2017-08-01 18:51 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-09-04 01:15 - 2017-08-01 18:47 - 000661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-09-04 01:15 - 2017-08-01 18:42 - 018364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-09-04 01:15 - 2017-08-01 18:40 - 019415040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-09-04 01:15 - 2017-08-01 18:40 - 012187136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-09-04 01:15 - 2017-08-01 18:33 - 006031872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-09-04 01:15 - 2017-08-01 18:31 - 003664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-09-04 01:15 - 2017-07-12 08:16 - 000646688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-09-04 01:15 - 2017-07-12 08:02 - 002186592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-09-04 01:15 - 2017-07-12 08:02 - 000402776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-09-04 01:15 - 2017-07-12 08:01 - 000156000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2017-09-04 01:15 - 2017-07-12 08:00 - 000223072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-09-04 01:15 - 2017-07-12 08:00 - 000160608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys
2017-09-04 01:15 - 2017-07-12 07:25 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2017-09-04 01:15 - 2017-07-12 07:24 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2017-09-04 01:15 - 2017-07-12 07:23 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2017-09-04 01:15 - 2017-07-12 07:23 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2017-09-04 01:15 - 2017-07-12 07:23 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\frprov.dll
2017-09-04 01:15 - 2017-07-12 07:22 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2017-09-04 01:15 - 2017-07-12 07:21 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-09-04 01:15 - 2017-07-12 07:21 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2017-09-04 01:15 - 2017-07-12 07:20 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll
2017-09-04 01:15 - 2017-07-12 07:19 - 000488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-09-04 01:15 - 2017-07-12 07:19 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-09-04 01:15 - 2017-07-12 07:16 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-09-04 01:15 - 2017-07-12 07:15 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-09-04 01:15 - 2017-07-12 07:06 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-09-04 01:15 - 2017-07-12 07:06 - 000937984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-09-04 01:15 - 2017-07-12 07:00 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2017-09-04 01:15 - 2017-07-12 06:59 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-09-04 01:15 - 2017-07-12 06:58 - 001231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-09-04 01:15 - 2017-07-12 06:57 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-09-04 01:15 - 2017-07-12 06:56 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-09-04 01:15 - 2017-03-04 08:16 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2017-09-04 01:15 - 2017-03-04 08:14 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2017-09-04 01:15 - 2017-03-04 08:07 - 000909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-09-04 01:15 - 2017-03-04 08:05 - 001328640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2017-09-04 01:15 - 2016-08-02 10:13 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-09-04 01:14 - 2017-08-01 21:25 - 000168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2017-09-04 01:14 - 2017-08-01 21:21 - 000624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-09-04 01:14 - 2017-08-01 21:21 - 000295264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-09-04 01:14 - 2017-08-01 21:21 - 000124072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-09-04 01:14 - 2017-08-01 21:20 - 002446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-09-04 01:14 - 2017-08-01 21:20 - 000684344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-09-04 01:14 - 2017-08-01 21:20 - 000383776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-09-04 01:14 - 2017-08-01 21:20 - 000144736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-09-04 01:14 - 2017-08-01 21:20 - 000079712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-09-04 01:14 - 2017-08-01 21:17 - 001600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-09-04 01:14 - 2017-08-01 21:01 - 007218176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-04 01:14 - 2017-08-01 20:54 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-09-04 01:14 - 2017-08-01 20:52 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2017-09-04 01:14 - 2017-08-01 20:47 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-09-04 01:14 - 2017-08-01 20:47 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2017-09-04 01:14 - 2017-08-01 20:47 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2017-09-04 01:14 - 2017-08-01 20:46 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-09-04 01:14 - 2017-08-01 20:46 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-09-04 01:14 - 2017-08-01 20:46 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-09-04 01:14 - 2017-08-01 20:46 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-09-04 01:14 - 2017-08-01 20:45 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2017-09-04 01:14 - 2017-08-01 20:45 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-09-04 01:14 - 2017-08-01 20:45 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-09-04 01:14 - 2017-08-01 20:44 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-09-04 01:14 - 2017-08-01 20:43 - 000966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2017-09-04 01:14 - 2017-08-01 20:43 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-09-04 01:14 - 2017-08-01 20:42 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-09-04 01:14 - 2017-08-01 20:41 - 002222080 _____ (Microsoft Corporation) C:\WINDOWS\system32\certmgr.dll
2017-09-04 01:14 - 2017-08-01 20:40 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-09-04 01:14 - 2017-08-01 20:39 - 009129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-09-04 01:14 - 2017-08-01 20:39 - 000323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-09-04 01:14 - 2017-08-01 20:36 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2017-09-04 01:14 - 2017-08-01 20:33 - 004749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-09-04 01:14 - 2017-08-01 20:33 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2017-09-04 01:14 - 2017-08-01 20:30 - 002916864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-09-04 01:14 - 2017-08-01 20:30 - 001643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-09-04 01:14 - 2017-08-01 20:30 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-09-04 01:14 - 2017-08-01 20:28 - 001490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-09-04 01:14 - 2017-08-01 20:27 - 000716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-09-04 01:14 - 2017-08-01 20:25 - 001726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-09-04 01:14 - 2017-08-01 20:23 - 003615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-09-04 01:14 - 2017-08-01 20:23 - 000886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-09-04 01:14 - 2017-07-12 08:15 - 000101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\apisetschema.dll
2017-09-04 01:14 - 2017-07-12 08:14 - 001886896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-09-04 01:14 - 2017-07-12 08:13 - 002253664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-09-04 01:14 - 2017-07-12 07:59 - 001100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-09-04 01:14 - 2017-07-12 07:59 - 000989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-09-04 01:14 - 2017-07-12 07:59 - 000947040 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-09-04 01:14 - 2017-07-12 07:55 - 004674872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-09-04 01:14 - 2017-07-12 07:24 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\dabapi.dll
2017-09-04 01:14 - 2017-07-12 07:21 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2017-09-04 01:14 - 2017-07-12 07:19 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-09-04 01:14 - 2017-07-12 07:17 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2017-09-04 01:14 - 2017-07-12 07:16 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-09-04 01:14 - 2017-07-12 07:13 - 001478656 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-09-04 01:14 - 2017-07-12 07:12 - 000970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-09-04 01:14 - 2017-07-12 07:12 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-09-04 01:14 - 2017-07-12 07:12 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll
2017-09-04 01:14 - 2017-07-12 07:11 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-09-04 01:14 - 2017-07-12 07:10 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-09-04 01:14 - 2017-07-12 07:09 - 003291136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-09-04 01:14 - 2017-07-12 07:08 - 002861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-09-04 01:14 - 2017-07-12 07:07 - 000954880 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-09-04 01:14 - 2017-07-12 07:07 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2017-09-04 01:14 - 2017-07-12 07:03 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-09-04 01:14 - 2017-07-12 07:03 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-09-04 01:14 - 2017-07-12 07:02 - 000869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-09-04 01:14 - 2017-07-12 07:01 - 002279424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-09-04 01:14 - 2017-07-12 06:59 - 006664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-09-04 01:14 - 2017-07-12 06:59 - 002318336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-09-04 01:14 - 2017-03-04 08:57 - 000372432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 001564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 001214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-09-04 00:45 - 2017-08-04 07:31 - 000096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-09-04 00:45 - 2017-08-04 07:31 - 000034656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-09-04 00:45 - 2017-08-04 06:26 - 000192864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-09-03 22:59 - 2017-09-03 23:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-09-03 22:45 - 2017-09-03 23:12 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2017-09-03 21:13 - 2017-09-03 21:13 - 000393004 _____ C:\Users\Kacvik\Downloads\winproductkey.zip
2017-09-03 09:45 - 2017-09-04 07:43 - 000003192 _____ C:\WINDOWS\System32\Tasks\P4GIntlCtrl

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-04 13:26 - 2016-10-04 05:05 - 000002962 _____ C:\WINDOWS\System32\Tasks\Net4Switch
2017-09-04 13:25 - 2016-10-04 05:05 - 000002496 _____ C:\WINDOWS\System32\Tasks\WC3
2017-09-04 13:25 - 2016-10-04 05:05 - 000002474 _____ C:\WINDOWS\System32\Tasks\ACMON
2017-09-04 13:25 - 2016-10-04 05:05 - 000002408 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update
2017-09-04 13:24 - 2011-05-18 21:53 - 000000145 _____ C:\WINDOWS\system32\BootTime.ini
2017-09-04 13:23 - 2016-10-04 05:05 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-09-04 13:22 - 2016-07-16 08:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-09-04 13:22 - 2011-05-22 20:42 - 000000000 ____D C:\ProgramData\ICQ
2017-09-04 12:16 - 2011-05-19 00:11 - 000002513 _____ C:\Users\Kacvik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-04 10:35 - 2016-10-04 04:31 - 000000000 ____D C:\Users\Kacvik
2017-09-04 09:46 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-09-04 09:42 - 2017-07-22 14:50 - 000000000 ____D C:\WINDOWS\Minidump
2017-09-04 09:42 - 2016-10-04 04:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-09-04 09:42 - 2014-12-25 21:28 - 000000000 ____D C:\Users\Kacvik\AppData\Roaming\AVG
2017-09-04 09:42 - 2014-12-25 21:27 - 000000000 ____D C:\Program Files (x86)\AVG
2017-09-04 09:42 - 2014-12-25 21:26 - 000000000 ____D C:\ProgramData\AVG
2017-09-04 09:37 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-04 09:37 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-04 09:37 - 2016-03-06 19:07 - 000000000 ____D C:\Users\Kacvik\AppData\Local\Packages
2017-09-04 09:31 - 2016-04-18 07:48 - 000000000 ____D C:\Users\Kacvik\AppData\Local\AvgSetupLog
2017-09-04 09:31 - 2011-05-18 22:20 - 000544424 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-09-04 09:26 - 2012-07-20 20:12 - 000000000 ____D C:\Users\Kacvik\AppData\Roaming\DAEMON Tools Lite
2017-09-04 09:25 - 2016-10-04 05:22 - 000000000 ___DC C:\WINDOWS\Panther
2017-09-04 09:25 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\ModemLogs
2017-09-04 09:16 - 2011-05-18 23:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2017-09-04 09:16 - 2011-05-18 23:08 - 000000000 ____D C:\ProgramData\Nero
2017-09-04 08:59 - 2011-05-18 23:20 - 000000039 _____ C:\WINDOWS\Irremote.ini
2017-09-04 07:36 - 2013-02-26 14:53 - 000000000 ____D C:\Program Files (x86)\StepMania
2017-09-04 07:33 - 2011-05-18 22:13 - 000000000 ____D C:\ProgramData\f-secure
2017-09-04 07:28 - 2016-10-04 04:30 - 002287206 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-04 07:28 - 2016-07-17 00:25 - 000837056 _____ C:\WINDOWS\system32\perfh005.dat
2017-09-04 07:28 - 2016-07-17 00:25 - 000213804 _____ C:\WINDOWS\system32\perfc005.dat
2017-09-04 07:21 - 2011-05-18 21:53 - 000000080 _____ C:\WINDOWS\system32\Defrag.ini
2017-09-04 07:19 - 2012-01-15 19:43 - 000000000 ___RD C:\Program Files (x86)\Skype
2017-09-04 07:19 - 2012-01-15 19:43 - 000000000 ____D C:\ProgramData\Skype
2017-09-04 07:13 - 2016-03-06 19:07 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-09-04 06:14 - 2011-05-19 22:03 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-04 06:12 - 2016-10-04 04:23 - 000223816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-09-04 06:09 - 2016-07-17 00:30 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ___RD C:\Program Files\Windows Defender
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\Provisioning
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\bcastdvr
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files\Common Files\System
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-09-04 06:09 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-09-04 01:50 - 2016-07-16 13:36 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-04 00:09 - 2016-10-05 10:33 - 000000674 _____ C:\WINDOWS\Tasks\Scheduled scanning task.job
2017-09-04 00:00 - 2016-10-04 05:05 - 000003532 _____ C:\WINDOWS\System32\Tasks\Scheduled scanning task
2017-09-03 23:58 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\Registration
2017-09-03 23:56 - 2016-10-04 05:06 - 000013338 _____ C:\WINDOWS\diagwrn.xml
2017-09-03 23:56 - 2016-10-04 05:06 - 000013338 _____ C:\WINDOWS\diagerr.xml
2017-09-03 23:49 - 2011-05-18 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility
2017-09-03 23:49 - 2011-05-18 21:48 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-09-03 23:48 - 2012-05-23 18:39 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-03 23:47 - 2012-03-31 19:12 - 000000000 ____D C:\Program Files (x86)\ManyCam
2017-09-03 23:43 - 2011-05-20 21:34 - 000000000 ____D C:\Program Files (x86)\Canon
2017-09-03 23:41 - 2012-11-03 15:35 - 000000000 ___HD C:\ProgramData\CanonIJScan
2017-09-03 23:41 - 2011-05-20 21:56 - 000000000 ____D C:\Users\Kacvik\AppData\Roaming\Canon
2017-09-03 23:36 - 2013-09-05 12:29 - 000000000 ____D C:\Users\Kacvik\AppData\Local\Sony
2017-09-03 23:35 - 2015-11-07 13:28 - 000000000 ____D C:\Program Files (x86)\NCH Software
2017-09-03 23:34 - 2016-10-04 04:31 - 000000000 ____D C:\Users\mamka
2017-09-03 23:34 - 2015-07-06 16:06 - 000000000 ____D C:\Program Files (x86)\T-Mobile
2017-09-03 23:33 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-09-03 23:18 - 2013-11-17 20:03 - 000000000 ____D C:\Users\Kacvik\AppData\Local\mystart_ad
2017-09-03 23:08 - 2011-05-20 21:54 - 000000000 ____D C:\ProgramData\ScanSoft
2017-09-03 22:54 - 2011-05-19 00:20 - 000000000 ____D C:\Program Files (x86)\GRETECH
2017-09-03 22:39 - 2016-10-04 05:05 - 000003168 _____ C:\WINDOWS\System32\Tasks\P4G Sidebar
2017-09-03 22:30 - 2015-01-25 12:49 - 000000000 ____D C:\Users\Kacvik\AppData\Local\Samsung
2017-09-03 22:30 - 2015-01-25 12:12 - 000000000 ____D C:\ProgramData\Samsung
2017-09-03 22:30 - 2015-01-25 12:11 - 000000000 ____D C:\Users\Kacvik\AppData\Roaming\Samsung
2017-09-03 22:30 - 2015-01-25 12:09 - 000000000 ____D C:\Program Files (x86)\Samsung
2017-08-15 04:32 - 2013-07-19 12:08 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-15 04:23 - 2011-05-20 21:56 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-10 17:07 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-10 17:06 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

==================== Files in the root of some directories =======

2007-06-12 09:34 - 2007-06-12 09:34 - 000035822 _____ () C:\Program Files (x86)\Common Files\ASPG_icon.ico
2008-05-22 08:35 - 2008-05-22 08:35 - 000051962 _____ () C:\Program Files (x86)\Common Files\banner.jpg
2009-04-08 10:31 - 2009-04-08 10:31 - 000106496 _____ () C:\Program Files (x86)\Common Files\CPInstallAction.dll
2008-08-11 21:45 - 2008-08-11 21:45 - 000155648 _____ (ASUS) C:\Program Files (x86)\Common Files\MSIactionall.dll
2011-05-21 22:44 - 2015-03-02 16:51 - 000000159 _____ () C:\Users\Kacvik\AppData\Roaming\default.rss
2011-05-21 22:44 - 2011-05-21 22:44 - 000000000 _____ () C:\Users\Kacvik\AppData\Roaming\downloads.m3u
2012-01-18 16:43 - 2013-10-23 08:54 - 000019456 _____ () C:\Users\Kacvik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-09-04 09:46 - 2017-09-04 09:46 - 000000017 _____ () C:\Users\Kacvik\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
2017-09-04 08:27 - 2010-03-25 21:29 - 000333144 ____R (CANON INC.) C:\Users\Kacvik\AppData\Local\Temp\uninstall.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-09-04 05:46

==================== End of FRST.txt ============================
Přílohy
Addition.rar
(11.44 KiB) Staženo 67 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119490
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomalé spouštění a zahlcený systém

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Run: [NPSStartup] => [X]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe (No File)
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={664E4A84-761E-435F-8A28-DF0D30CBCFC0}&mid=8707c0363b3847cca7f0f1867691f6ab-94dc70cfae4024ef8a110d2a32403b899fe1754a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2016-04-18 08:18:19&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen= ... ch_5007&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={664E4A84-761E-435F-8A28-DF0D30CBCFC0}&mid=8707c0363b3847cca7f0f1867691f6ab-94dc70cfae4024ef8a110d2a32403b899fe1754a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2016-04-18 08:18:19&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
oolbar: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
FF Extension: (ICQ Toolbar) - C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-26] [not signed]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
C:\Program Files (x86)\Skype\Toolbars
C:\WINDOWS\system32\ApnDatabase.xml
C:\Users\Kacvik\AppData\Local\Temp
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {05E4BCA3-6F56-46C2-896A-F2F3D8A08983} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {05EB40A5-5573-4BC4-B43B-8E0AC23412B6} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {1337EDF1-A6D9-4DD3-86FE-CB764E587EA0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {2AB67DFE-E59C-4836-9F9B-7C2FFADF1E9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ATTENTION
Task: {2FF3D000-C79F-4408-BB95-F5F4F8D9C22B} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {43122259-0D12-4915-9DD5-942DBE41C400} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {447187D6-89EC-43A8-B4C7-D40BA222386C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {4CF80502-B56D-4C62-9258-EA309928D383} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {5150DD09-8001-4EFA-8679-899B4D8F520A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core1d2587866e57299 => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {64D36292-6281-45CA-88DF-E39BD565CECA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {6E7577AB-3961-48EE-A707-F21D9C5219AE} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {806CB9EE-A25F-4D27-97A6-B3DA2A12DEC2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ATTENTION
Task: {86D91797-B2C2-4C6A-931B-889FB3FCC1D9} - System32\Tasks\{1772EC3C-696E-4892-B530-046CEC50D295} => C:\Windows\system32\pcalua.exe -a C:\Users\Kacvik\Downloads\install_centrum_cz_icq7.exe -d C:\Users\Kacvik\Downloads
Task: {9E37A25E-A4C3-4A2C-B30F-C5E56614A20D} - \CCleanerSkipUAC -> No File <==== ATTENTION
Task: {B255517E-F0A7-43B9-9950-5DA7C62C5D4E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {C920CDA3-7328-44D0-8B40-9F6F4AD700CC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {CC8DB103-2E15-4F7F-BFA8-0C004D687329} - \ASUSControlDeck -> No File <==== ATTENTION
Task: {DB258641-D05A-4913-BAB7-8231223506A7} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {EF20CFF7-F997-4C23-8617-796B2B42F6A5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core.job => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000UA.job => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ceddrik
Návštěvník
Návštěvník
Příspěvky: 68
Registrován: 06 zář 2007 18:13
Bydliště: Ostrava
Kontaktovat uživatele:
Kontaktovat uživatele ceddrik

Re: Pomalé spouštění a zahlcený systém

#7 Příspěvek od ceddrik »

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-08-2017
Ran by Kacvik (04-09-2017 15:14:30) Run:1
Running from C:\Users\Kacvik\Desktop
Loaded Profiles: Kacvik (Available Profiles: Kacvik & mamka & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [NPSStartup] => [X]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe (No File)
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={664E4A84-761E-435F-8A28-DF0D30CBCFC0}&mid=8707c0363b3847cca7f0f1867691f6ab-94dc70cfae4024ef8a110d2a32403b899fe1754a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2016-04-18 08:18:19&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen= ... ch_5007&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={664E4A84-761E-435F-8A28-DF0D30CBCFC0}&mid=8707c0363b3847cca7f0f1867691f6ab-94dc70cfae4024ef8a110d2a32403b899fe1754a&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2016-04-18 08:18:19&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
oolbar: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
FF Extension: (ICQ Toolbar) - C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-26] [not signed]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
C:\Program Files (x86)\Skype\Toolbars
C:\WINDOWS\system32\ApnDatabase.xml
C:\Users\Kacvik\AppData\Local\Temp
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {05E4BCA3-6F56-46C2-896A-F2F3D8A08983} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {05EB40A5-5573-4BC4-B43B-8E0AC23412B6} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {1337EDF1-A6D9-4DD3-86FE-CB764E587EA0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {2AB67DFE-E59C-4836-9F9B-7C2FFADF1E9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ATTENTION
Task: {2FF3D000-C79F-4408-BB95-F5F4F8D9C22B} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {43122259-0D12-4915-9DD5-942DBE41C400} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {447187D6-89EC-43A8-B4C7-D40BA222386C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {4CF80502-B56D-4C62-9258-EA309928D383} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {5150DD09-8001-4EFA-8679-899B4D8F520A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core1d2587866e57299 => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {64D36292-6281-45CA-88DF-E39BD565CECA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {6E7577AB-3961-48EE-A707-F21D9C5219AE} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {806CB9EE-A25F-4D27-97A6-B3DA2A12DEC2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ATTENTION
Task: {86D91797-B2C2-4C6A-931B-889FB3FCC1D9} - System32\Tasks\{1772EC3C-696E-4892-B530-046CEC50D295} => C:\Windows\system32\pcalua.exe -a C:\Users\Kacvik\Downloads\install_centrum_cz_icq7.exe -d C:\Users\Kacvik\Downloads
Task: {9E37A25E-A4C3-4A2C-B30F-C5E56614A20D} - \CCleanerSkipUAC -> No File <==== ATTENTION
Task: {B255517E-F0A7-43B9-9950-5DA7C62C5D4E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {C920CDA3-7328-44D0-8B40-9F6F4AD700CC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {CC8DB103-2E15-4F7F-BFA8-0C004D687329} - \ASUSControlDeck -> No File <==== ATTENTION
Task: {DB258641-D05A-4913-BAB7-8231223506A7} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {EF20CFF7-F997-4C23-8617-796B2B42F6A5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core.job => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000UA.job => C:\Users\Kacvik\AppData\Local\Google\Update\GoogleUpdate.exe

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NPSStartup => value removed successfully
C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe => not found.
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} => key removed successfully
HKLM\Software\Classes\CLSID\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} => key not found.
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} => key removed successfully
HKLM\Software\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19} => key not found.
HKU\S-1-5-21-3088349659-500496727-3994943973-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} => key removed successfully
HKLM\Software\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => key not found.
oolbar: HKU\S-1-5-21-3088349659-500496727-3994943973-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File => Error: No automatic fix found for this entry.
HKLM\Software\Classes\PROTOCOLS\Handler\skype4com => key removed successfully
HKLM\Software\Classes\CLSID\{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} => key not found.
C:\Users\Kacvik\AppData\Roaming\Mozilla\Firefox\Profiles\xjkfozud.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} => moved successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl => key removed successfully
C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => moved successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
C:\WINDOWS\system32\ApnDatabase.xml => moved successfully
C:\Users\Kacvik\AppData\Local\Temp => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => key removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => key removed successfully
HKLM\Software\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC} => key not found.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => key removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{05E4BCA3-6F56-46C2-896A-F2F3D8A08983} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{05E4BCA3-6F56-46C2-896A-F2F3D8A08983} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{05EB40A5-5573-4BC4-B43B-8E0AC23412B6} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{05EB40A5-5573-4BC4-B43B-8E0AC23412B6} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1337EDF1-A6D9-4DD3-86FE-CB764E587EA0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1337EDF1-A6D9-4DD3-86FE-CB764E587EA0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AB67DFE-E59C-4836-9F9B-7C2FFADF1E9A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AB67DFE-E59C-4836-9F9B-7C2FFADF1E9A} => key removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2FF3D000-C79F-4408-BB95-F5F4F8D9C22B} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2FF3D000-C79F-4408-BB95-F5F4F8D9C22B} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{43122259-0D12-4915-9DD5-942DBE41C400} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{43122259-0D12-4915-9DD5-942DBE41C400} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{447187D6-89EC-43A8-B4C7-D40BA222386C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{447187D6-89EC-43A8-B4C7-D40BA222386C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4CF80502-B56D-4C62-9258-EA309928D383} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CF80502-B56D-4C62-9258-EA309928D383} => key removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5150DD09-8001-4EFA-8679-899B4D8F520A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5150DD09-8001-4EFA-8679-899B4D8F520A} => key removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core1d2587866e57299 => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core1d2587866e57299 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64D36292-6281-45CA-88DF-E39BD565CECA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64D36292-6281-45CA-88DF-E39BD565CECA} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E7577AB-3961-48EE-A707-F21D9C5219AE} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E7577AB-3961-48EE-A707-F21D9C5219AE} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{806CB9EE-A25F-4D27-97A6-B3DA2A12DEC2} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{806CB9EE-A25F-4D27-97A6-B3DA2A12DEC2} => key removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Defender\Windows Defender Verification => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{86D91797-B2C2-4C6A-931B-889FB3FCC1D9} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86D91797-B2C2-4C6A-931B-889FB3FCC1D9} => key removed successfully
C:\WINDOWS\System32\Tasks\{1772EC3C-696E-4892-B530-046CEC50D295} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{1772EC3C-696E-4892-B530-046CEC50D295} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9E37A25E-A4C3-4A2C-B30F-C5E56614A20D} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9E37A25E-A4C3-4A2C-B30F-C5E56614A20D} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B255517E-F0A7-43B9-9950-5DA7C62C5D4E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B255517E-F0A7-43B9-9950-5DA7C62C5D4E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C920CDA3-7328-44D0-8B40-9F6F4AD700CC} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C920CDA3-7328-44D0-8B40-9F6F4AD700CC} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CC8DB103-2E15-4F7F-BFA8-0C004D687329} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CC8DB103-2E15-4F7F-BFA8-0C004D687329} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUSControlDeck => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DB258641-D05A-4913-BAB7-8231223506A7} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB258641-D05A-4913-BAB7-8231223506A7} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EF20CFF7-F997-4C23-8617-796B2B42F6A5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EF20CFF7-F997-4C23-8617-796B2B42F6A5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000Core.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3088349659-500496727-3994943973-1000UA.job => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 57588548 B
Java, Flash, Steam htmlcache => 581 B
Windows/system/drivers => 1112604 B
Edge => 592 B
Chrome => 261966502 B
Firefox => 79360549 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 16674 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 69252 B
NetworkService => -656 B
Kacvik => 18771583 B
mamka => 267335 B
DefaultAppPool => 16674 B

RecycleBin => 115014 B
EmptyTemp: => 399.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:15:19 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119490
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomalé spouštění a zahlcený systém

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
ceddrik
Návštěvník
Návštěvník
Příspěvky: 68
Registrován: 06 zář 2007 18:13
Bydliště: Ostrava
Kontaktovat uživatele:
Kontaktovat uživatele ceddrik

Re: Pomalé spouštění a zahlcený systém

#9 Příspěvek od ceddrik »

Spouštění se zrychlilo a systém začíná zvládat více operací najednou :-D děkuji moc :-)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119490
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomalé spouštění a zahlcený systém

#10 Příspěvek od Rudy »

OK. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“